# Are captchas going away?

**URL:** https://boards.straightdope.com/t/are-captchas-going-away/957624
**Category:** In My Humble Opinion
**Created:** [January 12, 2022, 2:28am UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624 "2022-01-12T02:28:59Z")
**Posts on this page:** 17
**Page:** 2

<div class="post-metadata">

### Author: ![EinsteinsHund](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/einsteinshund/32/8400_2.png) [@EinsteinsHund](https://boards.straightdope.com/u/EinsteinsHund)
#### Post date: [January 17, 2022, 8:44pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/21 "2022-01-17T20:44:51Z")

</div>

^^  
Yeah, sometimes, it amounts to that. I’ve often seen captchas that wanted me to pick all buses/taxis/bicycles/tractors or whatever from a collection of very low-res, grainy pics where you barely could make out that they were street scenes. That’s always a guessing game and very frustrating. But then, I see more and more cases where I just have to click “I am not a robot” or a link “solve captcha” and that’s all that’s needed to proceed.

---

<div class="post-metadata">

### Author: ![Max\_S](https://avatars.discourse-cdn.com/v4/letter/m/46a35a/32.png) [@Max\_S](https://boards.straightdope.com/u/Max_S)
#### Post date: [January 17, 2022, 8:54pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/22 "2022-01-17T20:54:59Z")

</div>

For work we have to setup our devices to constantly clear browsing data, which means all of those “not a robot” checkboxes expand into a full-fledged puzzle. Every. Single. Time.

~Max

---

<div class="post-metadata">

### Author: ![Senegoid](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/senegoid/32/6606_2.png) [@Senegoid](https://boards.straightdope.com/u/Senegoid)
#### Post date: [January 18, 2022, 7:19am UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/23 "2022-01-18T07:19:04Z")

</div>

What is the point of all those “I am not a robot” checkboxes? That would seem to be a trivial thing for a robot to do. What does it prove? (Is there some obscure behind-the-scenes HTML there that’s supposed to be hard for a robot to parse?)

---

<div class="post-metadata">

### Author: ![Senegoid](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/senegoid/32/6606_2.png) [@Senegoid](https://boards.straightdope.com/u/Senegoid)
#### Post date: [January 18, 2022, 7:21am UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/24 "2022-01-18T07:21:59Z")

</div>

Something else I’ve noticed seems to be going away: Those “security questions” you are sometimes asked in order to log in. Questions like “Who was your favorite teacher?” or “What street did you live on as a child?”

Last time I had to recover a lost (expired, I suspect) password, that didn’t work any more. Instead, they sent me a one-time log-in code to my e-mail.

---

<div class="post-metadata">

### Author: ![Dr\_Paprika](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dr_paprika/32/3042_2.png) [@Dr\_Paprika](https://boards.straightdope.com/u/Dr_Paprika)
#### Post date: [January 18, 2022, 3:37pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/25 "2022-01-18T15:37:13Z")

</div>

Probably not? I consider myself slightly smarter than the average bear. However, not apparently smart enough to tell if some fuzzy, out of focus picture is the final remnants of a **succulent** at the edge of some box. Who comes up with these things? Who came up with the idea of evading them by paying fivers to people to identify **catalytic converters**?

---

<div class="post-metadata">

### Author: ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)
#### Post date: [January 18, 2022, 3:51pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/26 "2022-01-18T15:51:43Z")

</div>

> [@Senegoid](#):
>
> Something else I’ve noticed seems to be going away: Those “security questions” you are sometimes asked in order to log in. Questions like “Who was your favorite teacher?” or “What street did you live on as a child?”

Long overdue; who was stupid enough to invent these identity-theft aids in the first place?

---

<div class="post-metadata">

### Author: ![Mama\_Zappa](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@Mama\_Zappa](https://boards.straightdope.com/u/Mama_Zappa)
#### Post date: [January 18, 2022, 6:59pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/27 "2022-01-18T18:59:37Z")

</div>

> [@Hari\_Seldon](#):
>
> “Which of these little tiny squares contains a car?"

I posted a [vent about this last summer](https://boards.straightdope.com/t/hey-june-dont-make-it-bad-but-you-will-mini-rant/943383/427) - since it was my workplace that required it, numerous times a frickin’ day. The upshot was these are being used to help train self-driving cars.

I have to assume there’s some money changing hands somewhere, from Google (or whatever) to those sites who’ve been persuaded to implement them.

> [@Senegoid](#):
>
> Something else I’ve noticed seems to be going away: Those “security questions” you are sometimes asked in order to log in. Questions like “Who was your favorite teacher?” or “What street did you live on as a child?”

As a fun side note: there are a lot of rumors out there that fun games on Facebook like “your porn name is your first pet’s name, plus the street you lived on at age 8” are ways for ID-theft harvesters to get that kind of info.

---

<div class="post-metadata">

### Author: ![kk\_fusion](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kk_fusion/32/15276_2.png) [@kk\_fusion](https://boards.straightdope.com/u/kk_fusion)
#### Post date: [January 18, 2022, 7:19pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/28 "2022-01-18T19:19:44Z")

</div>

There are Youtube videos explaining how it works.  
Basically, they track the movement of the mouse pointer on the way to the button to check if it’s sufficiently random for the movements of a real human hand.  
There are also people who claim to have engineered robots that can fool it, but it’s not as simple as sending a mouse click to the checkbox by script.

---

<div class="post-metadata">

### Author: ![Max\_S](https://avatars.discourse-cdn.com/v4/letter/m/46a35a/32.png) [@Max\_S](https://boards.straightdope.com/u/Max_S)
#### Post date: [January 18, 2022, 7:29pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/29 "2022-01-18T19:29:29Z")

</div>

> [@Senegoid](#):
>
> What is the point of all those “I am not a robot” checkboxes? That would seem to be a trivial thing for a robot to do. What does it prove? (Is there some obscure behind-the-scenes HTML there that’s supposed to be hard for a robot to parse?)

HTML is the markup language. Google reCAPTCHA is a javascript API, and I assume they constantly change the [underlying script](https://www.google.com/recaptcha/api.js) to outfox robots.

~Max

---

<div class="post-metadata">

### Author: ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)
#### Post date: [January 20, 2022, 10:09pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/30 "2022-01-20T22:09:36Z")

</div>

Today I went to pay a small speeding ticket fine ($35 – I was 1 mph away from falling into the $100 ticket category) and there was a CAPTCHA both to view my video and to pay my ticket. Who in the hell is webcrawling parking ticket sites to get to the payment portal for individual tickets? Is this really necessary? It had one of those “check if you’re a human” boxes, but all four or five times I went through the site, I had to do the stupid CAPTCHA picture test. “Pick all the boxes that contain a motorbus.” “Motorbus”? Who the hell calls it a motorbus?

---

<div class="post-metadata">

### Author: ![susan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/susan/32/17537_2.png) [@susan](https://boards.straightdope.com/u/susan)
#### Post date: [January 20, 2022, 10:21pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/31 "2022-01-20T22:21:51Z")

</div>

Locally at least, there’s a scam associated with speeding tickets.

---

<div class="post-metadata">

### Author: ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)
#### Post date: [January 20, 2022, 10:34pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/32 "2022-01-20T22:34:13Z")

</div>

Interesting. At least there’s a reason for the madness.

---

<div class="post-metadata">

### Author: ![susan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/susan/32/17537_2.png) [@susan](https://boards.straightdope.com/u/susan)
#### Post date: [January 20, 2022, 10:38pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/33 "2022-01-20T22:38:11Z")

</div>

Maybe. Ask me again when I gsbent had PayPal and Amazon trolling for these already today.

---

<div class="post-metadata">

### Author: ![Dr.Strangelove](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dr.strangelove/32/6613_2.png) [@Dr.Strangelove](https://boards.straightdope.com/u/Dr.Strangelove)
#### Post date: [January 20, 2022, 10:56pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/34 "2022-01-20T22:56:03Z")

</div>

> [@Senegoid](#):
>
> That would seem to be a trivial thing for a robot to do. What does it prove? (Is there some obscure behind-the-scenes HTML there that’s supposed to be hard for a robot to parse?)

The backend of the box actually runs an encrypted virtual machine in Javascript. That VM runs a risk analysis engine that looks at things like your mouse movements and your browser history. It combines these factors into a “not a bot” score. No one knows exactly what these factors are since that would require reverse engineering the engine (possible since it runs client-side, but not easy). If they did, it would probably be fairly easy to bypass, though it might still slow down the bots by requiring slower fake mouse movements, etc.

---

<div class="post-metadata">

### Author: ![jjakucyk](https://avatars.discourse-cdn.com/v4/letter/j/3d9bf3/32.png) [@jjakucyk](https://boards.straightdope.com/u/jjakucyk)
#### Post date: [January 21, 2022, 4:47pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/35 "2022-01-21T16:47:57Z")

</div>

Right, if you click the checkbox and it just lets you through then it already had enough of a fingerprint on you (via trackers from other websites, cookies, heuristic analysis, etc.) that watching your mouse movement when clicking the checkbox was just a final confirmation of what the system already believed, that you’re a real person.

If the system has no fingerprinting on you because you block trackers and ads, clear history and cookies regularly, or run through a VPN, then depending on the website’s settings the checkbox may be completely perfunctory. It’ll throw you into the image identification mode regardless.

If you find that you’re not let in after one round of finding the crosswalks, stoplights, mountains, bicycles, or buses, it may not be that you got anything wrong, but the algorithm had a new set of images to process and you’re helping to train it. Once those images have gone through enough people, it can determine which ones are correctly identified and then use them for actual verification. The older text versions where you’d have one word with a couple of lines through it or distortions, and another that looked like a scan from a book, only actually used the first word for verification. The second word didn’t have to be entered correctly to get through, since it was in the process of training.

Supposedly those training words were also being used to improve the text recognition algorithms for scanned books, and more recently for autonomous vehicle AI and reading of street signs, addresses, and whatnot. I’m not sure how much of that is actually happening, versus Google just using images that are already part of their street view and books databases.

---

<div class="post-metadata">

### Author: ![susan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/susan/32/17537_2.png) [@susan](https://boards.straightdope.com/u/susan)
#### Post date: [January 21, 2022, 5:17pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/36 "2022-01-21T17:17:54Z")

</div>

Amazon still uses the scratchy words.

---

<div class="post-metadata">

### Author: ![mixdenny](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mixdenny/32/2962_2.png) [@mixdenny](https://boards.straightdope.com/u/mixdenny)
#### Post date: [March 25, 2022, 7:47pm UTC](https://boards.straightdope.com/t/are-captchas-going-away/957624/37 "2022-03-25T19:47:24Z")

</div>

> [@Mama\_Zappa](#):
>
> your porn name is your first pet’s name, plus the street you lived on at age 8

Damn. I’m Sniffer Garfield.

[Previous page](https://boards.straightdope.com/t/are-captchas-going-away/957624.md?page=1)
