“This step is necessary to prove I’m not a bot,” wrote the bot as it passed an anti-AI screening step.

  • justOnePersistentKbinPlease@fedia.io
    link
    fedilink
    arrow-up
    2
    ·
    2 months ago

    Makes sense.

    1. Google’s “anti bot” verification has long been considered woefully inadequate.
    2. It works largely by tracking how long the user takes to click on it.
    3. LLMs are inherently fuzzy and for a bot, incredibly slow.
        • Midnight_Oil@piefed.social
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 months ago

          From the screenshot in the article, the bot is bypassing Cloudflare’s Turnstile which is not just tracking hits.

          I work in bot detection. You and anyone else reading this should understand that, behind the scenes, proof-of-work, proof-of-space, and other tests are being run to verify if the device is what it says it is. Typically, a bot is run with a tool like Playwright or Puppeteer. These frameworks are detectable with the right tests. Bots will also attempt to spoof another device’s fingerprints to blend in. These changes are also detectable if you know what to test for.

          We implement tools like Turnstile and other CAPTCHAless CAPTCHA because bots are pretty good at passing CAPTCHA while humans, rightfully, hate verifying they they’re human. Humans also struggle at passing CAPTCHA.

          The general population has zero idea the massive volume of bot traffic that is being generated right now. These tools are implemented for a reason. So the fact that a bot just breezes past this test is a problem for us all.

          Definitely not “same shit different pile”, friend.

          • justOnePersistentKbinPlease@fedia.io
            link
            fedilink
            arrow-up
            1
            ·
            2 months ago

            Thanks for the write up, but I was blocked from logging in on a cloudflare website because I opened too many windows once and their tracking cookie flagged that browser as a bot.

            Meanwhile the bot I built to track mod updates to my modlist for Rimworld and Mw5 on nexus? Never ran into any issues.

            So when I refer to Cloudflare’s bot detection as shit, that is a highly personal and professional opinion.