Hacker News Reader

Comment by whatsmyusername | Hacker News Reader

Yes, and it made half the web unusable. Getting captchaed twice in 60 seconds is an immediate bounce from me.

What? The number of captchas is the same. And in my experience, hcaptcha is a heck of a lot nicer than recaptcha. It also works on Tor. This move from cloudflare will probably save me multiple hours of time per year, that I previously spent waiting for pictures of fire hydrants to load.

If I understood their blog posts correctly, the captcha rate should be the same - it's shown to you when Cloudflare detects that you need one, not when reCaptcha/hCaptcha decide. CF just has them show the captcha.

The amount of Captcha's you need to solve will likely go up if you previously got them but had a good enough ReCaptcha score to not need to solve their challenges every time. hCaptcha does not yet have something that makes one captcha solve bypass the following few captchas.

I get like 3-4 ReCaptchas literally every time I encounter one, so I have zero problems with them changing.

This. I chalked it up to aggressive Firefox settings.

I have not seen this at all. In my experience hCaptcha results in the same or equal experience that reCAPTCHA had. Anecdotally my pass rate on hCaptcha is actually higher (reCAPTCHA gets suspicious more quickly and often asks to solve more than one prompt).

Founder of HCaptcha here. Have you tried our privacy pass or accessibility features?

Can you please open source your frontend code? The net absolutely needs a captcha that has made a promise to not run tracking code, and sticks to that by providing transparency. Google is not doing it and has only increased the amount of tracking code. If you're doing things correctly the obfuscation of the data coming from the backend is what would be critical to keeping bots out, not the actual code administering the turing test on the frontend.

https://imgur.com/tyZnANQ

Firefox through a VPN and every site that uses hcaptcha throws this up and doesn't let me in.

You're the one who is responsible for this web cancer? You purposefully disable access to VPN users and then try to pass off a "privacy pass?"

Cloudflare is responsible for deciding you need a captcha...

This is exactly the position Google tried to put themselves in with reCAPTCHAv3, where they simply provide a “score” and websites now make the decision of blocking users themselves, absolving Google of any blame. If your captcha gives scores to real users that would cause everyone to block them, that’s on you.

Your privacy pass is useless. You ruined shopping for me and several others on niche e-commerce. So much that the e-commerce owners had to add my IP as a whitelist. I'm glad I buy a lot, otherwise me and them would be screwed.

Destroying people's businesses is not nice. That's why no one cares about security, "security engineers" don't test or measure the impact of their strict measures.

HCaptcha makes me do a lot more work to be considered a human, and I end up having to do it more often.

I absolutely love Cloudflares switch from Googles absolute shit of reCaptcha to the new hCaptcha. I still have to fill it out twice, but it takes like < 30 seconds to complete my action and get on with my life. With Googles reCaptcha I always wasted ~10 minutes (this is not an overstatement) and was sometimes still unable to do anything. I'm really grateful for hCaptcha as it somehow simply works.

Privacy pass (beta) has dubious privacy claims and does not work on (most?) mobile browsers because it requires a browser extension.

Why would I sign up for something from your service to get around your service? I'll just bounce and use one of your customers competitors.

I just close the tab when I see an reCaptcha checkbox. hCaptcha is fine, I can totally not see what everyones problem is with hCaptcha.

lol wut

Idem.

Reply on news.ycombinator.com