You must log in or register to comment.
The EU has released an open source CAPTCHA solution
https://joinup.ec.europa.eu/collection/eupl/news/eu-captcha-under-eupl-12
So there is one, very nice!
Heard about mCaptcha too
Not sure why they used sha256 though, it mostly defeats the goal of protecting from bots (those can get access to ASICs, as oposed to regular users).
Does it work well?
It does, yes.
New captcha designs should require you to beat a dark souls boss
Next one will be to 100% every Assassins Creed game.
This is amazing. Great to have more alternatives to Google’s crap
Other than making the web tedious to use, my biggest CAPTCHA complaint is that it puts the main providers in a position to monitor everyone’s web use. The blog post doesn’t address that, but it does say this:
No third-party services
Perhaps they mean it’s self-hosted? That would be very welcome. It might require open source code to catch on, since many site owners are uncomfortable running mystery code on our servers. That would be very welcome, too.
Here’s hoping it’s good.
since many site owners are uncomfortable running mystery code on our servers
And yet Node.js exists and flourishes.
What do you mean by that, isn’t node open source as well?
The Node package manager is used in some web applications and has a very trusting distribution model, but it’s not particularly relevant to what I wrote (red herring fallacy), and GP’s phrasing alone is enough to identify them as a heckler. Please don’t feed the trolls.
True that, still, I was genuinely curious
No third-party services
Support for alternative routing
(following link)
alternative routing requires us to use third-party infrastructure and networks we do not control
huh
That just means they’re using other servers to route traffic. It doesn’t mean those servers are third party services.
Nice, but captchas are never a good measure to avoid bots, only to annoying users, apart from spying them, if it is from Google. Long before AI, bots could solve captchas better than humans. It is a clearly obsolete method. Apart the system used by Proton is impossible for blind users, Google captcha at least had an auditive captcha too.
It does stop bots, but only extremely simple bots that for instance scrape data. That’s mostly it though, more sophisticated bots can easily beat Captchas
This is the problem. I remember a very simple method to avoid spambots on a forum with great success. It is based on the following idea: A spambot or even a spammer necessarily uses a disposable email to register. These emails are usually not valid for more than 10-30 minutes, just to be able to receive the confirmation link. In this forum, the sending of the confirmation email has been delayed for half an hour due to this and with this the spam problems have ended. A normal user, if they really want to sign up, waits this time without problems. Then the usual 50 messages before being able to put a link as an additional measure. Simple and without third party apps.
I often won’t touch websites with captcha as its used to train ai for google so if I see open source captcha solutions of which I doubt I will see as often as id like as googles strong hold
But proton keep up the good work
hCaptcha is catching on pretty quickly.
That’s still proprietary, so you’ll just be feeding someone else’s systems no?
Yeah I’m not saying hCaptcha is good. It just shows that new captcha systems can become popular, and that Google’s hold isn’t as strong as it may seem.
Oh yeah, that’s true
Cool! But i still hate Captcha!
Proton is trying to do too many things and can’t excel at doing one thing. It’s getting too big beyond its capabilities which means services are going to suffer at a lower quality.
If the want blanket trust from users, remove the VPN login to make it anonymous and change the VPN code to remove all anti-features and comply with native F-Droid, other RiseUpVPN is the only choice for everybody to use.
Lmao if you’re reading this, do not use RiseUp VPN.
What’s the problem with riseup? I’ve also read some other comments below, but their confusing wording does not help…
Sure, push a known malware free vpn service while bashing a service that is very well known and respected.
Source for Riseup having known malware?
You found malware in the source code for RiseUpVPN? The source code is publicly accessible, what kind of malware is in it?
I have to admit that I don’t know enough about any of this to be sure I’m reading in the right way. Is it “known malware, free VPN” or “known malware-free VPN”?
What “Anti-features” does proton VPN have?
Accoding to F-Droid build service, it says ProtonVPN depends entirely on non-free network services, which means:
“This Anti-Feature is applied to apps that promote or depend entirely on a Non-Free network service which is impossible, or not easy to replace. Replacement requires changes to the app or service. This antifeature would not apply, if there is a simple configuration option that allows pointing the app to a running instance of an alternative, publicly available, self-hostable, free software server solution.”
Compared to RiseUpVPN source code which has zero anti-features
FUCK ALL CAPTCHA i want to develop a program not to solve captcha but to actually break them then when they go down bypass them some how some way one day i swear i will
It’s a pretty cool idea. The more you fail, the more POW is applied.
everyday I have more reasons to not trust Proton
