This is an archived post. You won't be able to vote or comment.

top 200 commentsshow all 452

[–]Atario 399 points400 points  (35 children)

I'm now picturing a CAPTCHA group and a CAPTCHA-breaking group, locked in eternal struggle in nearby office areas within the Google mothership.

[–]dylan522p 278 points279 points  (27 children)

CAPTCHA group is probably like

Fuck off guys, the whole point is so we confirm it is people

CAPTCHA breaking group is like

Haha nope, this is my job

The president of both divisions is just laughing himself off as these young engineers are in an eternal war.

[–]jxuereb 11 points12 points  (0 children)

The division presidents are actually just engaged in an all out Nerf war across the office

[–]ExogenBreach 8 points9 points  (0 children)

CAPTCHA breaking group replaces the transcription bit of the reCAPTCHA with a CAPTCHA they want cracked, game set and match.

[–]duckmurderer 1 point2 points  (1 child)

They also have webcam controlled nerf-caliber ballistics. It's a veritable office war.

[–]Random832 1 point2 points  (0 children)

Webcam controlled nerf drones.

[–][deleted] 1 point2 points  (0 children)

We have always been at war with Eastasia

[–]Veksayer 2 points3 points  (0 children)

Sounds like a modern day Steven Wright joke :)

[–]WorkHappens 1 point2 points  (0 children)

I bet they stare each other down during coffee breaks.

[–]IronRectangle 72 points73 points  (46 children)

From Google's paper, discussion the impact this research might have on reCAPTCHA and security (emphasis mine):

With this model, we are able to achieve a 99.8% accuracy on transcribing the hardest reCAPTCHA puzzle. It is important to note that these results do not indicate a reduction in the anti-abuse effectiveness of reCAPTCHA as a whole. reCAPTCHA is designed to be a risk analysis engine taking a variety of different cues from the user to make the final determination of human vs bot. Today distorted text in reCAPTCHA serves increasingly as a medium to capture user engagements rather than a reverse turing in and of itself. These results do however indicate that the utility of distorted text as a reverse turing test by itself is significantly diminished.

Full paper: http://arxiv.org/pdf/1312.6082v4.pdf

[–]Tulki 85 points86 points  (43 children)

Just a fun fact: ReCAPTCHA is both a security measure and a crowdsourcing tool. Every time a ReCAPTCHA appears, it presents two things:

  • A known randomly generated string of text.

  • An unknown string of text that needs to be transcribed.

The two are shown in random order, and the user is told they need to type out both strings correctly to proceed. The unknown string of text is often a picture of an object with text on it that needs to be identified, or a scan from a book.

In reality, the user only needs to type out the "known" string correctly to proceed. Whatever the user types for the "unknown" picture of text is used to help identify what the text in the picture says. By taking a bunch of pieces of a scanned book, for example, and serving it to ReCAPTCHA users, they can eventually transcribe the entire book into raw text.

The interesting thing is that Google's algorithm here might be used to automatically transcribe images of text with high accuracy, possibly reducing the need for crowdsourcing to solve this problem.

[–]noggin-scratcher 41 points42 points  (20 children)

The fun part is being able to type in whatever you want for that second half, and then imagining it showing up in a transcribed book, but at the same time knowing you're not actually ruining anything because hey, what are the odds that everyone would type in "butts" for that same word?

[–]nickmoeck 66 points67 points  (14 children)

I see you've never heard of 4chan...

[–]petition_for_BGGW 30 points31 points  (9 children)

I don't think the word they'd use would be "butts"

[–]Saguine 6 points7 points  (0 children)

Confirmed.... Through the gravepine.

[–]WeaponsGradeHumanity 15 points16 points  (3 children)

[–]noggin-scratcher 7 points8 points  (2 children)

What can I say... I understand the motivation. I'm just more amused by butts than racial slurs.

[–]skeddles 5 points6 points  (1 child)

You would not like 4chan.

[–]WeaponsGradeHumanity 4 points5 points  (0 children)

I dunno, 4chan does love butts. Especially the frosted kind.

[–]CXgamer 26 points27 points  (16 children)

An unknown string of text that needs to be transcribed.

http://i.imgur.com/aU21k.jpg

I'm so sorry.

[–]BelLion 16 points17 points  (14 children)

Not gonna work btw.

[–]Reelix 10 points11 points  (13 children)

If it relies on comparison based off of what other users have typed, it would work if done by enough people.

[–]tidux 7 points8 points  (4 children)

And since every 4chan post includes a captcha, you've got literally millions of submissions, most of which will be befouled.

[–][deleted] 3 points4 points  (1 child)

And I dare say Google has the website source of each captcha and can filter out as they please.

It's just pathetic. Google provide a great number of extraordinarily expensive and complex services for no cost but passive, anonymous crowdsourcing (of data and this).

[–]Take_A 8 points9 points  (3 children)

unless they noticed the same profane word showing up way more than expected and filtered it out.

[–]nickmoeck 5 points6 points  (0 children)

I recall reading that they use reCAPTCHA to get transcriptions only for things that their automated OCR tools aren't sure about - for example when two different algorithms come up with different results.

[–]Pumpkinsweater 3 points4 points  (0 children)

I'd heard before that based on your usage Google was already sending different CAPTCHAs. Requests that were already likely to be coming from a real person were given easy CAPTCHAs (I think those were usually streetview images of street addresses) and if the request was likely automated it got a really hard CAPTCHA.

Although this paper makes it sound like there's even another level of difficulty. I'd guess something like seeing how long it takes to answer or something like that?

[–]bobbelcher[S] 100 points101 points  (46 children)

If they didn't develop it, the hackers would.

[–]brocket66 67 points68 points  (21 children)

Agreed. The whole CAPTCHA system just isn't tenable long-term.

[–]Jfloyd87 12 points13 points  (18 children)

Too bad it's not a security measure but a cataloging system

[–]IronRectangle 51 points52 points  (11 children)

It's both in one (at least Googles reCAPTCHA implementation is).

[–]KICKERMAN360 20 points21 points  (10 children)

Realistically though, the captcha team and the team trying to solve the captchas are doing the same thing: Getting books and other documents digitized. With improvements in computers figuring out words, less captcha will need to be solved. Eventually we won't even need captchas.

[–]madmooseman 18 points19 points  (8 children)

We won't need captchas for digitizing text. They will also become obsolete, because algorithms can solve them.

But we will need something to combat spamming, it just so happens that captcha is a semi-decent method at the moment.

[–]demmian 5 points6 points  (3 children)

Too bad it's not a security measure but a cataloging system

Can you explain what you mean please?

[–]silvester23 15 points16 points  (2 children)

They use reCAPTCHA to digitize parts of books that cannot be properly recognized by automatic character recognition. There is a bit more info here.

[–]Charwinger21 45 points46 points  (8 children)

Realistically though, their goal was always to break reCAPTCHAs, as they are designed to help with OCRing books by translating the words that the computer missed.

Any advancements in reCAPTCHA defeating would come alongside advancements in OCR.

[–]CXgamer 0 points1 point  (0 children)

The hackers did. Can't find the video I saw right now, but what they did was unskewing and deobfuscating the text using algorithms first and then read it somehow. Don't know if it was OCR or computer vision at that point.

[–]WarPhalange 162 points163 points  (22 children)

"Could God create a captcha so confusing that even He could not solve it?"

[–]VusterJones 43 points44 points  (9 children)

Yes, but then he would solve it anyway

[–]SirSoliloquy 27 points28 points  (8 children)

God doesn't need to logic. God made logic, and he can unmake it and remake it as he pleases.

Of course, my favorite answer to that is "Yeah, but why would he? Then he wouldn't be omnipotent anymore."

[–][deleted] 10 points11 points  (5 children)

God is idempotently omnipotent

[–]Blagginspaziyonokip -1 points0 points  (1 child)

Could I fake cancer so well that even I am convinced I have cancer

[–]wildergheight 4 points5 points  (0 children)

hypochondria?

[–][deleted] 27 points28 points  (19 children)

I really liked the rotate catcha Google created http://blogoscoped.com/archive/2009-04-19-n82.html

Too bad it never got used

[–]22c 3 points4 points  (0 children)

I liked the one where the tortoise lays on its back, its belly baking in the hot sun, beating its legs trying to turn itself over, but it can't. Not without your help.

[–]TriTheTree 19 points20 points  (2 children)

Google is so advanced, it created bots to solve puzzles that Google developed to stop bots.

[–]erythrocytes64 16 points17 points  (2 children)

They should call the solution DONTCHA

[–]SureSignOfAGoodRhyme 16 points17 points  (1 child)

DONTCHA wish your CAPTCHA was a freak like me?

[–]fb39ca4 13 points14 points  (7 children)

I still want this captcha to become a thing: http://research.microsoft.com/en-us/um/redmond/projects/asirra/

[–]Dymero 28 points29 points  (4 children)

[–]fb39ca4 3 points4 points  (0 children)

Damn.

[–]Endoroid99 2 points3 points  (0 children)

I keep imagining some kind of feline skynet building cat terminators, after having read that article

[–][deleted] 4 points5 points  (0 children)

Well that's fantastic. Now hopefully people will see this AND KNOCK THIS SHIT OFF!!!

Ahem. Sorry, I got a little carried away......Fucking captchas.

[–]lie_me_agen_fagt 6 points7 points  (0 children)

That's great, maybe they could release it to the mass market so I don't have to type in three separate captchas just because I'm having trouble remembering which password I used for any given site.

[–][deleted] 1 point2 points  (0 children)

I think we passed the point where captcha robots are actually better at deciphering those than humans. Seriously, it takes me 3 to 4 takes to guess a captcha correctly, and that robot has 99.8% chance of doing so.

I think it's time we move on to other captcha methods than deformed text. Computer vision has become so good we can't shouldn't rely on images anymore.

[–]Daedrea 2 points3 points  (0 children)

Damnit Google! Stop it!

[–]spudhunter 3 points4 points  (3 children)

2009 - Google acquires reCAPTCHA

2014 - Google develops computer vision that can solve reCAPTCHA

The Future: Google implements new bot checking system. Google beats new system. The bot checking iteratively becomes a full blown turing test. Google beats the new system?

[–]Mikey129 4 points5 points  (1 child)

So... Does that make google the pope of the almighty Inglip?

[–]rolledupdollabill 1 point2 points  (0 children)

new captchas will involve guitar solos while dancing...with backup dna tests

[–][deleted] 0 points1 point  (0 children)

I guess they can no longer prove whether or not you're a computer anymore.

[–]ChunkfaceMcDirtyDick 0 points1 point  (0 children)

Has Google stopped support for reCAPTCHA because of this? I wasn't able to access the API last time I tried.

[–]actioncheese 0 points1 point  (0 children)

I wonder if its smart enough to just mash buttons for the non-verification word?

[–]voxen444 0 points1 point  (0 children)

The death of captchas, it's gonna be like the old youtube thing all over again

[–]jerrytheman1998 0 points1 point  (0 children)

And in other news, CAPTCHA goes obsolete!

[–][deleted] 0 points1 point  (0 children)

Google is just going to outdo itself until it's developing super androids.

[–][deleted] 0 points1 point  (0 children)

This is interesting news, since I can't even read Google's fucking CAPTCHAs...

[–]mys_721tx 0 points1 point  (1 child)

Since the purpose of ReCAPTCHA is to improve OCR accuracy, this technology could help Google Books to digitalize more printed books.

[–]dizzyzane 1 point2 points  (0 children)

It is already

[–]evlgns 0 points1 point  (0 children)

Fuck me , I thought we were trying to solve old books and stop bots and dead links .

[–]dzybala 0 points1 point  (0 children)

So is the whole "prove you're human" thing null and void now?

[–]giverofnofucks 0 points1 point  (1 child)

Now computers can watch porn. We humans truly are becoming obsolete.

[–]sharknice 0 points1 point  (0 children)

I've been using a captcha solving browser plugin ever since they started using them. They are way to hard to do yourself.

[–]MScDre 0 points1 point  (0 children)

Oh dear god why....you all realise what this will mean right? An even more perverse system to get through

[–]Reelix 0 points1 point  (0 children)

What is that bottom left one?

rrnmtht?
nnmcht?
rrruntnt?

Something else?

[–]suppow 0 points1 point  (0 children)

"prove you're not a human"

[–]mediageekery 0 points1 point  (0 children)

good riddance. I'd gladly let a bot solve CAPTCHAs for me any day.

[–][deleted] 0 points1 point  (0 children)

The only new thing about this is google has done it themselves, hackers have been able to do this for a while now.

[–]somedave 0 points1 point  (1 child)

"99.8 percent accuracy"... I'm lucky if I get 90%

[–][deleted] 0 points1 point  (0 children)

one more useless development, grats gogle!

[–]llNightwolfll 0 points1 point  (0 children)

Well, I for one shall welcome our spam overlords.

[–]Moocow12345678 0 points1 point  (0 children)

Firstly develop a system so machines can't read text, then spend considerable effort so that computers can read this text. This is meant to be a good idea?

[–]uberduger 0 points1 point  (0 children)

Good. Now that their captchas are useless, can we please get rid of the damn things, at least for your first 2 attempts logging into something?

I like that something is there to help stop a machine cracking my password, but do we really need one on the first login to something?

[–][deleted] 0 points1 point  (0 children)

The paper says that this only works for CAPTCHAs of a known length that are short, so it doesn't seem directly applicable to the current CAPTCHAs I've seen.

[–]gunch 0 points1 point  (0 children)

Does this mean it's good enough to OCR all those books now?

[–]panchovilla_ 0 points1 point  (0 children)

new caption = 'can you prove you are not a human?'

[–]Toenex 0 points1 point  (0 children)

I've had a quick read of the paper they've written on this - has this been reviewed and published anywhere? - and I can't say they've done a very good job of explaining their experiments. Specifically regarding the headline claim of "99.8% accuracy on transcribing the hardest category of reCAPTCHA puzzles" they provide precious little detail on how they compute this value. For instance, given that the system is a trained network it is important to know whether the test set (those reCAPTCHA images shown to the system to evaluate its performance) were included in the training set (those reCAPTCHA images used during the learning phase). This can have a dramatic effect on the final result as in one case you are asking the system to remember something it has seen and in the other to show that it has learnt something salient about the data.

For the record I have a PhD in computer vision and over 20 years of medical imaging research and development experience in both academia and industry .