Hacker News Reader

Comment by udia | Hacker News Reader

I agree, 2FA seems unrelated to stopping bots. It really seems like some form of rate limiting and captcha should have been used instead.

View on HN

https://2captcha.com/

I love the "workers banned" stat. It's bots all the way down.

> $0.50 for 1-2 hours, depending on service load.

Where in the world do they plan to hire people for these rates?

In India, the country with lowest the Big Mac Index as in [1], it would take 6.48h for the human-bot to pay for a Big Mac. And this excludes energy and internet bills and money transfer fees. The numbers just don't work.

[1] https://en.wikipedia.org/wiki/Big_Mac_Index#Figures

That isn't the labor rate, that is the solve rate most captha are easy to automate. You are buying the image recognition and their random click like a human algorithm. Probably even have some intentional wrong clicks like someone who misses... they have a few humans (who make more than that rate) but only for the new ones that they haven't seen before, once they know that one it is automated.

I post the above in hopes that you realize captca isn't useful for anything and stop annoying me with them.

And yet they're effective, so I wonder what the disconnect is.

I'm guessing that most scammers haven't figured these exist yet. Or maybe the hit rate on scams is so low it isn't profitable anymore even at these rates?

>The process of solving reCAPTCHA V2 Invisible is similar to the recognition of reCAPTCHA V2: we take the captcha parameters from the page in the form of the data-sitekey parameter and the page URL and transfer it to the 2Captcha service, where the employee solves it, after which the response is returned to us in the form of a token, which we need enter in the appropriate field to solve the captcha

I was under the impression these invisible "captcha" were much more difficult since a bunch of metadata just gets scooped off the device and sent in to some proprietary Google algorithm. I'd think it'd be hard for the service to generate enough unique fingerprints to prevent Google from detecting it's the same service solving them but maybe recaptcha just sucks

Reply on news.ycombinator.com