Trainer 
I really like it when hacking turns to be like: Well, I just used your products built for this exact purpose. It's your move.
This projet defeat ReCaptcha with 91% accuracy 
. How? You might ask. They ask for the audio challenge, dl the mp3, forward it to Google Speech2Text API and submit the answer back... and it works 
https://buff.ly/2CO6s7V pic.twitter.com/2wbksku9OK
-
-
-
Haha indeed ^^
-
Except that google always blocks audio requests from IPs they don’t remotely trust
-
really, with all these android devices walking around with google assistant on it and therefore need to access the API? You can't find a solution to blocked IP problem?
End of conversation
New conversation -
-
-
Élégant, je suis fan. :)
-
La classe, oui ^^
End of conversation
New conversation -
-
-
And then ReCaptcha learns from the text and transfer its learning to other Google products like Speech 2 text. AI that learns from itself, I'd like to know how Google handles that
-
Do you want Skinet? Because that's how we get Skinet
-
Is Skinet the p r 0 n version of Skynet? Epic. 10/10 would buy.
-
No, it's like Skynet except that the Terminators are on skis.
End of conversation
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Recaptcha was never a security product. It's always been a platform for training machine learning.
- 1 more reply
New conversation -
-
-
@reversemode broke it ~10 years ago https://tech.slashdot.org/story/08/05/02/1426253/googles-audio-captcha-falls-to-automated-attack … He had a nice and detailed blog post about it but I think the domain doesn't exists anymore :(
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Check out Buster! It is a browser extension I've made that uses the same method to solve CAPTCHAs.https://github.com/dessant/buster
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
« This attack vector was deemed out of scope for the bug bounty program. » That's mean!
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Would be *awesome* if someone made a browser extension for this. One interesting thing to note: I always pick the audio challenge and 50% of the time I can type in anything close to what was said and it passes
-
If you mean a captcha-solver, there was WebVisum. It was pretty popular in the blind/low-vision community since damn near every forum captcha'd up their boards.
-
Ah, I meant based on the github repo in the original tweet! Would probably work really well.
-
Basically the whole idea of CAPTCHA is wrong and we need to phase it out. Test for legitimacy, not sweating-breathing-living-ness.
-
Sure, that's a great idea - but captcha is currently here to stay so I feel we have to find solutions for the short term issue, while Google resolves it long term (ReCaptcha v3)
-
I pretty much find any and all methods defeating captchas as the most moral thing, for as long as captchas are the things bloking friends and family of mine from performing tasks they need to do on the web. It's why I supported WebVisum.
-
Once robots can always immediately and trivially solve captchas, humans will be forced to abandon that scourge of the web and deal with the real problem, hopefully more face-on.
-
And that's not even taking into account that captcha-farming is a financially worthwhile enterprise, literally paying people in south east asia pennies to enter the captchas rather than bots..
- 4 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.