Anyone who has been surfing the web for a while is probably used to clicking through a CAPTCHA grid of street images, identifying everyday objects to prove that they’re a human and not an automated bot. Now, though, new research claims that locally run bots using specially trained image-recognition models can match human-level performance in this style of CAPTCHA, achieving a 100 percent success rate despite being decidedly not human.

ETH Zurich PhD student Andreas Plesner and his colleagues’ new research, available as a pre-print paper, focuses on Google’s ReCAPTCHA v2, which challenges users to identify which street images in a grid contain items like bicycles, crosswalks, mountains, stairs, or traffic lights. Google began phasing that system out years ago in favor of an “invisible” reCAPTCHA v3 that analyzes user interactions rather than offering an explicit challenge.

Despite this, the older reCAPTCHA v2 is still used by millions of websites. And even sites that use the updated reCAPTCHA v3 will sometimes use reCAPTCHA v2 as a fallback when the updated system gives a user a low “human” confidence rating.

  • mosiacmango@lemm.ee
    link
    fedilink
    English
    arrow-up
    72
    arrow-down
    4
    ·
    edit-2
    28 days ago

    This is actually a good sign for self driving. Google was using this data as a training set for Waymo. If AI is accurately identifying vehicles and traffic markings, it should be able to process interactions with them easier.

    • iAmTheTot@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      51
      ·
      28 days ago

      As I understand it, the point of those captchas was never really “bots can’t identify these things” (though you’re right on that it was used to train). They use cursor movement, clicks, and other behaviours while you’re solving it to detect if you are a bot or not.

      • Mushroomm@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        6
        ·
        28 days ago

        Since I started getting good at yosu and that fishing mini game in farmrpg I’ve been failing more captchas. I wonder if they’re related knowing this

      • Takumidesh@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        28 days ago

        It’s a combination.

        Most captchas goals generally aren’t 100% prevention, it’s to put a workload in front, this makes spamming the site cost money, a bankrolled attempt could just as easily outsource the captchas to real humans.

    • grue@lemmy.world
      link
      fedilink
      English
      arrow-up
      16
      arrow-down
      1
      ·
      28 days ago

      The annoying thing is that they held us hostage for our free labor, but the results are proprietary for Google’s benefit only.

      That training data ought to be forced to be made freely available to the public, since we’re the ones who actually created it.

  • pixxelkick@lemmy.world
    link
    fedilink
    English
    arrow-up
    35
    arrow-down
    2
    ·
    28 days ago

    Well yeah, I’d hope so, that’s the entire point.

    Catcha’s data collection always was with the intent for training ai on these skills. That’s “the point” of them.

    It’s reasonable to expect that the older version of captchas can now be beaten by modern ai, because they’re often literally trained on that exact data to beat it.

    Captcha effectively is free to use on websites as a tool because the data collection is the “payment”, they then license that data out to people like OpenAI to train with for stuff like image recognition.

    It’s why ai is progressing so fast, captchas are one of humanity’s long term collected data silos that are very full now.

    We are going to have to keep progressing the complexity of catches as it will be the only way to catch modern AIs, and in turn it will collect more data to improve it.

    • MIDItheKID@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      28 days ago

      Yeah, my understanding is that these capchas were made to harvest data to use for AI/Autopilot driven cars. That’s why they are always having you identify motorcycles, bycicles, crosswalks, stoplights, busses, etc. It’s all stuff that automatic driving cars have had a hard time identifying.

    • ripcord@lemmy.world
      link
      fedilink
      English
      arrow-up
      21
      ·
      28 days ago

      Or, like, “there’s the bottom 10% of a traffic light in this one. Do I click that box? Ia that supposed to count?”

      • thisNotMyName@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        28 days ago

        Does the backside of a traffic light even count? What about these strange traffic lights that have more boarder than light?

      • toddestan@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        ·
        28 days ago

        What they are doing is comparing your answer and seeing if it is consistent with how it has been answered previously. They realize that not everyone is going to give the exact same answer, so as long as you answer it in a way that enough other people have answered it, it should let you in.

        I’ll usually go with the minimum number of clicks that I think will get me through, since I’m lazy and it’ll also at times slow down how fast you can click which is annoying.

        I’ll also answer them wrong if I think it’s a mistake that enough other people will make. “Yes… that RV over there is a bus…”

        • Echo Dot@feddit.uk
          link
          fedilink
          English
          arrow-up
          0
          ·
          27 days ago

          They are also overly US centric.

          One of the questions asks you to click on only the school buses. I had to Google how you tell the difference between a school bus and not a school bus.

          Also is it a crosswalk if it’s at an intersection or is it only a crosswalk if it’s in the middle of a road somewhere?

          The questions either need to be not cultural or they need to be adapted for where they detect the user is coming from, the first option seems easier.

          • AA5B@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            27 days ago

            Interesting. Do you not have school buses, or are school buses not distinctly marked? How do kids get to school when it’s beyond walking distance?

    • dumbass@leminal.space
      link
      fedilink
      English
      arrow-up
      11
      ·
      28 days ago

      I had one with one of those Motorcycles with the long handles, apparently they aren’t part of the bike, but the dudes foot holding it up is.

  • superkret@feddit.org
    link
    fedilink
    English
    arrow-up
    23
    arrow-down
    1
    ·
    edit-2
    28 days ago

    Wait, so if a visitor fails the v3 Captcha, v2 is used as a fallback?
    That makes absolutely no sense.

  • Yer Ma@lemm.ee
    link
    fedilink
    English
    arrow-up
    18
    ·
    28 days ago

    But, I cannot pass those 50% of the time… what does that mean?

  • TommySoda@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    28 days ago

    I mean, we literally train them by completing the CAPTCHAs. Why do you think you were picking things like bikes, traffic lights, cars, and busses? The only question now is what’s next…

  • the post of tom joad@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    28 days ago

    Thank God this means i can stop wondering if i should click on the… the 13 pixels from the fucking bike in that one corner square or wondering if i should count the scooter as a motorcycle fuck i am so tired of that shit

    • curry@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      28 days ago

      Complete the obligatory “is this a staircase or street crossing” round only to be roundhouse kicked back to the beginning.

  • blattrules@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    28 days ago

    I never get the first one and rarely the second one. If it says to click all the squares with motorcycles and it’s just the one big picture, am I supposed to click stuff like the tire and mirrors? I always do and never get it right. Then most of the time they ask me to identify motorcycles, they show me motor scooters and what am I supposed to do then? I think I just need to get one of these bots to do it for me.

    • CosmicTurtle0@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      28 days ago

      Fwiw they aren’t really asking about the motorcycle. I mean they are but they are washing your mouse movements and how fast you click through the images. It’s okay to get a few images wrong.

      • pixxelkick@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        28 days ago

        Not quite.

        It’s mostly wisdom of the crowd, as it always has been.

        As long as you mostly click the same squares most other people click, you pass.

        You often at random get 2-3 images because 2 of them are actual checks, but the third is a new image that you auto pass and they’re using it to gather data on what the average clicks are on it.

    • Sabata@ani.social
      link
      fedilink
      English
      arrow-up
      7
      ·
      edit-2
      28 days ago

      As someone who can not decide if 3 pixels of a motorcycle counts as a correct square, I need this add on.

    • systemglitch@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      28 days ago

      In use an add-on that does 90% of these for me already on Firefox. I would tell you what it’s called but I’m not at my PC.

      Which (on a side note) I’d totally go downstairs and check for you, but I just sprained my ankle real bad, and am dreading stairs. Sorry :(

  • madjo@feddit.nl
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    27 days ago

    Meanwhile I sometimes fail those. I have been locked out of applications because I missed a square of a bus, or perhaps because I like to be efficient in my mouse cursor movements. I ducking hate CAPTCHAs.

  • GoofSchmoofer@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    27 days ago

    I can see a future where the Internet is completely run by bots and AI to the point where no human actually uses the Internet anymore.

    It’s like an island that gets overrun with rats - there are just too many to deal with so you leave.

    • SynopsisTantilize@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      27 days ago

      I’m already doing that now. If Lemmy starts showing signs of fuckery I’m out. I’ll switch back to magazines.

  • Draconic NEO@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    26 days ago

    CAPTCHA doesn’t stop bots, and let us be honest, it never really did. It frustrated the hell out of people though, and caused people to waste time doing these challenges. Meanwhile even before AI bad actors and bots could get past it simply by using captcha solver services run by exploited humans solving captchas for the service.

    It’s a display of security theater meant to make normies feel safe but in reality doesn’t stop most bad actors.