For a long time my go-to spam prevention solution was invisible fields like "username", "password" in the registration form -- if you fill them in, you must be a bot. It used to be very effective, but increasingly less so recently, probably because bots are now browser-based.
-
-
Show this thread
-
Now I'm using ad-hoc questions visible to users. Trivial to break if a human were to write a script specific to my forms, but that's not part of my threat profile.
Show this thread
End of conversation
New conversation -
-
-
In addition, I checked a box confirming I am a human... and got a response message telling me I was incorrect!
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
The current version of reCAPTCHA can be easily bypassed using Speech to Text, see https://github.com/ecthros/uncaptcha2 …
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
https://github.com/ecthros/uncaptcha … 1) switch to audio 2) use speech recognition to solve 3) ???? 4) Profit! or Abuse!
- Show replies
New conversation -
-
-
Spammers have definitely made more headway in breaking Recaptcha. If Uncaptcha 2, can break it with 91% accuracy, how farther do you think spammers will go? https://github.com/ecthros/uncaptcha2 …
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
... and the user experience for *humans* using reCAPTCHA is getting worse and worse. Went from taking <5 secs to frequently taking >30 secs.
-
There is an article explaining how captchas are using us to label training data for self driving cars. Dont fully understand it because I've tried just clicking random junk and it doesnt let me pass. I'm sure it has a few times though.
- Show replies
New conversation -
-
-
This Tweet is unavailable.
-
Relevant: https://xkcd.com/810/
End of conversation
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.