2415: Allow Captcha - Revision history

Elektrizikekswerk: /* Explanation */ Removed some stuff I think was a little bit "overexplaining".

2024-06-06T11:25:18Z

‎Explanation: Removed some stuff I think was a little bit "overexplaining".

ClassicalGames: Spelling

2023-04-24T08:05:23Z

Spelling

Davidy22: Reverted edits by Explain xkcd server admin (talk) to last revision by Theusaf

2022-05-21T02:57:04Z

Reverted edits by Explain xkcd server admin (talk) to last revision by Theusaf

Show changes

Explain xkcd server admin at 21:28, 20 May 2022

2022-05-20T21:28:27Z

Show changes

Theusaf: Reverted edits by 👖🔥 (talk) to last revision by While False

2022-05-11T18:43:44Z

Reverted edits by 👖🔥 (talk) to last revision by While False

Show changes

👖🔥 at 17:52, 11 May 2022

2022-05-11T17:52:11Z

Show changes

While False: rv

2022-05-04T21:24:02Z

Show changes

Ex Kay Cee Dee at 21:23, 4 May 2022

2022-05-04T21:23:59Z

Show changes

While False: rv

2022-05-04T21:20:21Z

Show changes

Ex Kay Cee Dee at 21:20, 4 May 2022

2022-05-04T21:20:20Z

Show changes

@@ Line 8: / Line 8: @@
 ==Explanation==
-Captcha is designed to prevent spambots from being able to post on websites by posing challenges that humans can easily solve but that spambots and other automated programs cannot solve. The original version (used in [[632: Suspicion]]) asked users to identify text that was rotated, warped, or otherwise modified in order to make it more difficult for automated programs to solve. Once automated programs got good at that, new captchas were put out that exploited the fact that computers tend to be bad at image recognition, e.g. asking the user to select only images that contain cats from a grid of images of cats, dogs, and other objects (used in [[1897: Self Driving]]). This captcha appears to combine the two methods—with the additional hurdle that in order to pass the captcha, users must be able to not only read but also understand (i.e. know the definitions of words). However, if the goal is to allow humans but not computers to pass (although, as the next paragraph will describe, it is not the goal), this is not a good method of differentiating between the two. Any computer program that can accurately read text (and there are now many programs that can do so) would know which words start with 'A' and would be able to look up the definitions (including parts of speech) online, so this would not be effective as a captcha. Humans on the other hand, would often get confused between "ale" and "ail" or between "allot" and "a lot". The English language has no distinction between nouns and verbs by spelling, only grammatical usage, and many words in English are both nouns and verbs, depending on context and placement.
+{{w|Captcha}} is designed to prevent automated access on websites by posing challenges that humans can easily solve but that spambots and other automated programs cannot solve. The original version (used in [[632: Suspicion]]) asked users to identify text that was rotated, warped, or otherwise modified in order to make it more difficult for automated programs to solve. Once automated programs got good at that, new captchas were put out that exploited the fact that computers tend to be bad at image recognition, e.g. asking the user to select only images that contain cats from a grid of images of cats, dogs, and other objects (used in [[1897: Self Driving]]). This captcha appears to combine the two methods—with the additional hurdle that in order to pass the captcha, users must be able to not only read but also understand (i.e. know the definitions of words). However, if the goal is to allow humans but not computers to pass (although, as the next paragraph will describe, it is not the goal), this is not a good method of differentiating between the two. Any computer program that can accurately read text (and there are now many programs that can do so) would know which words start with 'A' and would be able to look up the definitions (including parts of speech) online, so this would not be effective as a captcha. Humans on the other hand, would often get confused between "ale" and "ail" or between "allot" and "a lot". The English language has no distinction between nouns and verbs by spelling, only grammatical usage, and many words in English are both nouns and verbs, depending on context and placement.
 In reality, however, the window is merely disguised as a captcha in order to trick human visitors into allowing the website to install "a helper tool", which may be malware, on their computer. The top of the window uses a similar shade of blue to the current version of {{w|reCAPTCHA}} (currently the most common brand of captcha), the prompt includes the phrase "to prove you're human", and the grid is similar to the grid used by reCAPTCHA. However, positioned to appear to humans as two reCAPTCHA boxes is a window asking viewers whether they want to allow or deny the website's request to install the supposed "helper tool". The idea is that because "allow" is a verb beginning with the letter A, human visitors would click on what they think is the box with the word allow in it but actually allow the website to install potential malware on their computer. The window attempts to disguise this by formatting many of the words in boxes as buttons and including other text in smaller font on other boxes. In addition, the captcha may be intentionally difficult so that users will be too distracted by wondering whether ale is a verb to process the meaning of the request.
@@ Line 16: / Line 16: @@
 Shady websites often use similar tactics to trick you into allowing notifications, including saying "[https://www.bleepstatic.com/swr-guides/c/click-allow-to-verify-that-your-are-not-a-robot/notification-subscription-page.jpg Please allow notifications to confirm you are not a robot]". This comic combines that with a traditional reCAPTCHA to try and trick savvier users too.
-The title text is another trick reCAPTCHA which is trying to make you give out your {{w|social security number}} by clicking the pairs of numbers that appear in your Social Security number. A social security number is a form of identification used in the United States, originally used for the Social Security Administration. Over time, this number has become a type of national identification number, so stealing these numbers would allow a scammer to commit identity fraud. Of course, it would use a different grid, as the grid pictured in the comic has words, not pairs of digits. If you can find all of the pairs then they would be able to guess your real number and thus this would be a weird kind of phishing attempt. If the grid is 4×4 (and some reCAPTCHA grids are only 3×3), then it can only show 16 of the possible 100 pairs of two digits, so any people who are successfully tricked likely would not reveal their entire Social Security numbers because some digit pairs in their Social Security numbers would not appear. However, it should be noted that this trick likely will not be as successful as the captcha-based trick because the phrase "Social Security number" will likely raise alarm bells concerning identity theft, and people who are not citizens or permanent or temporary residents of the United States will not have Social Security numbers, so they will not be able to be tricked into revealing personal information this way even if they are especially gullible.
+The title text is another trick reCAPTCHA which is trying to make you give out your {{w|social security number}} by clicking the pairs of numbers that appear in your Social Security number. A social security number is a form of identification used in the United States, originally used for the Social Security Administration. Over time, this number has become a type of national identification number, so stealing these numbers would allow a scammer to commit identity fraud.
 ==Boxes on the reCAPTCHA==

@@ Line 16: / Line 16: @@
 Shady websites often use similar tactics to trick you into allowing notifications, including saying "[https://www.bleepstatic.com/swr-guides/c/click-allow-to-verify-that-your-are-not-a-robot/notification-subscription-page.jpg Please allow notifications to confirm you are not a robot]". This comic combines that with a traditional reCAPTCHA to try and trick savvier users too.
-The title text is a another trick reCAPTCHA which is trying to make you give out your {{w|social security number}} by clicking the pairs of numbers that appear in your Social Security number. A social security number is a form of identification used in the United States, originally used for the Social Security Administration. Over time, this number has become a type of national identification number, so stealing these numbers would allow a scammer to commit identity fraud. Of course, it would use a different grid, as the grid pictured in the comic has words, not pairs of digits. If you can find all of the pairs then they would be able to guess your real number and thus this would be a weird kind of phishing attempt. If the grid is 4×4 (and some reCAPTCHA grids are only 3×3), then it can only show 16 of the possible 100 pairs of two digits, so any people who are successfully tricked likely would not reveal their entire Social Security numbers because some digit pairs in their Social Security numbers would not appear. However, it should be noted that this trick likely will not be as successful as the captcha-based trick because the phrase "Social Security number" will likely raise alarm bells concerning identity theft, and people who are not citizens or permanent or temporary residents of the United States will not have Social Security numbers, so they will not be able to be tricked into revealing personal information this way even if they are especially gullible.
+The title text is another trick reCAPTCHA which is trying to make you give out your {{w|social security number}} by clicking the pairs of numbers that appear in your Social Security number. A social security number is a form of identification used in the United States, originally used for the Social Security Administration. Over time, this number has become a type of national identification number, so stealing these numbers would allow a scammer to commit identity fraud. Of course, it would use a different grid, as the grid pictured in the comic has words, not pairs of digits. If you can find all of the pairs then they would be able to guess your real number and thus this would be a weird kind of phishing attempt. If the grid is 4×4 (and some reCAPTCHA grids are only 3×3), then it can only show 16 of the possible 100 pairs of two digits, so any people who are successfully tricked likely would not reveal their entire Social Security numbers because some digit pairs in their Social Security numbers would not appear. However, it should be noted that this trick likely will not be as successful as the captcha-based trick because the phrase "Social Security number" will likely raise alarm bells concerning identity theft, and people who are not citizens or permanent or temporary residents of the United States will not have Social Security numbers, so they will not be able to be tricked into revealing personal information this way even if they are especially gullible.
 It should also be noted that the phrase "to prove you're human", while also attempting to disguise the trick, has a somewhat different implication. In the first example, the idea of the supposed captcha is that it asks the user to complete a task that human brains but not computer programs can perform accurately easily, such as image recognition. In the example in the title text, the idea of the fake captcha appears to be that humans are issued Social Security numbers (at least if they live or have lived in the United States), but computers are not. As the website does not already know the users' Social Security numbers, it would not actually be able to tell whether the user's response was correct. There is nothing to prevent programming an automated spambot program to randomly select zero to four of the boxes. Likewise, users could lie and not reveal their actual Social Security numbers, although those who realize that the supposed captcha is an attempt at identity theft will likely not complete it at all and could report it to law enforcement instead.