buster VS challenge-bypass-extension

The captcha buster extension[^0] along with the service on you computer to move the mouse for you works very very well. It uses google’s TTS (afaik) to transcribe the audio captcha. It’s google verifying another google service works well. I find it very satisfying to not provide my labor to train googles computer vision corpus but instead have the snake bite it’s own tail.

Anyway, I highly recommend buster, I barely notice captchas anymore with it.

[^0]: https://github.com/dessant/buster

I was thinking something like Buster, an extension to "bypass" ReCaptchas.

If you use Firefox than use https://addons.mozilla.org/en-US/firefox/addon/buster-captcha-solver/ to automatically solve captchas otherwise change your search engine to DuckDuckGo, your privacy will thank you.

reCAPTCHA allows for audio challenges as accessibility fallback. And this has been a loophole for a long time to automatically solve them via google's own speech-to-text API https://github.com/dessant/buster

What extensions are you looking at? I'm not sure how you missed the popular ones like Buster[1], NopeCHA[2] or 2Captcha Solver[3].

[1] https://github.com/dessant/buster

One useful trick I learned is to look for the audio captcha, for accessibility purpose they must provide one and usually it's way easier than those clunky images. Some tools also automate the audio recognition like Buster, AI solving AI challenges sounds interesting !

i just have a robot to solve captcha, so i don't need to do it myself

Jokes on you. I use a robot to solve captchas for me.

I'd be fine if "ID for the web" was implemented with privacypass https://privacypass.github.io/

https://privacypass.github.io/ should help with Cloudflare verification. Works on Chrome and FireFox.

Cloudflare's Privacy Pass may help here: https://privacypass.github.io/

It should significantly reduce the amount of CAPTCHAs you see in a way that's not terrible for privacy.

For Safari, you can enable Private Access Tokens: https://blog.cloudflare.com/how-to-enable-private-access-tok...

Both of these mechanisms are similar to Google's web DRM proposal in that they rely on external issuers to generate tokens, but unlike Google's attempt they don't guarantee that ad blockers are disabled on pages that try to use tokens.

The author is referring to this standard: https://privacypass.github.io/

Apple uses it for its iCloud Private Relay service. The blind token is used so that Cloudflare can verify that a given device pays for iCloud Private Relay without revealing their identity.

Attestation is when such a blind token is proving the integrity of the software running on the device, not proving arbitrary properties. Privacy Pass could actually enable a fast, semi-decentralized system of anonymizing proxies.

If Apple exposed the “is System Integrity Protection enabled” bit to the web, then that amounts to attestation to me, and yes: Apple can do it whenever it wants, and people want Apple to do it.

Use Privacy Pass then if you don't want to use Chrome. https://privacypass.github.io/

Most hCaptcha and many Cloudflare -> https://privacypass.github.io/

That's weird, I haven't used it recently but will take a look. Looks like you're not the only one having issues though: https://github.com/privacypass/challenge-bypass-extension/issues/389

This wouldn't be at the network level, but there is this amazing extension at the browser level: https://privacypass.github.io/