Technology

59742 readers

2229 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago

MODERATORS

787

AI bots now beat 100% of those traffic-image CAPTCHAs (arstechnica.com)

submitted 2 months ago by ForgottenFlux@lemmy.world to c/technology@lemmy.world

155 comments fedilink hide all child comments

Anyone who has been surfing the web for a while is probably used to clicking through a CAPTCHA grid of street images, identifying everyday objects to prove that they're a human and not an automated bot. Now, though, new research claims that locally run bots using specially trained image-recognition models can match human-level performance in this style of CAPTCHA, achieving a 100 percent success rate despite being decidedly not human.

ETH Zurich PhD student Andreas Plesner and his colleagues' new research, available as a pre-print paper, focuses on Google's ReCAPTCHA v2, which challenges users to identify which street images in a grid contain items like bicycles, crosswalks, mountains, stairs, or traffic lights. Google began phasing that system out years ago in favor of an "invisible" reCAPTCHA v3 that analyzes user interactions rather than offering an explicit challenge.

Despite this, the older reCAPTCHA v2 is still used by millions of websites. And even sites that use the updated reCAPTCHA v3 will sometimes use reCAPTCHA v2 as a fallback when the updated system gives a user a low "human" confidence rating.

you are viewing a single comment's thread
view the rest of the comments

[–] mosiacmango@lemm.ee 90 points 2 months ago* (last edited 2 months ago) (4 children)

This is actually a good sign for self driving. Google was using this data as a training set for Waymo. If AI is accurately identifying vehicles and traffic markings, it should be able to process interactions with them easier.

[–] iAmTheTot@sh.itjust.works 71 points 2 months ago (4 children)

As I understand it, the point of those captchas was never really "bots can't identify these things" (though you're right on that it was used to train). They use cursor movement, clicks, and other behaviours while you're solving it to detect if you are a bot or not.

[–] Grimy@lemmy.world 43 points 2 months ago

The image choosing was always just to train their own bots

[–] Takumidesh@lemmy.world 11 points 2 months ago* (last edited 2 months ago) (1 children)

It's a combination.

Most captchas goals generally aren't 100% prevention, it's to put a workload in front, this makes spamming the site cost money, a bankrolled attempt could just as easily outsource the captchas to real humans.

[–] Anivia@feddit.org 1 points 2 months ago

a bankrolled attempt could just as easily outsource the captchas to real humans.

Exactly. I've been using 2captcha for that for over a decade now

[–] Mushroomm@sh.itjust.works 9 points 2 months ago

Since I started getting good at yosu and that fishing mini game in farmrpg I've been failing more captchas. I wonder if they're related knowing this

[–] nieceandtows@lemmy.world 5 points 2 months ago (1 children)

Is that why I'm asked to do this over and over for 14 million times when I'm on a VPN?

[–] iAmTheTot@sh.itjust.works 4 points 2 months ago

It is probably part of it, yeah. But to be clear I'm not a captcha expert or anything, just a layman.

[–] grue@lemmy.world 32 points 2 months ago

The annoying thing is that they held us hostage for our free labor, but the results are proprietary for Google's benefit only.

That training data ought to be forced to be made freely available to the public, since we're the ones who actually created it.

[–] crusa187@lemmy.ml 3 points 2 months ago

Afaik this is precisely what the captcha data was intended for - training AI models. Originally leveraged machine learning. LLMs are a slightly different paradigm but same purpose and results here.

[–] cypherpunks@lemmy.ml 0 points 2 months ago (2 children)

i hope you're joking. please, tell me you're joking?

[–] mosiacmango@lemm.ee 13 points 2 months ago* (last edited 2 months ago) (1 children)

Its never been confirmed by Google, so I may be wrong. It still tracks that the data harvesting company with a AI self driving car project would use free human labor to identify road hazards.

[+] cypherpunks@lemmy.ml -9 points 2 months ago* (last edited 2 months ago) (1 children)

I was referring to the "This is actually a good sign for self driving" part of their comment.

The captcha circumvention arms race has been going on for over two decades, and every new type of captcha has and will continue to be broken as soon as it's widely deployed enough that someone is motivated to spend the time to.

So, the notion that an academic paper about breaking the current generation of traffic-related captchas (something which the captcha solving industry has been doing for years with a pretty high success rate already) is "good news" for the autonomous vehicle industry (who has also been able to identify such objects well enough to continue existing and getting more regulatory approval for years now) is...

fry not sure meme template, no text

[–] mosiacmango@lemm.ee 16 points 2 months ago* (last edited 2 months ago)

Not really. I'm not even sure what you're disagreeing with based on the above comment.

My point is that if bog standard AI can accurately identify all of the road information from pictures, that is good news for self driving.

What was once a nearly impossible task for computers is now mundane, and can be used to improve safety/utility for self driving, especially for FOSS projects like comma.ai