I’ve actually noticed this in some websites the past ~two months. It’s neat to have a captcha that finally doesn’t need slowly clicking images to pass through.
I’ve actually noticed this in some websites the past ~two months. It’s neat to have a captcha that finally doesn’t need slowly clicking images to pass through.
But…. Lots of bots are made with RPAs …. With actual browsers , interface emulating human interaction. Sounds like a response to https://proton.me/blog/proton-captcha
Cloudflare is rather late with this to be honest, Google has had interaction free reCAPTCHA for ages.
User simulation is something these automated tools are designed to detect. It’s also why attempts to remove identification mechanisms are treated with more suspicion.
For example, very few bots actually have real, usable GPUs, relying on software rendering instead. This can be detected and kept in mind with a bunch of other signals. Running Selenium on your desktop will make you hard to detect, but running it in the cloud (even when proxied through a botnet like the big scrapers) will make bots quite obvious.
I think CAPTCHA is fighting a losing battle, and I think in the future remote attestation technology will determine whether you have access to certain websites or not. This technology has already been built into Safari and it’s on its way to becoming an internet standard, so I kind of expect CAPTCHAs to disappear in a couple of years.
Turnstile was announced over a year ago.
I don’t know shit about it.