Shulou(Shulou.com)11/24 Report--

When you are waiting in front of the computer, gearing up to buy a long-awaited performance ticket, is about to click the mouse to buy passionately, the computer suddenly pops up a CAPTCHA input box.

▲, please enter the letters in the middle picture. Where's your letter? ? larrysworld.com

Is this a ticket grab or a vision test? Who would have thought that after working hard for a long time, I was defeated by CAPTCHA. If this CAPTCHA is so happy that people can not understand it, what is even more confusing is the choice of the picture. Let me choose all the pictures that contain cars, so this one accounts for a little bit. Should I choose it or not?

▲, I think you are bullying myopic people! ? apify.com

People who were "angry" by these outrageous verification codes directly filled up their sarcastic skills and made a lot of drawings. Aren't you trying to embarrass me with these CAPTCHA codes? If you have the ability to do this directly!

▲ is a mess, solving math problems, and even allowing others to choose the bug in the code? ? devrant.com

Recently, a company has dealt with the annoying CAPTCHA! At this year's developer conference, Apple mentioned a feature in the new system: automatic verification. They want the system to pass the CAPTCHA automatically instead of human operation. After all these years, can we finally say goodbye to the CAPTCHA?

Functions in the beta version of ▲ iOS16 (provided by the author

You're not a robot, are you? The fact that the CAPTCHA is "difficult" can be reflected in its own full name. In 2000, a group of PhDs from Carnegie Mellon University created CAPTCHA. This string of letters represents the Public Turing Test (Completely Automated Public Turing test to tell Computers and Humans Apart), which automatically distinguishes computers from humans. This sounds like a very high-end test, which falls into the hands of the user, that is, "enter the CAPTCHA".

But at first, this CAPTCHA is not intended to embarrass humans, but robots. The Internet is always full of robots, which are essentially lines of computer code that run automatically. These codes can register a large number of accounts on different websites. After that, robot accounts can post spam, automatically swipe tickets, and even attack websites.

Manual auditing can hardly be faster than repetitive code, so websites need an effective way to identify robots and real people. CAPTCHA becomes an ideal solution.

Early CAPTCHA generally distinguished robots from real people by distorting normal text or adding interfering lines to them. This simple change is not a problem for human reading, but it is a real problem for robots that can only recognize standard text.

Humans have been quiet for a while, but robots are getting smarter and smarter. With the further development of deep learning technology, robots can easily recognize these distorted words. This vicious circle makes the text used for verification more and more difficult.

How can we create words that robots must not understand? Carnegie Mellon University's research team then came up with a good idea: scan a few old books with AI, and the words that can't be scanned are good CAPTCHA material. As a result, these words that are not recognized by AI are placed in the verification code box together with another word that has been identified. When you enter these two words, if you have determined that the word is entered correctly, the system tends to judge that the other word is valid.

▲ CAPTCHA, are you all right? ? webadictos.com

This approach not only stops robots, but also unwittingly gives humans outsourced jobs: when more than a certain number of people enter a word that AI does not recognize, the word is confirmed and withdrawn, thus completing the digitization of old books.

Google later acquired the project and used it to identify images such as Google Books and Google Street View. However, it is more difficult for humans to recognize these obscure book characters and pictures that can't be seen by AI than the simple metamorphosis characters generated by the program.

▲, please select all the muffin bread in the picture. ? memezila.com

The whole world hates CAPTCHA, whether it is text recognition or picture selection, these complex and annoying CAPTCHA have become a hindrance to normal human access to the Internet.

Under the ▲ Google Security blog, people in the comments section believe that CAPTCHA will eventually disappear. Because this "shit" prevents normal users from leaving messages in the comment area. ? Googleblog.com

According to a 2012 survey, more than 90% of people think it is difficult or very difficult to use these CAPTCHAs. Some people are so dissatisfied with this that they even set up a CAPTCHA art group to paint outrageous CAPTCHA.

▲ CAPTCHA sconce killed literally translated into "candlestick killed", the user painted for this (? )? prodlly / reddit

These CAPTCHA codes also offended some "innocent people". In order to break through these AI verification codes, some people distribute them to porn, games and other websites, requiring users to enter verification codes before seeing the details. Without knowing it, the user helped others to "crack" the CAPTCHA.

▲ an example of a false CAPTCHA appearing on a decryption game (reference [11])

Not only do users resent it, but the site also has a headache for CAPTCHA. In one study, 210 participants were invited, and more than half of them needed to enter a CAPTCHA two or more times to enter it correctly. This is a disaster for the website: the user experience is so poor, how many users have to be lost!

In order to solve the problem of CAPTCHA that caused public anger, manufacturers have been working hard. In the new version of the CAPTCHA system, Google uses clicking buttons to replace the previous word recognition and picture recognition. You only need to click the "I am not a robot" box, and the system can verify whether you are a robot or not according to your operation information. Sliding verification, jigsaw puzzle verification and other methods will also analyze the user's drag-and-drop behavior to determine whether it is a robot operation.

▲ you think you just click a button, but in fact, the system will integrate information such as browsing behavior and mouse path to comprehensively determine whether you are human or not. ? Google Developers

Implicit CAPTCHA is also developing continuously, and the system will automatically evaluate the user comprehensively by collecting the user's operation behavior. But there are also questions about privacy: how much information does the system collect about me when I browse the web?

Apple went one step further this time with the introduction of a private access token (Private Access Tokens), which plans to make a real-life judgment directly at the stage of using the phone: unlocking the phone by password or biometrics, opening a browser, and accurately entering the website. All this is enough to show that a real person is using a cell phone. When the decision is completed, the system will automatically send a "real person notification" to the website, thus automatically completing the relevant verification.

Apple and the technology companies it works with plan to open source the relevant standards, that is, not only Apple users, but perhaps more and more people in the future will be able to get rid of these annoying CAPTCHAs!

reference

[1] ReplaceCAPTCHAswithPrivateAccessTokensWWDC22. Https://developer.apple.com/videos/play/wwdc2022/10077/

[2] This new iOS 16 feature will rid the web of pesky CAPTCHA verification puzzles. Https://9to5mac.com/2022/06/20/ios-16-bypass-captchas/

[3] CAPTCHA: Telling Humans and Computers Apart Automatically. Http://www.captcha.net/

[4] Human or Computer? Take This Test. Https://www2.eecs.berkeley.edu/Research/Projects/CS/vision/mori-nyt/page1.html

[5] Are you a robot? Introducing "No CAPTCHA reCAPTCHA". Https://security.googleblog.com/2014/12/are-you-robot-introducing-no-captcha.html

[6] reCAPTCHA protects your website from fraud and abuse without creating friction. Https://www.google.com/recaptcha/about/

[7] Moradi, M., & Keyvanpour, M. (2015). CAPTCHA and its Alternatives: A Review. Security and Communication Networks, 8 (12), 2135-2156.

[8] Screen Reader User Survey # 4 Results.

Https://webaim.org/projects/screenreadersurvey4/#captcha/

[9] CaptchaArt-Reddit. Https://www.reddit.com/r/CaptchaArt/

[10] Fidas, C. A., Voyiatzis, A. G., & Avouris, N. M. (2011, May). On the necessity of user-friendly CAPTCHA. In Proceedings of the SIGCHI conference on human factors in computing systems (pp. 2623-2626).

[11] Kang, L., & Xiang, J. (2009, December). CAPTCHA phishing: A practical attack on human interaction proofing. In International Conference on Information Security and Cryptology (pp. 411-425) Springer, Berlin, Heidelberg.

[12] CAPTCHA Effectiveness. Https://blog.codinghorror.com/captcha-effectiveness/

[13] Private Attestation Token: use open source standards to eliminate CAPTCHA on iPhone and Mac. Https://blog.cloudflare.com/ zh-cn/ eliminating-captchas-on-iphones-and-macs-using-new-standard-zh-cn/

This article comes from the official account of Wechat: fruit Shell (ID:Guokr42), author: Owl Editor: window knocking Rain

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.