CAPTCHAs May Soon Go Extinct

Gizmodo ^ | John Biggs

[martin_fierro]

[Pilsner]

[Paal Gulli]

"Lots of websites blocking VPN users. Constantly now have to opt in to almost every website to gain access with Apple’s new iOS update. Annoying as effk."

What Cloudfare does is blocking without telling you they're blocking you. They offer a puzzle to be solved but which is in fact unsolvable. First of all, sometimes the logic required is complex but there are no instructions, no "rules" provided. There's no way to tell when you gave the right answers and when the wrong answers. You just keep getting an arbitrary (and infuriating) "Please try again." And sometimes there is no right answer. They're just going to keep screwing with you until you get frustrated and go away.

Which was the point all along. It's Denial Of Service posing as a security measure.

[daniel1212]

Ping

[grey_whiskers]

CAPTCHAs are also very easy to parody. The funniest one I saw was a check box picture type, called “Find the Thot”. It had screen after screen full of pictures of selfies, TikTok girls, twerkers, etc. No matter how many you checked, there would be another page.

ROFLMAO!

[Pollard]

This tech would be used for surveillance.

CAPTCHA is a google technology so like everything google, it's already used for tracking.

CAPTCHA 3 doesn't have pictures to click on. I won't run CAPTCHA on my websites because it requires registering the site with google and placing google code in the website's code. I use honey pots, a hidden field that only bots will fill in. I also used the question/answer thing, answer 4 + 5 etc. I still get a few human spammers.

[Pollard]

I hate the two factor authorization, especially if it only uses text messages. We don’t even get a cell phone signal where I live unless we go outside and stand in a certain spot with the phone and that only works on good reception days. There’s one website I use that forces two factor auth but they will do it by email. Problem is, it’s only valid for two minutes but it takes longer than that for the email to come in most times.

[Pollard]

Cloudfare’s reCAPTCHA is less about protecting websites and more about denying service to anyone using an anonymizing browser or other method to deny them the ability to identify and track them.

A lot of websites are denying VPN traffic. Try going to etsy.com while using a VPN and you'll get a blank white screen. Many of them, like google/youtube will make you do two factor auth if you're using a VPN. It's all becoming a pita simply to surf, especially anonymously.

[discostu]

Much as a hate CAPTCHAs nothing that involves a dongle will gain traction in this modern world where half the web browsing is done by phone.

[dfwgator]

I kinda like clicking on all the pictures containing a traffic light.

I like traffic lights.

[Rebelbase]

Those who want CAPTCHA gone just need to find away to tie it to racism then POOF! it vanishes.

[Vermont Lt]

I love my youbi key.

[Starcitizen]

They lose my business and I move on.
————
Kinda hard to move on when banks or HR portals or software companies use it

Hate the whole dongle thing (or 2FA code generator device banks used to use) f

[beef]

“So, replace free CAPTCHAs with dongles you have to pay for”

And uniquely identify you. One of my clients uses these.

“These keys could also pass minimal identifying information onto the website in question but most key manufacturers claim no data changes hands.”

This is where I need Jennifer Lawrence doing her “Yea right” thing.

[Starcitizen]

Capital One does that. 2FA if VPN

Credit Karma: no access

Chase does not. (FaceID sometimes doesn’t work when using VPN)

Time tracker app my employer uses does not work with VPN

Internal company portal doesn’t work with VPN

[Starcitizen]

Yeah banks used to issue physical code generators a while back. They sucked.

I’ll rather deal with email or SMS for 2FA

[Openurmind]

I move on... If my bank will not let me access my account without it I find a new bank that does. One of the reasons I just gave up 10 years worth of consistent Domain ownership because my host implemented 2FA to access my CPanel and would not take it off.

Took me longer to go through the email crap to access my CPanel than how long it would have taken me to go make the quick changes needing done. They secured me right out as a customer. So I moved on. There is such a thing as too much making it very inconvenient for your customers.

If more stuck to their guns and raised hell or moved on this crap would stop. “Why are you leaving?” Because I am sick of your 2FA crap. But instead most bend just over and take it like Sheep. And this is why this country is screwed up and companies are taking advantage of and abusing their customers.

[Openurmind]

And then there again is the “one size fits all” mentality. Not everyone has 100% connection time with their phone or even computer. But in their mind everyone does, so it should not be a problem. But they are wrong, and it is a problem for some. Not everyone wears the same size shoe.