Google's reCAPTCHA v2 just labor exploitation, boffins say
www.theregister.com
Web puzzles don't protect against bots, but humans have spent 819 million unpaid hours solving them
  • coyotino [he/him]@beehaw.orgEnglish
    2·
    4 months ago

    This seems like the critical part to me:

    The paper, released in November 2023, notes that even back in 2016 researchers were able to defeat reCAPTCHA v2 image challenges 70 percent of the time. The reCAPTCHA v2 checkbox challenge is even more vulnerable – the researchers claim it can be defeated 100 percent of the time.

    reCAPTCHA v3 has fared no better. In 2019, researchers devised a reinforcement learning attack that breaks reCAPTCHAv3’s behavior-based challenges 97 percent of the time.

    So it isn’t even effective at deterring bots? Then what the hell was all this for?

    • prof@infosec.pub
      3·
      4 months ago

      Introducing a Captcha on a form on my website basically blocked bots 100% of the time. It’s arguably good enough from a practical standpoint.

      If someone really wants to exploit my site, then they will find a way. You can only make it harder but never truly impossible if you don’t want to dispose of all convenience.