Yes, #Mastodon supports #HCaptcha, but HCaptcha mines details of some of us with disabilities by asking us to sign up with an email address to, as they put it, 'get an accessibility cookie.' If you use that service, it is a bad time for many. HCaptcha is not my friend.
Edit: For reasons why I categorically state HCaptcha is evil, see this post I made in response to someone else. People have quite rightly asked me to clarify my stance, so here it is: https://universeodon.com/@FreakyFwoof/111956924313468553
@craftxbox It's evil, because *only* if you're blind or unable to complete the visual captcha, do they require your email address.
'Oh, let's be another corporation, but we're niche and specific. We only want email addresses of those who are blind/visually impaired, so we could, at our discretion, spam them with blindness-specific products or services that our visual users would never see, as they never had to provide an email address.'
When you go to the chemist (drug store or whatever it's called today) to buy, oh I dono, tampons, do you have to give them your email address because you're a woman?
Nope. Very, very definitely nope, but because I'm blind, I have to give some nameless, faceless company my address, to have a cookie that hardly ever works anyway at the best of times, and even when it does, is now tracking me across any site with *their* version of so-called captcha?
No. Absolutely not. Get the hell out with that.
This entry was edited (2 months ago)
reshared this
modulux
in reply to Andre Louis • • •Andre Louis
in reply to Andre Louis • • •John Ulrik
in reply to Andre Louis • • •Andre Louis
in reply to John Ulrik • • •'Oh, let's be another corporation, but we're niche and specific. We only want email addresses of those who are blind/visually impaired, so we could, at our discretion, spam them with blindness-specific products or services that our visual users would never see, as they never had to provide an email address.'
When you go to the chemist (drug store or whatever it's called today) to buy, oh I dono, tampons, do you have to give them your email address because you're a woman?
Nope. Very, very definitely nope, but because I'm blind, I have to give some nameless, faceless company my address, to have a cookie that hardly ever works anyway at the best of times, and even when it does, is now tracking me across any site with *their* version of so-called captcha?
No. Absolutely not. Get the hell out with that.
Mikołaj Hołysz
in reply to Andre Louis • • •I get your point, I really do, but what alternative do you suggest?
Sure, ReCaptcha works with no email requirement, but that's only because they're Google and have it already. Audio captchas are a terrible idea, I've helped out non-english speakers over the phone with ReCaptcha enough times to know this first hand. Everything else (including audio) is trivial to solve in the age of LLMs and provides basically 0 protection. You can use weaker solutions and rely on IP reputation, but then blind people on "shadier" networks are completely out of luck, Google has this problem too.
HCaptcha is the worst system of all, except for all the others.
Andre Louis
in reply to Mikołaj Hołysz • • •Mikołaj Hołysz
in reply to Andre Louis • • •modulux
in reply to Mikołaj Hołysz • • •modulux
in reply to modulux • • •Mikołaj Hołysz
in reply to modulux • • •@modulux Just tested with textcaptcha.com. GPT 3 is surprisingly bad at this, about 25% success rate, but GPT-4 gets it all on the first try, with a minimum amount of tokens used, probably less than 20 per request overall.
All that with a 4-line bash script as follows:
Q=$(curl -s http://api.textcaptcha.com/myemail@example.com.json | jq -r .q)
echo $Q
llm -m4 --system 'You are a helpful assistant. Answer the question given in the briefest way possible, provide just the answer, no explanation. Write numbers as digits, not words.' "$Q"
modulux
in reply to Mikołaj Hołysz • • •Mikołaj Hołysz
in reply to modulux • • •@modulux Visual captchas, especially the "pplease click x" are far harder to solve, their entire point is that these images are hard to classify by AI, and you're doing the work for them. Besides, it's not just the clicking that matters, but also other things, like the how natural and human-like the path your mouse travels on is.
Then there's also the Chinese-style "put the scissors inside the square" captcha which modern vision models can't really help with due to their inability to provide coordinates and manipulate image objects.
Andre Louis
in reply to Mikołaj Hołysz • • •Mikołaj Hołysz
in reply to Andre Louis • • •Andre Louis
in reply to Mikołaj Hołysz • • •Mikołaj Hołysz
in reply to modulux • • •Andre Louis
in reply to Mikołaj Hołysz • • •Svenja
in reply to Mikołaj Hołysz • • •James Scholes
in reply to Mikołaj Hołysz • • •Cloudflare Turnstile, a free CAPTCHA replacement
CloudflareDrew Mochak
in reply to John Ulrik • • •