Hacker News Reader

Recaptcha had a good run but it’s time for it to die imho.

That's nice & all, but there's no good replacement that works as well (for example against a dedicated attacker with a botnet).

That doesn't mean it's worth using.

Agreed, it's morphed into something a lot more evil than stopping bots. The amount of heuristics it now collects in v3 is quite something. Check for your score yourself https://recaptcha-demo.appspot.com/recaptcha-v3-request-scor...

> This is a sample implementation, the score returned here is not a reflection on your Google account or type of traffic.

I got 0.9 and then 0.3 after refreshing.

That's by design. Hitting the same endpoints multiple times is botty behaviour. I got 0.9 three times, then 0.7 on the fourth.

What's your solution against a dedicated attacker?

To be attacked.

> for example against a dedicated attacker with a botnet

Do you have experience with this? My understanding is that there's still trivial work arounds (See chrome extension "Buster") or services where you pay to have a human go through it for pennies.

If somebody is targeting your site then your captcha will be useless no matter what.

Reply on news.ycombinator.com