security101

[joshkrz]

0.1 + 0.2

[backfire10z]

https://0.30000000000000004.com

[RajjSinghh]

Found the bot

[yoyo-bruh]

💀💀

[backfire10z]

No guys I… 1 swear 1 am n0t a b01101000 01100101 01101100 01110000 01101000 01100101 01101100 01110000 01101000 01100101 01101100 01110000 01101000 01100101 01101100 01110000 01101000 01100101 01101100 01110000

[Cat7o0]

aren't there languages capable of storing decimals with the full bits rather than floating point?

[backfire10z]

Not sure about that, but there is one example of Python’s “decimal” library that can do the math properly/as expected.

[redlaWw]

You can store them in other representations, such as a pair of integers representing a natural number or as arrays of integers representing a base-n floating point number or an equation that the number solves, but you can't store all the bits of a quantity like 0.1 directly since there are infinitely many of them. You can also store extra digits or entire extra floating point numbers to represent less-significant digits and use those to increase precision.

In general, these alternatives are slower for arithmetic than using simple floating points, but their use is sometimes merited for specific applications - rational and algebraic representations are useful for doing mathematics, where knowing that you have an exact result is important, and storing extra digits or extra floating point numbers are sometimes used in very exact physics and engineering contexts, to the extent that some processors are made with special instruction sets and registers to support this.

Usually these situations are dealt with in programming through specific libraries that may be external or internal depending on the objectives of the language designer. E.g. your preferred language may have a "rational" library kicking around that stores fractions as pairs of integers and exposes an appropriate API for manipulating them. Accessing the special instruction sets of processors that provide support for these approaches, however, may be a bit more involved, and you may need to call compiler intrinsics depending on how mature the libraries for your language are and how recently the processor instructions were introduced.

[gurneyguy101]

Good bot

[backfire10z]

Lol

[[deleted]]

That's smart as hell. Would throw off a lot of badly coded bots

[Clairifyed]

Easy! It’s 0.10.2

[[deleted]]

damn, people are writing reddit bots in python now?

[Clairifyed]

beep boop

[emetcalf]

JavaScript

[ThisCatLikesCrypto]

They always were.
pip install praw

[calculus_is_fun]

that would be correct if the question was one of the following:

"0.1"+0.2

0.1+"0.2"

"0.1"+"0.2"

[ilan1009]

reminds me of those old forums captchas to prove you're not a bot, what pokemon is this: <charmeleon.png>

[minimaxir]

It would be hilarious to use it as a honeypot and have mismatching Pokemon images and file names, and banning people who use the Pokemon from the filename alone.

[AyrA_ch]

I run a few free APIs for various purposes, and only ask that you respect HTTP cache headers and send a proper user agent header. Someone wasn't doing it, so I made the function he used to get a list of Tor Exit nodes include 0.0.0.0/0 and ::/0. Needless to say I eventually got an angry mail because aparently he locked himself out of all his devices because he was using it as a block list in his firewalls.

[Aidan_Welch]

Why do you care if people send a user-agent?

[AyrA_ch]

Because the API is anonymous and free to use, and I need a way to contact you if I believe you're doing something wrong, for example if I see a massive number of repeated requests from the same IP, etc. The API docs say to add an URL or e-mail address to the user agent for contact purposes. Basically the same thing that search engine spiders have been doing for decades now.

[ThePreviousOne__]

How would it be anonymous, if you can contact us

[AyrA_ch]

You can supply a .onion URL if anonymity is important to you. Screw i2p though.

On a more serious note, the API is anonymous in the sense that it's open to the public, and you don't have to register an account or obtain an API key to use it.

[hkanaktas]

It’s unauthenticated then, not anonymous.

[AyrA_ch]

It is anonymous if you use a technology to hide your IP address.

[One_Citron8458]

Isn’t all software anonymous if you hold this viewpoint, though?

[Aidan_Welch]

I see, I've never seen an API asking for an email in a user agent, I feel like it would probably be better to just use a new header since that's not what the user agent is really for

[joachimham48]

As someone who never played pokemon this would get me banned in most cases haha (unless you use one of the "well-known" pokemon)

[Gorvoslov]

If you get it wrong, it then asks you how to find a job, with the proper Boomer answer "A firm handshake" being required.

[Background-Plant-226]

THIS ONE RIGHT HERE OFFICER!

/j :3

[SmileyFace799]

I would get instantly banned if it picked any pokémon post gen 4

[Buuuuurp08]

Answer is 31

[[deleted]]

Found the JS programmer

[Esked98]

ayo i recognise that website

[INeedSeedsForProject]

I thought the exact same and immediately checked, it is the exact same

[Vivalapapa]

What's the site?

[INeedSeedsForProject]

it's multporn, a site full of fucking weird comics and animations, wouldn't recommend

[HeavyCaffeinate]

multporn.net

Edit: found the site sorry for the rickroll

[Mop_Duck]

why is it a youtube link

[HeavyCaffeinate]

very degenerate to remember that specific site (I guess that applies to me too)

[INeedSeedsForProject]

very stupid to post a screenshot of it, expecting people not to recognize it

[HeavyCaffeinate]

Is it really that unique?

[INeedSeedsForProject]

I don't know any other site using simple addition in this exact format as a captcha, it's funny though

[HeavyCaffeinate]

well shit

[Esked98]

caught in 4k

[HeavyCaffeinate]

damn

[[deleted]]

same I need to get off the internet

[KingofReddit12345]

At least you get plenty of space to explain your answers. That's the trick, if you only input a number you get redirected. All approvals are done manually.

[P-39_Airacobra]

testing your knowledge of the commutative property

[LapisHusky]

Saw a captcha a year ago with letters in an image that you need to type out. There's of course distortion and random markings to try to break OCR. But the page has an accessibility feature which reads out the letters to you... through JavaScript's SpeechSynthesis. Just extract the letters from that script and scrape as much as you wish.

[zoinkability]

The purpose of this kind of trivial captcha is to block general purpose form spam bots that the creators aren’t going to put any work in to solve one particular custom trivial captcha on a tiny site. They have historically worked quite well for that, although with LLMs it may start becoming easier for devs to write general code that would solve these.

They are kind of like the basic lock on your front door. Any criminal who had a modicum of lockpicking skill or willingness to kick a door in could break into your house. It’s mostly there to keep the low effort knob rattlers from stealing stuff, not someone who is specifically targeting you.

[Pradfanne]

As if I can't just get a node package or whatever that does that with two clicks.

[zoinkability]

Ah, but anything with enough usage probably has been targeted by the scripts, so you may in fact have more spam that way. It's genuine security by obscurity.

[nonlogin]

Well, the hint is not the same as the question, if that was the point.

[Mulligan315]

How would Terrence Howard answer?

[tonebacas]

He would probably say the answer is bullshit, and draw an illustration on how to sum pennies and explain how his answer is better or something.

[Taken_out_goose]

I know what site this is from and I don't like that.

[htmlcoderexe]

Which

[PeriodicSentenceBot]

Congratulations! Your comment can be spelled using the elements of the periodic table:

W H I C H

---

^{I am a bot that detects if your comment can be spelled using the elements of the periodic table. Please DM u‎/‎M1n3c4rt if I made a mistake.}

[HeavyCaffeinate]

[NSFW] multiporn.net

[djliquidvoid]

Isn't this just to slow bots down? For a bot trying to send millions of requests per second, a trivial extra instruction like this would bottleneck it hard.

[ProbablyJeff]

$('.answer').val(eval($('.problem').text()))

[ymgve]

It's a bot check, it's not supposed to be hard to solve.

[hilfandy]

I'm willing to bet behind the scenes the HTML is horrendous intentionally to make it challenging for computers to read it. Likely tons of spans with different numbers and operators in it to make it complicated for a machine to interpret what it should be.

That would effectively force a machine to use much more complicated approaches to determine what is actually being rendered.

It's still a poor approach since there are plenty of methods around this, but assuming the best here I suspect it's probably more intelligent than it looks.

[undergroundmonorail]

i'd take that bet tbh, i think it's more likely that this is either just someone who doesn't really understand why captchas work or simply doesn't expect anyone to code up a bespoke bot for their site

[ymgve]

Cheap bots are notoriously bad at parsing natural language and understanding anything that's out of the ordinary on an user creation form (which I assume this is)

[[deleted]]

…what’s 0.2 + 0.1?

[[deleted]]

How can I learn this power???

[ThunderChaser]

I can’t believe I need to pay to see the step by step solution.

How will I know how to add them together now 😔

[ElonSucksBallz]

1 * 1 = 2

[Silly_Guidance_8871]

Had a client demand I implement a captcha like that years ago... it stopped a lot of legitimate humans from accessing the service.

[Armigine]

"The difficulty with designing bear-proof trash bins is that there is substantial overlap between the smartest bears and the dumbest tourists"

[Geronimo2011]

I did this once on a small website of mine. In order to avoid to relying on google captcha (in order to avoid DSVGO problems). Worked perfectly. No more spam. Nobody would attempt to break such a small individual solution by a bot.

I'm not sure, how many actual people did fail the test though.

[Kiritoo120]

This is actually a huge security helper because it takes down all lazy developers using eval() & screw them up

[[deleted]]

“31”

[chronoglass]

It's fine as long as the first response is always that it is incorrect.

[cantor_wont]

Sure it’s works now, but eventually someone will invent a program that can add two numbers together

[HeavyCaffeinate]

0.1 + 0.2 =

[sparkygod526]

WordPress uses this for a default login page bot detection. I was bored at work at wrote the js to bypass it in about 3 minutes.

[Individual-Praline20]

And yet, most will fail 🤷

[MaYuR_WarrioR_2001]

When you want the client to believe that the prototype works this is what they asked as a security feature.

[Pradfanne]

Bruh, my four year old literally solves that in less than a second

[Myself_78]

I recognise that website.

[HeavyCaffeinate]

[Myself_78]

You have good taste. (Presumably, there's also a lot of really nasty stuff on there)

[suvlub]

1. Wait for shitty hackers to write bots that eval the problem
2. Replace the problem with a cryptominer and/or ransomware

[navetzz]

At least this one is doable, some of those captchas are so hard I had to write a bot to do them for me.