this post was submitted on 27 Sep 2024
185 points (97.0% liked)

Technology

59651 readers
2632 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Anyone who has been surfing the web for a while is probably used to clicking through a CAPTCHA grid of street images, identifying everyday objects to prove that they're a human and not an automated bot. Now, though, new research claims that locally run bots using specially trained image-recognition models can match human-level performance in this style of CAPTCHA, achieving a 100 percent success rate despite being decidedly not human.

ETH Zurich PhD student Andreas Plesner and his colleagues' new research, available as a pre-print paper, focuses on Google's ReCAPTCHA v2, which challenges users to identify which street images in a grid contain items like bicycles, crosswalks, mountains, stairs, or traffic lights. Google began phasing that system out years ago in favor of an "invisible" reCAPTCHA v3 that analyzes user interactions rather than offering an explicit challenge.

Despite this, the older reCAPTCHA v2 is still used by millions of websites. And even sites that use the updated reCAPTCHA v3 will sometimes use reCAPTCHA v2 as a fallback when the updated system gives a user a low "human" confidence rating.

top 50 comments
sorted by: hot top controversial new old
[–] PenisDuckCuck9001@lemmynsfw.com 26 points 1 month ago* (last edited 1 month ago) (2 children)

I fucking hate these. I've seen old people that don't know any better get stuck on these for at least 30 minutes.

[–] pyre@lemmy.world 20 points 1 month ago (4 children)

it's super ableist. if someone has poor vision or colorblindness chances are they're going to miss things.

[–] Dozzi92@lemmy.world 22 points 1 month ago (2 children)

I have regular everything and I still fuck them up. "click the ones with a fire hydrant". But a tiny piece of fire hydrant is spilling into another box. Does it count? Does it not count? Good luck!!

I had one the other day that was deep fried jpegs to the max. Like, what the fuck am I supposed to do.

[–] Lost_My_Mind@lemmy.world 4 points 1 month ago

Sprinkle powdered sugar on them. Delicious deep fried jpegs.

load more comments (1 replies)
[–] Dark_Arc@social.packetloss.gg 2 points 1 month ago

FYI as someone that's colorblind these captcha's don't seem to have anything specially relevant to being colorblind in them.

Now if they start showing me a dozen traffic cones and asking me to pick the green one, we might have a problem.

load more comments (2 replies)
[–] communism@lemmy.ml 15 points 2 months ago (3 children)

And yet I can't beat the CAPTCHAs because reCAPTCHA doesn't like VPNs lol

[–] Draconic_NEO@lemmy.world 7 points 2 months ago

Captcha these days isn't even really a CAPTCHA in the traditional sense since most of the work it does is based on filtering of IP and browser fingerprinting, with a certain level of gamification because the goal is not just to keep out the people they fight against, but to waste their time, would work great if it didn't waste normal people's time, while real bad actors have easy ways to get around it.

I was going to say I’ve straight up just left whatever website I was trying to access because I was stuck in some endless loop of clicking on street crossings, buses, bikes, and street lights.

[–] mosiacmango@lemm.ee 13 points 2 months ago* (last edited 2 months ago) (8 children)

This is actually a good sign for self driving. Google was using this data as a training set for Waymo. If AI is accurately identifying vehicles and traffic markings, it should be able to process interactions with them easier.

[–] iAmTheTot@sh.itjust.works 11 points 2 months ago (5 children)

As I understand it, the point of those captchas was never really "bots can't identify these things" (though you're right on that it was used to train). They use cursor movement, clicks, and other behaviours while you're solving it to detect if you are a bot or not.

[–] Grimy@lemmy.world 14 points 2 months ago

The image choosing was always just to train their own bots

[–] Takumidesh@lemmy.world 4 points 2 months ago* (last edited 2 months ago) (1 children)

It's a combination.

Most captchas goals generally aren't 100% prevention, it's to put a workload in front, this makes spamming the site cost money, a bankrolled attempt could just as easily outsource the captchas to real humans.

load more comments (1 replies)
load more comments (3 replies)
[–] grue@lemmy.world 5 points 2 months ago

The annoying thing is that they held us hostage for our free labor, but the results are proprietary for Google's benefit only.

That training data ought to be forced to be made freely available to the public, since we're the ones who actually created it.

load more comments (6 replies)
[–] Draconic_NEO@lemmy.world 13 points 1 month ago* (last edited 1 month ago)

CAPTCHA doesn't stop bots, and let us be honest, it never really did. It frustrated the hell out of people though, and caused people to waste time doing these challenges. Meanwhile even before AI bad actors and bots could get past it simply by using captcha solver services run by exploited humans solving captchas for the service.

It's a display of security theater meant to make normies feel safe but in reality doesn't stop most bad actors.

[–] madjo@feddit.nl 13 points 1 month ago* (last edited 1 month ago)

Meanwhile I sometimes fail those. I have been locked out of applications because I missed a square of a bus, or perhaps because I like to be efficient in my mouse cursor movements. I ducking hate CAPTCHAs.

[–] Blackmist@feddit.uk 13 points 1 month ago (1 children)

Aren't these Captchas designed to get training data for AI models anyway?

"System does what it was designed to do" doesn't feel that surprising...

[–] aidan@lemmy.world 3 points 1 month ago (1 children)

Aren’t these Captchas designed to get training data for AI models anyway?

Yes and no, the captchas are just meant to be hard for computers to solve but easier for humans. People saw that, and thought that "if we're making people do this might as well have them do something useful" not meant to be malevolent- and the purpose is still stopping bots, training them is a side-effect.

[–] finitebanjo@lemmy.world 3 points 1 month ago (5 children)

No, you're wrong, the Traffic Light examples ARE specifically to gather data to train models. Being a good Captcha was just a byproduct of that. If people just wanted a good captcha they wouldn't need hundreds of millions of photos of street lights and bicycles.

load more comments (5 replies)
[–] KillingTimeItself@lemmy.dbzer0.com 11 points 1 month ago (4 children)

the new ones suck so fucking much though

load more comments (4 replies)
[–] samus12345@lemmy.world 10 points 2 months ago (2 children)

So can we stop using those damn things? They're super annoying!

[–] ohellidk@sh.itjust.works 2 points 2 months ago

I'm kind of hoping the AI permanently beats them. I hate them too.

load more comments (1 replies)
[–] finitebanjo@lemmy.world 9 points 1 month ago

Technically the "correct" answer is set by the highest percentage of people choosing it. EG: 19 people select Box A and 1 selects Box B, then the machine decides Box A is in fact correct.

That means these AI could be selecting the wrong answers for all anybody knows, if enough of them are answering the prompts, and still passing.

[–] rainman@lemmy.myserv.one 8 points 1 month ago (7 children)

I fail more of those checks then these AI bots do. Surreal.

[–] sin_free_for_00_days@sopuli.xyz 3 points 1 month ago

It seems like every other captcha I get has a picture of a moped and asks to click for a motorcycle. When I don't click on the moped it says I'm wrong. Pisses me off.

load more comments (6 replies)
[–] Teknikal@eviltoast.org 6 points 1 month ago (1 children)

I just close the page usually if I see one of these ones, I don't have the patience to click all the boxes and then it just sends you a different one.

[–] Dozzi92@lemmy.world 3 points 1 month ago

Unfortunately they're on pages that I absolutely need to get into because my money is stored behind them. I cannot stand them, and I generally agree with you, if some random site has me doing a captcha in leaving.

[–] tarius@lemmy.ml 4 points 2 months ago (3 children)

Buster is awesome to get past recaptcha. I use it with my own Speech to Text API key since its free from Google. Using Google to beat Google.

https://github.com/dessant/buster

load more comments (3 replies)
[–] devilish666@lemmy.world 4 points 1 month ago (2 children)

So...if CAPTCHA are already beaten by bots what's the point if it still exists ? to mock our weakness ?
In the old days CAPTCHA could do its job, but nowadays nah....even crawler/scrapper/meta bots can bypass it easily.
The real question is why do we as real humans still often fail to beat CHAPTCHA? Are we less human? Are we really robots in CHAPTCHA perspective ?

[–] queue@lemmy.blahaj.zone 6 points 1 month ago (1 children)

To train Google/Cloudflare's AI tools, and to double check against DDOS. That's it.

[–] sudoer777@lemmy.ml 4 points 1 month ago (1 children)

So now we're going to have AI training other AIs

load more comments (1 replies)
load more comments (1 replies)
[–] nucleative@lemmy.world 3 points 1 month ago

There is a Russian captcha solver bot called xevil that costs under $100 (I think, last time I looked) that has been able to solve nearly all captchas for years. You just have to supply it with relatively expensive proxy IP addresses because Google rate limits solve attempts.

So the title of this article has been true for a long long time. Capatchas are absolutely useless except against poor or uninformed script kiddies.

[–] sirico@feddit.uk 2 points 2 months ago (7 children)

When it's asking for motorcycles but it's clearly a scooter

[–] ripcord@lemmy.world 3 points 2 months ago (17 children)

Or, like, "there's the bottom 10% of a traffic light in this one. Do I click that box? Ia that supposed to count?"

load more comments (17 replies)
load more comments (6 replies)
[–] AA5B@lemmy.world 2 points 1 month ago

That’s suspicious - I can’t pass 100%. here’s a new captcha for you: make the user do 100 in a row

  • 100% is ai
  • <50% is dumb “ai”
  • in between is a person
[–] pixxelkick@lemmy.world 2 points 2 months ago (6 children)

Well yeah, I'd hope so, that's the entire point.

Catcha's data collection always was with the intent for training ai on these skills. That's "the point" of them.

It's reasonable to expect that the older version of captchas can now be beaten by modern ai, because they're often literally trained on that exact data to beat it.

Captcha effectively is free to use on websites as a tool because the data collection is the "payment", they then license that data out to people like OpenAI to train with for stuff like image recognition.

It's why ai is progressing so fast, captchas are one of humanity's long term collected data silos that are very full now.

We are going to have to keep progressing the complexity of catches as it will be the only way to catch modern AIs, and in turn it will collect more data to improve it.

[–] MIDItheKID@lemmy.world 2 points 2 months ago

Yeah, my understanding is that these capchas were made to harvest data to use for AI/Autopilot driven cars. That's why they are always having you identify motorcycles, bycicles, crosswalks, stoplights, busses, etc. It's all stuff that automatic driving cars have had a hard time identifying.

load more comments (5 replies)
[–] GoofSchmoofer@lemmy.world 2 points 1 month ago (5 children)

I can see a future where the Internet is completely run by bots and AI to the point where no human actually uses the Internet anymore.

It's like an island that gets overrun with rats - there are just too many to deal with so you leave.

[–] yamanii@lemmy.world 3 points 1 month ago

Basically Cyberpunk, people only interact with the night city intranet because the global internet has been taken over by AIs.

[–] lando55@lemmy.world 2 points 1 month ago

Some believe this happened years ago. Check out Dead Internet Theory.

[–] nikaaa@lemmy.world 2 points 1 month ago

Yeah, I predict that in the future, you can't expect that content on the internet is written by humans. If you go to the internet, then it will probably not be to connect to other humans. Maybe you want to know something that a bot can tell you or you have some administrative task to fulfill, like filing a form.

load more comments (2 replies)
[–] JoMomma@lemm.ee 2 points 2 months ago (7 children)

But, I cannot pass those 50% of the time... what does that mean?

load more comments (7 replies)
load more comments
view more: next ›