▲ 366 ▼ OpenAI’s ChatGPT Agent casually clicks through “I am not a robot” verification test (arstechnica.com) submitted 1 year ago by not_IO@lemmy.blahaj.zone to c/technology@lemmy.world 51 comments fedilink hide all child comments "This step is necessary to prove I'm not a bot," wrote the bot as it passed an anti-AI screening step.
[–] justOnePersistentKbinPlease@fedia.io 110 points 1 year ago (18 children) Makes sense. Google's "anti bot" verification has long been considered woefully inadequate. It works largely by tracking how long the user takes to click on it. LLMs are inherently fuzzy and for a bot, incredibly slow. permalink fedilink source hideshow 18 child comments replies: [–] Aatube@kbin.melroy.org 44 points 1 year ago (17 children) The article talks about Cloudflare's very different CAPTCHA, not Google's, but I agree. permalink fedilink source parent hideshow 17 child comments replies: [–] archemist@lemmy.dbzer0.com 17 points 1 year ago (5 children) I count on Cloudflare's useless captcha for my *arr stack. permalink fedilink source parent hideshow 5 child comments replies: [–] monkeyslikebananas2@lemmy.world 6 points 1 year ago (4 children) Wait. Your *arr apps are public? permalink fedilink source parent hideshow 4 child comments replies: [–] Revan343@lemmy.ca 5 points 1 year ago *ourr apps, apparently permalink fedilink source parent [–] defaultusername@lemmy.dbzer0.com 4 points 1 year ago* Yeah, if they want it accessible over the internet, hide it behind a Wireguard tunnel. permalink fedilink source parent [–] Passerby6497@lemmy.world 3 points 1 year ago* (1 child) You have to have a Cloudflare captcha solver for some of the *arr stack to work with certain indexers or something, idk. When my old *arr stack died and had to be rebuilt I ran into that problem, and after a short investigation, I promptly said fuck it and learned usenet. So happy that I did. permalink fedilink source parent hideshow 1 child comment replies: [–] billygoat@catata.fish 2 points 1 year ago I think the confusion comes from people misunderstanding that cloud flare isn’t being set up in front of the arr stack, Instead, what people are talking about is flaresolverr, an application that helps services like jackett bypass cloudflares verification. permalink fedilink source parent [–] justOnePersistentKbinPlease@fedia.io 13 points 1 year ago* (10 children) Ah yes, cloudflare's captcha that just tracks how many hits you've done in a timeframe on a site recently. Same shit different pile. permalink fedilink source parent hideshow 10 child comments replies: [–] Midnight_Oil@piefed.social 45 points 1 year ago (9 children) From the screenshot in the article, the bot is bypassing Cloudflare's Turnstile which is not just tracking hits. I work in bot detection. You and anyone else reading this should understand that, behind the scenes, proof-of-work, proof-of-space, and other tests are being run to verify if the device is what it says it is. Typically, a bot is run with a tool like Playwright or Puppeteer. These frameworks are detectable with the right tests. Bots will also attempt to spoof another device's fingerprints to blend in. These changes are also detectable if you know what to test for. We implement tools like Turnstile and other CAPTCHAless CAPTCHA because bots are pretty good at passing CAPTCHA while humans, rightfully, hate verifying they they're human. Humans also struggle at passing CAPTCHA. The general population has zero idea the massive volume of bot traffic that is being generated right now. These tools are implemented for a reason. So the fact that a bot just breezes past this test is a problem for us all. Definitely not "same shit different pile", friend. permalink fedilink source parent hideshow 9 child comments replies: [–] justOnePersistentKbinPlease@fedia.io 12 points 1 year ago (3 children) Thanks for the write up, but I was blocked from logging in on a cloudflare website because I opened too many windows once and their tracking cookie flagged that browser as a bot. Meanwhile the bot I built to track mod updates to my modlist for Rimworld and Mw5 on nexus? Never ran into any issues. So when I refer to Cloudflare's bot detection as shit, that is a highly personal and professional opinion. permalink fedilink source parent hideshow 3 child comments replies: [–] BananaIsABerry@lemmy.zip 5 points 1 year ago (1 child) Cloudflare is one of many contributing factors to how annoying the internet is now. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I get it. I really do. Having seen both the sheer volume of bot traffic and the annoyance of CAPTCHA, it's hard for me to be on one side here. I wish the general public could see the volume of bot traffic we're all contending with but I also get the the internet just gets shitier and shitier. permalink fedilink source parent [–] Midnight_Oil@piefed.social 5 points 1 year ago No problem, thanks for reading. I don't work for Cloudflare, but I worry it's a little too easy to call something shit when you don't fully understand it. There are numerous factors at play here even outside of frameworks and browsers. I haven't worked with Cloudflare's tools but where I work we allow each customer to fine tune detections. One site's detections might be too aggressive for another site. Believe it or not, some customers are ok with bot traffic so long as it's not overly aggressive. That said, detections can trigger based on behavior, such as high volumes of requests, as well as IP reputation. Even with the bypasses that are available, or instances when you are able to use a bot and not be challenged, it doesn't diminish how well these tools work. There are reasons people are implementing these types of antibot solutions across the web. permalink fedilink source parent [–] sem@lemmy.blahaj.zone 5 points 1 year ago (1 child) Could you please enlighten me on one small point: When it asks you to click all the squares with a motorcycle, etc., does it expect you to include the squares with just a tiny part of the motorcycle or rider, or does it just want you to select the main squares? permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I'm sorry for the late reply. I have to admit, I'm not entirely sure in this instance. Google's CAPTCHA isn't something I've kept up on and I too have had issues with it. I've personally done only major squares and squares with a tiny parts too. Both have worked. I'm sorry I can't find you a more complete answer. permalink fedilink source parent [–] chameleon@fedia.io 5 points 1 year ago (1 child) The modern breed of CAPTCHAs is mostly only trying to verify that it's a full-fat browser. undetected-chromedriver, camoufox, pydoll, patchright and a million other libraries/tools exist. Nothing's perfect and it's a cat & mouse game, but this single incident is a sample size of one as well. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 1 point 1 year ago* (last edited 1 year ago) Absolutely well said. Cat & mouse indeed 😉 permalink fedilink source parent [–] ripcord@lemmy.world 2 points 1 year ago Lol who downvoted this permalink fedilink source parent
[–] Aatube@kbin.melroy.org 44 points 1 year ago (17 children) The article talks about Cloudflare's very different CAPTCHA, not Google's, but I agree. permalink fedilink source parent hideshow 17 child comments replies: [–] archemist@lemmy.dbzer0.com 17 points 1 year ago (5 children) I count on Cloudflare's useless captcha for my *arr stack. permalink fedilink source parent hideshow 5 child comments replies: [–] monkeyslikebananas2@lemmy.world 6 points 1 year ago (4 children) Wait. Your *arr apps are public? permalink fedilink source parent hideshow 4 child comments replies: [–] Revan343@lemmy.ca 5 points 1 year ago *ourr apps, apparently permalink fedilink source parent [–] defaultusername@lemmy.dbzer0.com 4 points 1 year ago* Yeah, if they want it accessible over the internet, hide it behind a Wireguard tunnel. permalink fedilink source parent [–] Passerby6497@lemmy.world 3 points 1 year ago* (1 child) You have to have a Cloudflare captcha solver for some of the *arr stack to work with certain indexers or something, idk. When my old *arr stack died and had to be rebuilt I ran into that problem, and after a short investigation, I promptly said fuck it and learned usenet. So happy that I did. permalink fedilink source parent hideshow 1 child comment replies: [–] billygoat@catata.fish 2 points 1 year ago I think the confusion comes from people misunderstanding that cloud flare isn’t being set up in front of the arr stack, Instead, what people are talking about is flaresolverr, an application that helps services like jackett bypass cloudflares verification. permalink fedilink source parent [–] justOnePersistentKbinPlease@fedia.io 13 points 1 year ago* (10 children) Ah yes, cloudflare's captcha that just tracks how many hits you've done in a timeframe on a site recently. Same shit different pile. permalink fedilink source parent hideshow 10 child comments replies: [–] Midnight_Oil@piefed.social 45 points 1 year ago (9 children) From the screenshot in the article, the bot is bypassing Cloudflare's Turnstile which is not just tracking hits. I work in bot detection. You and anyone else reading this should understand that, behind the scenes, proof-of-work, proof-of-space, and other tests are being run to verify if the device is what it says it is. Typically, a bot is run with a tool like Playwright or Puppeteer. These frameworks are detectable with the right tests. Bots will also attempt to spoof another device's fingerprints to blend in. These changes are also detectable if you know what to test for. We implement tools like Turnstile and other CAPTCHAless CAPTCHA because bots are pretty good at passing CAPTCHA while humans, rightfully, hate verifying they they're human. Humans also struggle at passing CAPTCHA. The general population has zero idea the massive volume of bot traffic that is being generated right now. These tools are implemented for a reason. So the fact that a bot just breezes past this test is a problem for us all. Definitely not "same shit different pile", friend. permalink fedilink source parent hideshow 9 child comments replies: [–] justOnePersistentKbinPlease@fedia.io 12 points 1 year ago (3 children) Thanks for the write up, but I was blocked from logging in on a cloudflare website because I opened too many windows once and their tracking cookie flagged that browser as a bot. Meanwhile the bot I built to track mod updates to my modlist for Rimworld and Mw5 on nexus? Never ran into any issues. So when I refer to Cloudflare's bot detection as shit, that is a highly personal and professional opinion. permalink fedilink source parent hideshow 3 child comments replies: [–] BananaIsABerry@lemmy.zip 5 points 1 year ago (1 child) Cloudflare is one of many contributing factors to how annoying the internet is now. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I get it. I really do. Having seen both the sheer volume of bot traffic and the annoyance of CAPTCHA, it's hard for me to be on one side here. I wish the general public could see the volume of bot traffic we're all contending with but I also get the the internet just gets shitier and shitier. permalink fedilink source parent [–] Midnight_Oil@piefed.social 5 points 1 year ago No problem, thanks for reading. I don't work for Cloudflare, but I worry it's a little too easy to call something shit when you don't fully understand it. There are numerous factors at play here even outside of frameworks and browsers. I haven't worked with Cloudflare's tools but where I work we allow each customer to fine tune detections. One site's detections might be too aggressive for another site. Believe it or not, some customers are ok with bot traffic so long as it's not overly aggressive. That said, detections can trigger based on behavior, such as high volumes of requests, as well as IP reputation. Even with the bypasses that are available, or instances when you are able to use a bot and not be challenged, it doesn't diminish how well these tools work. There are reasons people are implementing these types of antibot solutions across the web. permalink fedilink source parent [–] sem@lemmy.blahaj.zone 5 points 1 year ago (1 child) Could you please enlighten me on one small point: When it asks you to click all the squares with a motorcycle, etc., does it expect you to include the squares with just a tiny part of the motorcycle or rider, or does it just want you to select the main squares? permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I'm sorry for the late reply. I have to admit, I'm not entirely sure in this instance. Google's CAPTCHA isn't something I've kept up on and I too have had issues with it. I've personally done only major squares and squares with a tiny parts too. Both have worked. I'm sorry I can't find you a more complete answer. permalink fedilink source parent [–] chameleon@fedia.io 5 points 1 year ago (1 child) The modern breed of CAPTCHAs is mostly only trying to verify that it's a full-fat browser. undetected-chromedriver, camoufox, pydoll, patchright and a million other libraries/tools exist. Nothing's perfect and it's a cat & mouse game, but this single incident is a sample size of one as well. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 1 point 1 year ago* (last edited 1 year ago) Absolutely well said. Cat & mouse indeed 😉 permalink fedilink source parent [–] ripcord@lemmy.world 2 points 1 year ago Lol who downvoted this permalink fedilink source parent
[–] archemist@lemmy.dbzer0.com 17 points 1 year ago (5 children) I count on Cloudflare's useless captcha for my *arr stack. permalink fedilink source parent hideshow 5 child comments replies: [–] monkeyslikebananas2@lemmy.world 6 points 1 year ago (4 children) Wait. Your *arr apps are public? permalink fedilink source parent hideshow 4 child comments replies: [–] Revan343@lemmy.ca 5 points 1 year ago *ourr apps, apparently permalink fedilink source parent [–] defaultusername@lemmy.dbzer0.com 4 points 1 year ago* Yeah, if they want it accessible over the internet, hide it behind a Wireguard tunnel. permalink fedilink source parent [–] Passerby6497@lemmy.world 3 points 1 year ago* (1 child) You have to have a Cloudflare captcha solver for some of the *arr stack to work with certain indexers or something, idk. When my old *arr stack died and had to be rebuilt I ran into that problem, and after a short investigation, I promptly said fuck it and learned usenet. So happy that I did. permalink fedilink source parent hideshow 1 child comment replies: [–] billygoat@catata.fish 2 points 1 year ago I think the confusion comes from people misunderstanding that cloud flare isn’t being set up in front of the arr stack, Instead, what people are talking about is flaresolverr, an application that helps services like jackett bypass cloudflares verification. permalink fedilink source parent
[–] monkeyslikebananas2@lemmy.world 6 points 1 year ago (4 children) Wait. Your *arr apps are public? permalink fedilink source parent hideshow 4 child comments replies: [–] Revan343@lemmy.ca 5 points 1 year ago *ourr apps, apparently permalink fedilink source parent [–] defaultusername@lemmy.dbzer0.com 4 points 1 year ago* Yeah, if they want it accessible over the internet, hide it behind a Wireguard tunnel. permalink fedilink source parent [–] Passerby6497@lemmy.world 3 points 1 year ago* (1 child) You have to have a Cloudflare captcha solver for some of the *arr stack to work with certain indexers or something, idk. When my old *arr stack died and had to be rebuilt I ran into that problem, and after a short investigation, I promptly said fuck it and learned usenet. So happy that I did. permalink fedilink source parent hideshow 1 child comment replies: [–] billygoat@catata.fish 2 points 1 year ago I think the confusion comes from people misunderstanding that cloud flare isn’t being set up in front of the arr stack, Instead, what people are talking about is flaresolverr, an application that helps services like jackett bypass cloudflares verification. permalink fedilink source parent
[–] defaultusername@lemmy.dbzer0.com 4 points 1 year ago* Yeah, if they want it accessible over the internet, hide it behind a Wireguard tunnel. permalink fedilink source parent
[–] Passerby6497@lemmy.world 3 points 1 year ago* (1 child) You have to have a Cloudflare captcha solver for some of the *arr stack to work with certain indexers or something, idk. When my old *arr stack died and had to be rebuilt I ran into that problem, and after a short investigation, I promptly said fuck it and learned usenet. So happy that I did. permalink fedilink source parent hideshow 1 child comment replies: [–] billygoat@catata.fish 2 points 1 year ago I think the confusion comes from people misunderstanding that cloud flare isn’t being set up in front of the arr stack, Instead, what people are talking about is flaresolverr, an application that helps services like jackett bypass cloudflares verification. permalink fedilink source parent
[–] billygoat@catata.fish 2 points 1 year ago I think the confusion comes from people misunderstanding that cloud flare isn’t being set up in front of the arr stack, Instead, what people are talking about is flaresolverr, an application that helps services like jackett bypass cloudflares verification. permalink fedilink source parent
[–] justOnePersistentKbinPlease@fedia.io 13 points 1 year ago* (10 children) Ah yes, cloudflare's captcha that just tracks how many hits you've done in a timeframe on a site recently. Same shit different pile. permalink fedilink source parent hideshow 10 child comments replies: [–] Midnight_Oil@piefed.social 45 points 1 year ago (9 children) From the screenshot in the article, the bot is bypassing Cloudflare's Turnstile which is not just tracking hits. I work in bot detection. You and anyone else reading this should understand that, behind the scenes, proof-of-work, proof-of-space, and other tests are being run to verify if the device is what it says it is. Typically, a bot is run with a tool like Playwright or Puppeteer. These frameworks are detectable with the right tests. Bots will also attempt to spoof another device's fingerprints to blend in. These changes are also detectable if you know what to test for. We implement tools like Turnstile and other CAPTCHAless CAPTCHA because bots are pretty good at passing CAPTCHA while humans, rightfully, hate verifying they they're human. Humans also struggle at passing CAPTCHA. The general population has zero idea the massive volume of bot traffic that is being generated right now. These tools are implemented for a reason. So the fact that a bot just breezes past this test is a problem for us all. Definitely not "same shit different pile", friend. permalink fedilink source parent hideshow 9 child comments replies: [–] justOnePersistentKbinPlease@fedia.io 12 points 1 year ago (3 children) Thanks for the write up, but I was blocked from logging in on a cloudflare website because I opened too many windows once and their tracking cookie flagged that browser as a bot. Meanwhile the bot I built to track mod updates to my modlist for Rimworld and Mw5 on nexus? Never ran into any issues. So when I refer to Cloudflare's bot detection as shit, that is a highly personal and professional opinion. permalink fedilink source parent hideshow 3 child comments replies: [–] BananaIsABerry@lemmy.zip 5 points 1 year ago (1 child) Cloudflare is one of many contributing factors to how annoying the internet is now. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I get it. I really do. Having seen both the sheer volume of bot traffic and the annoyance of CAPTCHA, it's hard for me to be on one side here. I wish the general public could see the volume of bot traffic we're all contending with but I also get the the internet just gets shitier and shitier. permalink fedilink source parent [–] Midnight_Oil@piefed.social 5 points 1 year ago No problem, thanks for reading. I don't work for Cloudflare, but I worry it's a little too easy to call something shit when you don't fully understand it. There are numerous factors at play here even outside of frameworks and browsers. I haven't worked with Cloudflare's tools but where I work we allow each customer to fine tune detections. One site's detections might be too aggressive for another site. Believe it or not, some customers are ok with bot traffic so long as it's not overly aggressive. That said, detections can trigger based on behavior, such as high volumes of requests, as well as IP reputation. Even with the bypasses that are available, or instances when you are able to use a bot and not be challenged, it doesn't diminish how well these tools work. There are reasons people are implementing these types of antibot solutions across the web. permalink fedilink source parent [–] sem@lemmy.blahaj.zone 5 points 1 year ago (1 child) Could you please enlighten me on one small point: When it asks you to click all the squares with a motorcycle, etc., does it expect you to include the squares with just a tiny part of the motorcycle or rider, or does it just want you to select the main squares? permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I'm sorry for the late reply. I have to admit, I'm not entirely sure in this instance. Google's CAPTCHA isn't something I've kept up on and I too have had issues with it. I've personally done only major squares and squares with a tiny parts too. Both have worked. I'm sorry I can't find you a more complete answer. permalink fedilink source parent [–] chameleon@fedia.io 5 points 1 year ago (1 child) The modern breed of CAPTCHAs is mostly only trying to verify that it's a full-fat browser. undetected-chromedriver, camoufox, pydoll, patchright and a million other libraries/tools exist. Nothing's perfect and it's a cat & mouse game, but this single incident is a sample size of one as well. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 1 point 1 year ago* (last edited 1 year ago) Absolutely well said. Cat & mouse indeed 😉 permalink fedilink source parent [–] ripcord@lemmy.world 2 points 1 year ago Lol who downvoted this permalink fedilink source parent
[–] Midnight_Oil@piefed.social 45 points 1 year ago (9 children) From the screenshot in the article, the bot is bypassing Cloudflare's Turnstile which is not just tracking hits. I work in bot detection. You and anyone else reading this should understand that, behind the scenes, proof-of-work, proof-of-space, and other tests are being run to verify if the device is what it says it is. Typically, a bot is run with a tool like Playwright or Puppeteer. These frameworks are detectable with the right tests. Bots will also attempt to spoof another device's fingerprints to blend in. These changes are also detectable if you know what to test for. We implement tools like Turnstile and other CAPTCHAless CAPTCHA because bots are pretty good at passing CAPTCHA while humans, rightfully, hate verifying they they're human. Humans also struggle at passing CAPTCHA. The general population has zero idea the massive volume of bot traffic that is being generated right now. These tools are implemented for a reason. So the fact that a bot just breezes past this test is a problem for us all. Definitely not "same shit different pile", friend. permalink fedilink source parent hideshow 9 child comments replies: [–] justOnePersistentKbinPlease@fedia.io 12 points 1 year ago (3 children) Thanks for the write up, but I was blocked from logging in on a cloudflare website because I opened too many windows once and their tracking cookie flagged that browser as a bot. Meanwhile the bot I built to track mod updates to my modlist for Rimworld and Mw5 on nexus? Never ran into any issues. So when I refer to Cloudflare's bot detection as shit, that is a highly personal and professional opinion. permalink fedilink source parent hideshow 3 child comments replies: [–] BananaIsABerry@lemmy.zip 5 points 1 year ago (1 child) Cloudflare is one of many contributing factors to how annoying the internet is now. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I get it. I really do. Having seen both the sheer volume of bot traffic and the annoyance of CAPTCHA, it's hard for me to be on one side here. I wish the general public could see the volume of bot traffic we're all contending with but I also get the the internet just gets shitier and shitier. permalink fedilink source parent [–] Midnight_Oil@piefed.social 5 points 1 year ago No problem, thanks for reading. I don't work for Cloudflare, but I worry it's a little too easy to call something shit when you don't fully understand it. There are numerous factors at play here even outside of frameworks and browsers. I haven't worked with Cloudflare's tools but where I work we allow each customer to fine tune detections. One site's detections might be too aggressive for another site. Believe it or not, some customers are ok with bot traffic so long as it's not overly aggressive. That said, detections can trigger based on behavior, such as high volumes of requests, as well as IP reputation. Even with the bypasses that are available, or instances when you are able to use a bot and not be challenged, it doesn't diminish how well these tools work. There are reasons people are implementing these types of antibot solutions across the web. permalink fedilink source parent [–] sem@lemmy.blahaj.zone 5 points 1 year ago (1 child) Could you please enlighten me on one small point: When it asks you to click all the squares with a motorcycle, etc., does it expect you to include the squares with just a tiny part of the motorcycle or rider, or does it just want you to select the main squares? permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I'm sorry for the late reply. I have to admit, I'm not entirely sure in this instance. Google's CAPTCHA isn't something I've kept up on and I too have had issues with it. I've personally done only major squares and squares with a tiny parts too. Both have worked. I'm sorry I can't find you a more complete answer. permalink fedilink source parent [–] chameleon@fedia.io 5 points 1 year ago (1 child) The modern breed of CAPTCHAs is mostly only trying to verify that it's a full-fat browser. undetected-chromedriver, camoufox, pydoll, patchright and a million other libraries/tools exist. Nothing's perfect and it's a cat & mouse game, but this single incident is a sample size of one as well. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 1 point 1 year ago* (last edited 1 year ago) Absolutely well said. Cat & mouse indeed 😉 permalink fedilink source parent [–] ripcord@lemmy.world 2 points 1 year ago Lol who downvoted this permalink fedilink source parent
[–] justOnePersistentKbinPlease@fedia.io 12 points 1 year ago (3 children) Thanks for the write up, but I was blocked from logging in on a cloudflare website because I opened too many windows once and their tracking cookie flagged that browser as a bot. Meanwhile the bot I built to track mod updates to my modlist for Rimworld and Mw5 on nexus? Never ran into any issues. So when I refer to Cloudflare's bot detection as shit, that is a highly personal and professional opinion. permalink fedilink source parent hideshow 3 child comments replies: [–] BananaIsABerry@lemmy.zip 5 points 1 year ago (1 child) Cloudflare is one of many contributing factors to how annoying the internet is now. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I get it. I really do. Having seen both the sheer volume of bot traffic and the annoyance of CAPTCHA, it's hard for me to be on one side here. I wish the general public could see the volume of bot traffic we're all contending with but I also get the the internet just gets shitier and shitier. permalink fedilink source parent [–] Midnight_Oil@piefed.social 5 points 1 year ago No problem, thanks for reading. I don't work for Cloudflare, but I worry it's a little too easy to call something shit when you don't fully understand it. There are numerous factors at play here even outside of frameworks and browsers. I haven't worked with Cloudflare's tools but where I work we allow each customer to fine tune detections. One site's detections might be too aggressive for another site. Believe it or not, some customers are ok with bot traffic so long as it's not overly aggressive. That said, detections can trigger based on behavior, such as high volumes of requests, as well as IP reputation. Even with the bypasses that are available, or instances when you are able to use a bot and not be challenged, it doesn't diminish how well these tools work. There are reasons people are implementing these types of antibot solutions across the web. permalink fedilink source parent
[–] BananaIsABerry@lemmy.zip 5 points 1 year ago (1 child) Cloudflare is one of many contributing factors to how annoying the internet is now. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I get it. I really do. Having seen both the sheer volume of bot traffic and the annoyance of CAPTCHA, it's hard for me to be on one side here. I wish the general public could see the volume of bot traffic we're all contending with but I also get the the internet just gets shitier and shitier. permalink fedilink source parent
[–] Midnight_Oil@piefed.social 3 points 1 year ago I get it. I really do. Having seen both the sheer volume of bot traffic and the annoyance of CAPTCHA, it's hard for me to be on one side here. I wish the general public could see the volume of bot traffic we're all contending with but I also get the the internet just gets shitier and shitier. permalink fedilink source parent
[–] Midnight_Oil@piefed.social 5 points 1 year ago No problem, thanks for reading. I don't work for Cloudflare, but I worry it's a little too easy to call something shit when you don't fully understand it. There are numerous factors at play here even outside of frameworks and browsers. I haven't worked with Cloudflare's tools but where I work we allow each customer to fine tune detections. One site's detections might be too aggressive for another site. Believe it or not, some customers are ok with bot traffic so long as it's not overly aggressive. That said, detections can trigger based on behavior, such as high volumes of requests, as well as IP reputation. Even with the bypasses that are available, or instances when you are able to use a bot and not be challenged, it doesn't diminish how well these tools work. There are reasons people are implementing these types of antibot solutions across the web. permalink fedilink source parent
[–] sem@lemmy.blahaj.zone 5 points 1 year ago (1 child) Could you please enlighten me on one small point: When it asks you to click all the squares with a motorcycle, etc., does it expect you to include the squares with just a tiny part of the motorcycle or rider, or does it just want you to select the main squares? permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 3 points 1 year ago I'm sorry for the late reply. I have to admit, I'm not entirely sure in this instance. Google's CAPTCHA isn't something I've kept up on and I too have had issues with it. I've personally done only major squares and squares with a tiny parts too. Both have worked. I'm sorry I can't find you a more complete answer. permalink fedilink source parent
[–] Midnight_Oil@piefed.social 3 points 1 year ago I'm sorry for the late reply. I have to admit, I'm not entirely sure in this instance. Google's CAPTCHA isn't something I've kept up on and I too have had issues with it. I've personally done only major squares and squares with a tiny parts too. Both have worked. I'm sorry I can't find you a more complete answer. permalink fedilink source parent
[–] chameleon@fedia.io 5 points 1 year ago (1 child) The modern breed of CAPTCHAs is mostly only trying to verify that it's a full-fat browser. undetected-chromedriver, camoufox, pydoll, patchright and a million other libraries/tools exist. Nothing's perfect and it's a cat & mouse game, but this single incident is a sample size of one as well. permalink fedilink source parent hideshow 1 child comment replies: [–] Midnight_Oil@piefed.social 1 point 1 year ago* (last edited 1 year ago) Absolutely well said. Cat & mouse indeed 😉 permalink fedilink source parent
[–] Midnight_Oil@piefed.social 1 point 1 year ago* (last edited 1 year ago) Absolutely well said. Cat & mouse indeed 😉 permalink fedilink source parent