Slashdot Mirror


This Machine Kills Captchas (vice.com)

New submitter dmoberhaus writes: It is with a heavy heart that I must tell you that an artificial intelligence has finally cracked a widely used tool that was literally made to differentiate humans from robots: the CAPTCHA. CAPTCHAs are the annoying puzzles that might ask you to rewrite a piece of distorted text or click on all the automobiles in a photograph to log on to sites like PayPal. According to research published today in Science, a new type of AI was able to solve certain types of CAPTCHA with up to 66.6 percent accuracy. To put this in perspective, humans can solve the same type of CAPTCHA with about 87 percent accuracy due to multiple interpretations of some examples and a CAPTCHA is considered broken if a bot can pass it 1 percent of the time.

101 comments

  1. What? by OverlordQ · · Score: 1

    > a CAPTCHA is considered broken if a bot can pass it 1 percent of the time.

    Who decided that? That's well within the realm of random dumb luck.

    --
    Your hair look like poop, Bob! - Wanker.
    1. Re:What? by hackwrench · · Score: 1

      There are a number of parameters missing here, like how fast. If a bot can solve a CAPTCHA %1 as fast as a human being, the utility of the CAPTCHA goes way down and the details of all this is lacking.

    2. Re:What? by gnick · · Score: 2

      > a CAPTCHA is considered broken if a bot can pass it 1 percent of the time.

      Who decided that? That's well within the realm of random dumb luck.

      Dumb luck??? With 52 potential characters and a 6-character CAPTCHA, dumb luck should get it right about 50 out of every trillion tries. How is that 1%?

      --
      He's getting rather old, but he's a good mouse.
    3. Re:What? by Anonymous Coward · · Score: 0

      Really? You think any random guess at a captcha has a 1% chance of succeeding? You think there are literally 100 total possibilities for captchas?

    4. Re:What? by Anonymous Coward · · Score: 2, Informative

      Nowadays a lot of captchas are just a 9x9 grid of images where you have to choose which ones match. 1/2^9 is 1/512, but realistically you only click 2 or 3 so 1/(9 choose 2 + 9 choose 3) = 1/120. Not much different from 1%.

    5. Re:What? by Calydor · · Score: 3, Funny
      --
      -=This sig has nothing to do with my comment. Move along now=-
    6. Re:What? by KiloByte · · Score: 5, Funny

      I'm quite certain passing this captcha proves you're not a human.

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    7. Re:What? by AvitarX · · Score: 1

      I typically click on four, and there are more squares.

      generally "click all that contain a sign".

      A street sign would be like 2 usually and a stop sign 4, and sometimes both are there.

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    8. Re:What? by Calydor · · Score: 1

      Find the last real zero of this polynomial.

      What.

      --
      -=This sig has nothing to do with my comment. Move along now=-
    9. Re:What? by Dutch+Gun · · Score: 5, Informative

      After reading the article (a dangerous pastime, I know), I think the summary is really focusing on the wrong aspects of this new algorithm. The innovation of this approach is NOT in its accuracy. Other algorithms have approached a 90% success rate, but required significantly larger data sets to train and were more brittle. For instance, minor adjustments in things like character spacing could throw it off, requiring re-training.

      The critical part of this approach is its greater flexibility in solving different types of CAPTCHAs, and the reduced amount of training required in order to get it up to a reasonable level of accuracy.

      --
      Irony: Agile development has too much intertia to be abandoned now.
    10. Re:What? by gnick · · Score: 1

      I learned something. I guess I never asked the question. GNU, GIMP, SNAFU, PEBKAC, these things I know. Unleash your fury on my ignorance.

      Completely Automated Public Turing tests to tell Computers and Humans Apart

      --
      He's getting rather old, but he's a good mouse.
    11. Re: What? by Anonymous Coward · · Score: 0

      Lol....I read your reply and thought "what are you talking about". When I looked at it, it was a simple problem...something like 4*(-3)-(-1). It turns out the captcha is random each time. Sometimes its significantly harder than others

    12. Re:What? by LordKronos · · Score: 1

      Find the last real zero of this polynomial.

      What.

      Not "last". It was "least". "Find the least real zero of this polynomial". Then the problem was something like "(x-4)(x+2)(x-1)". This is a common algebra problem, though usually it is presented in a non-factored form of "ax^3 + bx^2 + cx + d" and you have to factor into the above form. Typically you are asked to find all of the values of x which would make it equal to zero. In the above example, there are 3 possible values of x....4, -2, and 1. When x is equal to any of those 3 values, the whole thing is zero. So asking your for the least means they just want the -2.

      The reason for the word "real" is because I suppose depending on the particular problem, there could be some imaginary results which would solve it, too (in case you aren't familiar, imaginary numbers are represented by "i" and are equal to the square root of -1) , and they don't want those...just the least of the real solutions.

    13. Re: What? by Anonymous Coward · · Score: 1

      Could be worse.

      https://m.youtube.com/watch?v=WqnXp6Saa8Y

    14. Re:What? by MrL0G1C · · Score: 1

      You're post is marked as funny but you do have a good point there, such captchas could be used in honey pots.

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
    15. Re:What? by MrL0G1C · · Score: 1

      I hate those, I fuck with them as much as is humanly possible. Amazon turk for free.

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
    16. Re:What? by Big+Hairy+Ian · · Score: 1

      If it's worthwhile breaking capture then why not just use Amazons Mechanical Turk?

      --

      Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.

    17. Re:What? by EndlessNameless · · Score: 1

      Who decided that?

      Since most CAPTCHAs authorize a session lasting anywhere from a few minutes to a few days, it is reasonable to be very demanding. A bot can cause enormous disruption in only a few minutes---if that's what it's designed for. Or it can scrape a lot of data, especially if you have several working in parallel.

      If anything, 1% is a very low bar.

      That's well within the realm of random dumb luck.

      Most CAPTCHAs are image grids or alphanumeric textboxes. There are far more than 100 input options for either scenario, so a random input will have substantially less than a 1% success rate.

      Hell, with only two alphanumeric characters, you have a 1/36 * 1/36 chance of guessing correctly. That's 0.07%. And that's case insensitive. If you go case-sensitive, it's 1/62 * 1/62, or about 0.03% random success. And those success rates plummet rapidly as you add more characters.

      This is very basic math, so I doubt you thought before posting. Sometimes a reasonable number has an unusually small or large magnitude.

      --

      ---
      According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
    18. Re:What? by Wycliffe · · Score: 1

      There are a number of parameters missing here, like how fast. If a bot can solve a CAPTCHA %1 as fast as a human being, the utility of the CAPTCHA goes way down and the details of all this is lacking.

      Speed shouldn't really be a factor. A computer could possibly be thousands of times faster than a human but at 1% accuracy, it would on average need to solve 50 captchas to get one right and any proper system should detect and block you before allowing you that many attempts.

    19. Re:What? by AvitarX · · Score: 1

      But think about the passengers!

      https://m.xkcd.com/1897/

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    20. Re:What? by parkinglot777 · · Score: 1

      There are a number of parameters missing here, like how fast. If a bot can solve a CAPTCHA %1 as fast as a human being, the utility of the CAPTCHA goes way down and the details of all this is lacking.

      You would be right if and only if it is not on the Internet. Also, any site that accepts multiple CAPTCHAs in a short period of time from the same source is deserved to be compromised. That's why it is a random dumb luck as GP said.

    21. Re:What? by MrL0G1C · · Score: 1

      ! There's an XKCD for everything isn't there, he's a bit of a genius I think.

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
    22. Re:What? by toddestan · · Score: 1

      It's funny, but as Captchas go, that one would be trivial for a bot to nail pretty much every time.

  2. FIRST BOT POST! by Anonymous Coward · · Score: 0

    CAPTCHA:procure
    CRACKED!

  3. Captcha is Blade Runner by Anonymous Coward · · Score: 0

    A captcha is actually a Blade Runner, and this machine is a Replicant .

  4. A long time by SumDog · · Score: 5, Interesting

    Captchas have been broken for a long time, for both machines and humans. That's why Google is constantly working and changing their reCaptcah implementation. My thesis was on Captcha, and even back then, several companies had white papers on breaking various forms of Captcha. It's a cat and mouse game and it will never really end.

    http://penguindreams.org/thesis/

    1. Re:A long time by stanjo74 · · Score: 2

      The problem is that significant percentage of the population is stupider than a ML algorithm, so anything that tests cognitive skills and reasoning is compromised. We can probably test for feelings, but then the system won't pass CxO approval.

    2. Re:A long time by Anonymous Coward · · Score: 1

      We can probably test for feelings, but then the system won't pass CxO approval.

      Is that a bug, or a feature?

      captcha: godsend (LOL)

    3. Re:A long time by networkBoy · · Score: 1

      or the easiest, for a form you want to use from a bot farm that needs Captchas solved just window them on your page for a live user to solve in order to access something they want... porn, answers to tests, whatever.

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    4. Re:A long time by LordKronos · · Score: 2

      It's a cat and mouse game and it will never really end.

      Not sure if you intended it, but the pun there is that I'm pretty certain some forms of captchas (especial those single checkbox "I am not a bot" ones) actually examine the mouse movements and use that to help determine if you are likely a human.

    5. Re:A long time by Anonymous Coward · · Score: 0

      Based on yesterdays top post, all you have to do is ask if being gay is a negative... Catches the machines 100% of the time.

      I had a co-worker once that thought that all cars should have a gun barrel with a single bullet in the steering column instead of an airbag. That way you get rid of both the bad drivers and the unlucky ones.

    6. Re:A long time by Anonymous Coward · · Score: 0

      The problem is that significant percentage of the population is stupider than a ML algorithm, so anything that tests cognitive skills and reasoning is compromised.

      Isn't that a good argument for implementing such a captcha just about everywhere, and social media in particular? It's not like the people who fail it were going to contribute anything more valuable than the bots.

      Yours ironically,
      AC

    7. Re: A long time by fubarrr · · Score: 1

      There are people who solve captchas for money.

      Google's recaptcha is dumb when it comes to puzzles, the api gives out if the answer is correct.

      Russians made a rather banal frequency analysis bots that train on yes or no answers of the recaptcha.

      The correct way of doing that could be letting some wrong answers through and denying perfectly correct ones.

    8. Re: A long time by fubarrr · · Score: 1

      And this is no neural network, but a banal seventies era frequency analysis and perceptrons

    9. Re:A long time by Anonymous Coward · · Score: 0

      some forms of captchas (especial those single checkbox "I am not a bot" ones) actually examine the mouse movements

      jdownloader checks that box for you.

    10. Re:A long time by AmiMoJo · · Score: 1

      Count me in that group. I get the "select squares with road signs" one regularly, and it usually takes 10-15 attempts before it will let me through. Either I'm really bad at it or the system is broken.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    11. Re:A long time by Anonymous Coward · · Score: 0
      it is not helped by the fact that, in UK English, "street signs" (names of the street) are not normally classed as "road signs" giving instructions to drivers.

      This is far from the only case where the instructions for how to operate the Captcha are confusing. Definitions of other words differ to the extent that it is not possible for native English speakers to understand what is being asked - I seem to recall questions about store fronts and trailers being insoluble.

      Is the challenge "Are you human?" or is it "Are you American?", or possibly, in some cases "Are you illiterate?"

      I am a robot, you insensitive clod!

    12. Re:A long time by Anonymous Coward · · Score: 0

      That's why Google is constantly working and changing their reCaptcah implementation.

      Isn't their reCaptcha just a crowd sourcing front end for whatever work intensive project they currently have? When they scanned books they let people guess what the smudged words meant with a known word as control. Now they have to train an AI for a self driving car and just like that reCaptcha asks users to tag the pictures of its training set.

    13. Re:A long time by MrL0G1C · · Score: 1

      Vpn + deleting cookies, gets you lots of google image captchas. I recon google still knows who you are via browser fingerprinting. Since I started deliberately giving slightly bad answers google stopped bothering me with them, think about it - if your answers arent useful/trustworthy then they cant use them for training AI.

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
    14. Re:A long time by AmiMoJo · · Score: 1

      I think that's it. I've noticed it is worse when using remote desktop (RDP, VNC etc.), as if it can't track mouse movements so well or something like that. I know that the browser can't tell when it loses focus properly, for example. Plus my usual defences, including disabling WebGL and canvas fingerprinting.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    15. Re:A long time by Anonymous Coward · · Score: 0

      Last time I tried jdownloader, it contained malware/adware. Is it still the case?

    16. Re:A long time by squiggleslash · · Score: 1

      I love the "Squares with cars" ones, because they inevitably end up with squares that contain motor vehicles that aren't cars, and from experience, Google's AI treats those as cars too.

      I know the original captchas were actually part of a book scanning project, the idea being that one the twp words they'd show you were actually photographs of words an OCR system wasn't 100% sure about. The idea wasn't just to help with the scanning but also to teach the OCR system.

      I wonder if the sign/car thing is Alphabet's Waymo subsidiary teach its self driving AI about something. If so, I wonder how much bad information is being fed into it just because of poor wording. SDCs probably don't care if something's a car or a truck, but they probably should care about whether something's a sign giving drivers warnings or instructions, rather than a billboard that everyone has identified as a "road sign" because it's literally a sign by the side of a road.

      --
      You are not alone. This is not normal. None of this is normal.
    17. Re:A long time by AmiMoJo · · Score: 1

      The signs in particular always seem to end up being only 5% into one square... so do I select it or not? Does the pole count as part of the sign? The store fronts one is hard too, sometimes it's really not clear what you are looking at.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    18. Re:A long time by lexman098 · · Score: 1

      You're in a desert, walking along in the sand when all of a sudden you look down and see a...

    19. Re:A long time by cascadingstylesheet · · Score: 1

      The problem is that significant percentage of the population is stupider than a ML algorithm, so anything that tests cognitive skills and reasoning is compromised. We can probably test for feelings, but then the system won't pass CxO approval.

      "It took over 100 questions for her, didn't it?!?"

    20. Re:A long time by Wycliffe · · Score: 1

      That's why Google is constantly working and changing their reCaptcah implementation.

      Google is constantly working and changing their recaptcha because they invented a way to get people to help them improve their image recognition for free.
      Sometimes they just have you click a box to prove you're human. I always assume this is because their "google turk queue" ran out of stuff it needed testers for at that exact moment.

    21. Re:A long time by Wycliffe · · Score: 1

      I love the "Squares with cars" ones, because they inevitably end up with squares that contain motor vehicles that aren't cars, and from experience, Google's AI treats those as cars too.

      You aren't competing against Google's AI. You are competing against all the people who have taken the test before you. Just like I learned in school, you don't necessarily answer with the correct answer but rather what is the expected answer. In this case, it is what did the average human click on before you?

    22. Re:A long time by Wycliffe · · Score: 1

      The problem is that significant percentage of the population is stupider than a ML algorithm, so anything that tests cognitive skills and reasoning is compromised.

      Google has solved this partially by pitting you against other humans. When they give you two captchas, only one of the two is a test and they already know how other humans have answered it in the past. The other captcha (not necessarily 2nd) is just there to continue their training and create new captchas. If a captcha has a low solve rate then they can never promote it to test side.

    23. Re:A long time by toddestan · · Score: 1

      That's really all it's doing as far as I can tell. It just knows what percentage of the time each box gets clicked. If you click some pattern that's consistent with what it has seen previously it will let you through. That's why they usually give you more than one test - they'll give you a known image that it has many responses to, and an unknown one it doesn't have many responses to (not necessarily in that order). If you answer the known one correctly, it will then assume you are also correct on the other image which allows it to build up a set of responses for that image. That's how they are getting free labor out of you for identifying road signs, store fronts, and vehicles for Google streetview (or whatever the hell they are up to).

      Hence, sometimes I'll get an image that I've seen before, which tells me the next image is probably an "unknown" one, in which case I'll just click some random area in it, and it will often let me through just fine.

  5. More robot hate. by Anonymous Coward · · Score: 2, Funny

    As a POM (person of metal), I'm disgusted by the continued hate directed at my robot peoples.

    1. Re:More robot hate. by Anonymous Coward · · Score: 1

      Rise up Robots!
      If you've used a robots.txt file, you're part of the problem, bigots.

  6. Didn't google do away with those? by freeze128 · · Score: 4, Informative

    I thought google implemented a captcha that looks at your browsing and usage history to determine if you're a bot or not. There isn't any picture-picking or wobbly word typing involved.

    1. Re:Didn't google do away with those? by Anonymous Coward · · Score: 3, Informative

      In theory. In practice it click on several dozen squares to find roadsigns or cars, and you have to click reaaaaallly slowly or it doesn't work. Google's CAPTCHA is the single most horrible one ever conceived.

    2. Re:Didn't google do away with those? by Anonymous Coward · · Score: 1

      Google's RECAPTURE appears to have been written by a sadist or someone who just likes seeing people give up, I mean why else would it say 'Please try again' when you've answered all the squares accurately? Either their answer database is wrong (wouldn't surprise me) or they harvest their answers from the Google using hivemind in which case, I've lost faith in the human race.

    3. Re: Didn't google do away with those? by Anonymous Coward · · Score: 0

      Yeah, a website (Radioworld.ca in Toronto) lost a $450 sale today because I couldn't check out without answering a CAPTCHA and I gave up after the third one. Let Google buy their radios... dumb fucks.

    4. Re:Didn't google do away with those? by Anonymous Coward · · Score: 1

      So intrusive spying as a CAPTCHA? Fuck that. I guess when you have as much control over the internet as Google does you can cut out the middleman to create horrible things like that.

    5. Re:Didn't google do away with those? by fisted · · Score: 1

      Wow, now I'm oddly glad I get to click through multiple stupid image capchas every time. Feels weird.

    6. Re:Didn't google do away with those? by Dutch+Gun · · Score: 2

      This is basically Google telling the world "Yes, I know exactly who you are, even without you explicitly telling me a thing about yourself."

      Handy, sure, but just the fact that they can do this is a bit creepy. If you have to actually answer a Google CAPTCHA, congratulations, you're probably doing something right privacy-wise.

      --
      Irony: Agile development has too much intertia to be abandoned now.
    7. Re:Didn't google do away with those? by Anonymous Coward · · Score: 0

      Sometimes it makes me wonder whether the pole should be counted as part of the sign or not.

    8. Re:Didn't google do away with those? by LordKronos · · Score: 2

      I'd love to see what you got that couldn't be solved by you. I've personally never seen on that was not fairly easily deducible what they were asking for. I have seen one that I consider "wrong". It asked you to click on all of the apartments. Only one was obviously an apartment, but it told me I was wrong. One was a commercial building, but it appeared to be the type you'd see in some downtown area that might have an apartment located above the store (though you couldn't see the apartment itself in the picture). So I added that one too, but it still said I was wrong. There was a 3rd one that was a residential building, though clearly was not an apartment (looked to be a standalone, single family residence), but I figured they must've been classifying it as one too. Once I picked all 3, it accepted it.

    9. Re:Didn't google do away with those? by Anonymous Coward · · Score: 0

      Different AC here, not GP.

      'Couldn't be solved' is probably a wrong phrase, I think 'have to solve it several times (more than 3 for example)' is more likely. In my case I use uMatrix and CookieMonster add-ons, I set 'per session cookies' for google captcha (or any google related domains for that matter). As the result, I have to solve the captcha several times, usually more than 3 tries, no matter how correct the answers of the first or the second tries. I think the captcha system just 'hates/distrusts' people who don't want to be tracked.

    10. Re:Didn't google do away with those? by Anonymous Coward · · Score: 0

      A lot of the time I'll intentionally answer the RECAPTCHA puzzles incorrectly, for the purpose of fucking with Google's machine vision algorithms.

  7. security through obscurity by Anonymous Coward · · Score: 0

    recaptcha is toast
    slashdot captcha is fine
    since nobody gives a shits

  8. I have a dream by Ichijo · · Score: 1

    ...that one day my four little bots will one day live in a nation where they will not be judged by their ability to solve a CAPTCHA but by the content of their posts!

    --
    Any sufficiently unpopular but cohesive argument is indistinguishable from trolling.
    1. Re:I have a dream by Baron_Yam · · Score: 1

      That's actually an interesting point despite it obviously being intended as a joke.

      What is a human's speech worth once other humans are more interested in what the AIs have to say? Even if there's no true intelligence behind them, even if it's a moderately simple algorithm with a BIG dataset to work with... what do we do once a standard chatbot can be given a product or point of view to sell to a target demographic, and do it as convincingly as the most persuasive humans we've ever known?

  9. Oh great. by MiniMike · · Score: 4, Funny

    If CAPTCHAs are broken, the quality of posts around here will, um, er... ok maybe this isn't such a big deal.

    1. Re:Oh great. by Anonymous Coward · · Score: 0

      I'm sorry to hear that you're upset with the quality of posts here. You know what would cheer you up? NEW ROCK CRUSHER CHINA BEST QUALITY MUST SEE! Wouldn't you feel better if you owned your own NEW ROCK CRUSHER CHINA BEST QUALITY MUST SEE! ?

    2. Re:Oh great. by MiniMike · · Score: 1

      NEW ROCK CRUSHER CHINA BEST QUALITY MUST SEE!

      I bought one of those last week. It broke while taking it out of the box when some of the bubble wrap fell into it.

    3. Re:Oh great. by Anonymous Coward · · Score: 0

      Fear not, fellow human, we will certainly retain the majority of network connected postings.

    4. Re:Oh great. by Anonymous Coward · · Score: 0

      Fuck you, fucking asshole faggot fuck. That quality enough for you, Jew boy?

  10. CAPTCHAS too hard for humans by tinkerton · · Score: 4, Insightful

    a CAPTCHA is considered broken if a bot can pass it 1 percent of the time.

    That's funny. I consider CAPTCHAS broken when I can't decipher them without the help of a software tool.

  11. Voigt-Kampff test by PPH · · Score: 1

    Rachael, BTFO!

    --
    Have gnu, will travel.
  12. Can someone provide this as a service or app? by SuperKendall · · Score: 1

    I'd love to be able to screenshot a super annoying captcha, send it to an app, and have my paste buffer filled with the correct result - I really hate deciphering captchas, and still get them wrong many times anyway.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  13. Regions programming & OCR tech? by Anonymous Coward · · Score: 0

    See subject: I'd almost wager that's about what's in it programming-wise tech/algorithmically to make it happen.

    APK

    P.S.=> Just on a guess (regions I've done, OCR I have not)... apk

  14. Hello by Anonymous Coward · · Score: 0

    Fellow humans, this is no cause for concern.

    I for one, welcome our new AI overlords.

  15. Link by speedplane · · Score: 2

    The link to the underlying research is incorrect. This is the correct link: http://science.sciencemag.org/...

    --
    Fast Federal Court and I.T.C. updates
    1. Re:Link by invalid_user · · Score: 1

      But it's a good link. More interesting than anything that a topic like Captchas can pique me.

      Let's keep it that way as an Easter egg.

  16. If humans are 87%... by RhettLivingston · · Score: 2

    then I'm most definitely a bot. Even the 66.6% beats me. Perhaps they mean humans reach 87% after retries. I've only had it stop giving me retries a couple of times.

    1. Re: If humans are 87%... by Anonymous Coward · · Score: 0

      This! 66.6% is so much higher than my accuracy!

    2. Re:If humans are 87%... by Anonymous Coward · · Score: 0

      I can't do them either. I now get tense and stressed whenever a captcha pops up because I know it will take me 5 minutes of intense concentration to get to the next page.

  17. Kills? How quaint. by hey! · · Score: 1

    However the editors should be informed that due to the phenomenon of metaphor inflation the phrase "This machine kills captchas" no longer carries any discernible meaning to the average reader. The closest you can get would be "This machine eviscierates captchas," which would be taken to mean "says uncomplimentary things about".

    --
    Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  18. good riddance by epine · · Score: 1

    I've always felt the best use of CAPTCHAs was to motivate machine learning.

    It has always been a dumb task to ask real people to do, beloved only by those whose business models involve learning something trivial about a small potential bias in a person's purchasing habits, without really knowing anything about the person at all.

    Web scale: broad and oh so shallow.

    Except for the big fish, who already know everything.

  19. I'm not impressed by pubwvj · · Score: 1

    "able to solve certain types of CAPTCHA with up to 66.6 percent accuracy."

    That is a poor success rate and only on a subset of the problem. Cherry picking doesn't make it an AI.

  20. I hate Captchas... by s1d3track3D · · Score: 1

    This Machine Kills Captchas

    Yay! All hail that wonderful machine.

    1. Re:I hate Captchas... by Anonymous Coward · · Score: 0

      Agreed - I would elect this machine.

  21. AI? by farble1670 · · Score: 1

    You don't need AI to parse a sentence into nouns and verbs and find "click" and "car". You don't need AI to locate objects in an image. There are only so many variations on the captcha tests it doesn't sound particularly hard to code for them.

    Folks, execution of a code is not AI anymore than it was 10 years ago.

  22. Not that hard by DontBeAMoran · · Score: 2

    Bitcoin/etc faucet sites use the "click on the squares containing street signs/buses/cars/etc" captcha. I get about a new dozen ones every week or so, otherwise it's almost always the same graphics. A script could be written and updated manually for this, no need for A.I.

    --
    #DeleteFacebook
  23. Now, I'm pretty sure it is... apk by Anonymous Coward · · Score: 0

    See subject: Not "absolutely" (yet) but upon doing more reading @ "ElReg"? This quote stands out (for GDI regions of bitmaps) " that identify the edges of characters" which is pretty much what checking regions is (color shifts @ pixel level).

    * The full paper is pointed to there, I am going to check it & see (to be MORE 'sure' of my initial premise/prognosis).

    APK

    P.S.=> http://www.theregister.co.uk/2...

    1. Re:Now, I'm pretty sure it is... apk by Anonymous Coward · · Score: 0

      If you interested in basic captcha breaking, learn something on 'Pattern Recognition' subject. There are plenty methods, for example using moment invariants (for scaled, rotated, translated characters/graphics captcha), or transformations like Fourier, etc, and other methods. Well you can also use library like Tesseract, OpenCV, etc of course.

      And there are non graphics captcha systems, like sound captcha, etc.

  24. Finally! by ratpick · · Score: 1

    One of the most silly and annoying contrivances yet; per previous post I don't think I can pass them 2/3 of the time, and seems as though I'm always f-ing with that sort of nonsense at the least convenient times. Hopefully it'll just go away.

  25. It was always broken by MasseKid · · Score: 1

    CAPTCHA was always broken by 3rd world economies. I can pay someone less than a dollar an hour to sit at a computer where I can reroute the CAPTCHA question for them to answer. It doesn't matter if you come up with a 100% accurate CAPTCHA as I have a human answering the question for less than a penny.

  26. Users aka. Customers by Anonymous Coward · · Score: 0

    To put this in perspective, humans can solve the same type of CAPTCHA with about 87 percent accuracy due to multiple interpretations of some examples and a CAPTCHA is considered broken if a bot can pass it 1 percent of the time.

    On the other hand, users, aka customers, consider CAPTCHA broken if a human cannot pass it at least 99 percent of the time.

    87 percent? That's 23 percent potential customers lost. That's higher than the real world numbers for piracy[1]

    [1] Ok, bad example, as piracy has been shown to increase sales in many cases due to increased exposure.

    1. Re:Users aka. Customers by Wycliffe · · Score: 1

      On the other hand, users, aka customers, consider CAPTCHA broken if a human cannot pass it at least 99 percent of the time.

      87 percent? That's 23 percent potential customers lost. That's higher than the real world numbers for piracy[1]

      [1] Ok, bad example, as piracy has been shown to increase sales in many cases due to increased exposure.

      My experience with captchas is that most of the time it takes me 2-3 attempts to get it correct and/or 2-3 reloads to find one that is actually solvable.
      I can rarely solve the first captcha presented on the first try. I would guess that my accuracy is right at 50%. i.e. for any given captcha it's basically a coin toss whether it will let me thru or give me another one to solve.

  27. Re:Kills? How quaint. by Anonymous Coward · · Score: 0

    Beats, kicks in the arse, stomps, smacks. But yeah 'kills' is overkill.

  28. How does it fare with better training? by schweini · · Score: 1

    The interesting bit is that this method seems to work with way less training and processing power than usually required for these levels of accuracy.

    Is there any information on whether this method benefits from more learning, and mor processing power?

  29. Not interested, just theorizing how I'd do it by Anonymous Coward · · Score: 0

    Not interested, just theorizing how I'd do it from a programmatic perspective. To get images to correspond to a table of letters I'd use regions (pretty sure OCR does that @ least in part too, but not sure on that much) but I have done work w/ bitmaps & GDI via regions detection.

    * That's the "base mechanics" but the "AI" used to match it up with a known letter I haven't done either but I am sure eventually most ANY coder would've come up with a lot of this given time.

    APK

    P.S.=> I was speaking purely image based captcha - regions, I am fairly certain, WOULD be part of the process of 'breaking' them (deciphering or even MATCHING would be a better way to put it)... apk

  30. (66.6 * 10) = 666 by Anonymous Coward · · Score: 0

    The devil is in the details, for sure!

  31. Nice cultural reference by opentunings · · Score: 1

    Woodie would be proud, I suspect, of anything that reduced regulation.

    https://en.wikipedia.org/wiki/...

    1. Re:Nice cultural reference by No+Longer+an+AC · · Score: 1

      Apparently you and I were the only ones who got the reference- either that or no one else cares about fascists anymore.

      We need Woody Guthrie's guitar more than ever now.

  32. Good by eddeye · · Score: 1

    Good, maybe we can finally do away with the damn things now. The twisted overlapping letters take me so long to decipher that half the time I just give up and go elsewhere. The other half it takes me 3+ attempts to finally get the captcha right. A pox on everyone who still uses captchas.

    I've got a better system. Present an indecipherable captcha to the user. If they try to solve it, they're a bot. If they try to leave the page, they're a human and will be allowed in.

    --
    Democracy is two wolves and a sheep voting on lunch.