[HN Gopher] DOOM Captcha
___________________________________________________________________
DOOM Captcha
Author : jukkakoskinen
Score : 259 points
Date : 2021-05-24 14:48 UTC (8 hours ago)
(HTM) web link (vivirenremoto.github.io)
(TXT) w3m dump (vivirenremoto.github.io)
| ninkendo wrote:
| My hands went straight for the arrow and ctrl keys, assuming it
| was real DOOM controls. I was disappointed :)
| proc0 wrote:
| Amazing! This opens so many possibilities for captchas.
| jacobmischka wrote:
| I failed this 3 times in a row as a human (I promise) on a
| touchpad.
| 0xbadcafebee wrote:
| Thank you for making silly technology
| shadowgovt wrote:
| It's good. Now if only I can get a version of this where the user
| has to punch the monkey to solve the CAPTCHA... ;)
| dvtrn wrote:
| Now _that 's_ a call back
| Lammy wrote:
| I'm glad Everything2 is still around https://everything2.com/
| title/Punch+the+monkey+and+win+%2524...
| maneesh wrote:
| which hamsters are ACTUALLY dancing?
| rzzzt wrote:
| Close all the pop-up windows to proceed.
| MeinBlutIstBlau wrote:
| As long as I don't have to click a damn bus or find the traffic
| lights again I'm all for it.
| joshmn wrote:
| Have you met the sidewalk?
| tgv wrote:
| May I introduce you to our lovely collection of traffic
| lights?
| protomyth wrote:
| The traffic cone was particularly heinous as I am damn sure
| they mislabeled one of the images.
| 988747 wrote:
| Oh, so it was you...
| https://edition.cnn.com/2021/05/17/tech/waymo-arizona-
| confus...
| city41 wrote:
| If you are on desktop, when clicking the "I am human" checkbox,
| hold your mouse down for a few seconds, and move it around just
| a touch for good measure, before letting go. This is usually
| enough to convince the system you are human and it skips the
| image hunt.
| ryantgtg wrote:
| This is great. Do you have any more tips about how to be more
| human?
| swiley wrote:
| Be lazy when clicking the images. Mailboxes are parking
| meters.
| jtvjan wrote:
| Look if the site has an option to use the noscript
| recaptcha (you might be able to force it to appear by
| blocking scripts). That one's much easier: as long as you
| get it right it lets you through, and you always have to
| select three squares (none of that "keep clicking until
| there's no more matching" garbage).
| middleclick wrote:
| Have you encountered the CAPTCHA from this monstrosity of a
| company called Arkose Labs? I don't get angry but I was trying
| to redeem gift cards for an elderly relative and I was shouting
| and gave up.
|
| Not sure if I am allowed to paste links but search for "arkose
| labs reddit" or just the name of this company on Twitter. Or
| search "arkose labs san francisco" on Google and just read the
| reviews.
| donkarma wrote:
| Easily the worst captcha there is, it makes you do the
| captcha 10 times (it says 10 to go after you do the first
| one) and if you get one wrong it doesn't tell you until the
| end after you've done them all, in which case you have to
| repeat it.
| gentleman11 wrote:
| You can click whatever you want. Every captcha I've done in the
| last year says I missed something, then lets me pass. If I just
| click on trees and rocks, same thing, it lets me past. I think
| all they are doing is deeply fingerprinting you and the image
| matches are a red herring
| dividuum wrote:
| I'd rather solve Super Turbo Turkey Puncher 3.
| smoldesu wrote:
| Just took a break from playing Doom Eternal to find this, it's so
| cute! The simple embed is a great idea too, I hope as the
| internet starts to decentralize we'll see more fun things like
| this floating around.
| bitdestroyer wrote:
| People think they can't figure out which images have stop
| lights, crosswalks, or bicycles in them now, wait until they
| introduce the Marauder Captcha.
| eurasiantiger wrote:
| The Cthulhu Captcha tests whether the user becomes insane
| upon viewing it.
| gcp123 wrote:
| The music made this a hostile user experience for me. No thanks.
| lostgame wrote:
| The music is _terrible_ - (gives me 90 's website MIDI audio PTSD
| :P) - but it's a cute idea.
|
| Would this actually be an effective CAPTCHA? E.G. Security-wise?
|
| Also, speaking of 90's-internet PTSD, I actually almost mistook
| this for a spam banner ad _knowing already_ what I went into.
| Wayyy too many of those 'punch the monkey' or 'shoot the duck'
| animated banner ads that didn't even care where you shot. :P
| gentleman11 wrote:
| The music is fantastic and classic, but there are modern
| remixes with actual guitar that are even better. Doom 1 and 2
| both have full soundtrack remakes that fans made (possibly, by
| the dusk fellow?)
| rzzzt wrote:
| The 3DO port had each song played by a band:
|
| - http://www.vgmpf.com/Wiki/index.php?title=Doom_(3DO)
|
| - https://www.youtube.com/playlist?list=PLB2880E9A7DFF6C25
| banana_giraffe wrote:
| Generally something that can be deterministically scripted to
| work around won't work well as a captcha:
|
| https://imgur.com/a/mbLnTH7
|
| Here I'm just clicking the entire row of pixels four times.
|
| Even if you fixed that (perhaps misses could trigger a
| failure), then you still need to create a problem that's hard
| for a computer to solve .. finding the monster seems pretty
| straightforward.
| drivers99 wrote:
| That's just the original DOOM music (first level, E1M1) on a
| Sound Blaster AWE32 or something similar, so it's completely
| accurate.
| foxyv wrote:
| If you think that's bad, try listening to Doom on PC Speaker.
|
| https://www.youtube.com/watch?v=Y78TbnytFOk&ab_channel=Zdend...
| lostgame wrote:
| Guys, I didn't mean the music _itself_ was terrible, I meant
| the fact that music was included to be auto-on to _start_ in
| web content produced post-2002...
|
| I am fully aware what the DOOM soundtrack sounds like an my
| complaint is that there is audio _at all_ - especially on by
| default - and that it reminds me of those awful websites from
| the 90 's that did this.
| tgsovlerkhgsel wrote:
| Hitboxes are off, headshots don't count :(
|
| Also, I was hoping for a full 3D FPS version with canvas etc.
| oblak wrote:
| Do you remember the Quake 3 hitbox (it was only one for all
| models), especially after a jump pad? Quake Live fixed most of
| these issues but back than things were pretty bad. Still way
| ahead of everyone else but yeah... it wasn't perfect
| MaxBarraclough wrote:
| I remember the original Unreal Tournament had very large head
| hitboxes. It would trick you into thinking you had a great
| aim.
| gentleman11 wrote:
| Headshots in doom 1, the game that had auto aiming and no
| ability to look up originally? Also, fully 3d might make it
| slower to load in case somebody actually wanted to use this for
| real. I played a webgl doom clone once that lagged like crazy
| gagege wrote:
| If the aiming in this was only on the x axis, then what you
| said makes sense. Otherwise, I agree with OP, hitboxes are
| off.
| asddubs wrote:
| the prophecy has come true
|
| https://www.youtube.com/watch?v=WqnXp6Saa8Y
| sva_ wrote:
| Please show that P != NP to prove that you're human. (500
| characters remaining)
| asddubs wrote:
| if P = NP, it logically follows that NP = NNP, and NNP =
| NNNP, etc. this violates the law of conservation of energy,
| qed
| chias wrote:
| Easier proof:
|
| Assume N != 1.
| asddubs wrote:
| yes although technically my proof also proves that X !=
| 1*X, so it's more broadly applicable
| miquelcamps wrote:
| Hello! I'm Miquel the author of Doom Captcha
|
| Thanks jukkakoskknen for sharing it on HN and everyone here
| talking about it, I hope you enjoy it :)
| nocturnial wrote:
| The only criticism I have, is that your timer is too fast.
|
| I can listen to their demands and negotiate a peaceful, mutual
| benificial resolution. After that we can establish a framework
| to resolve hostilities. But when I want to talk about free
| trade and opening borders to exchange goods... the timer runs
| out.
| rpastuszak wrote:
| Cool idea, lower the volume!
| schappim wrote:
| This is awesome. Just wanted to say "Thank you"!
| AzzieElbab wrote:
| Hello and thank you.
| tootie wrote:
| It wasn't clear in the documentation, but should I take this
| too seriously?
| macspoofing wrote:
| What do you think?
| WheelsAtLarge wrote:
| What this highlights is that CAPTCHAs/Security can be fun and not
| a never ending drag. Yes, this one is easy to break, even the
| author says so, but it's a fun concept. I hope this spurs a bunch
| of new thinking on what security can be. Miguel, GREAT JOB!
| jandrese wrote:
| While this is too simple (even the website admits that a bot
| could be written in virtually no time to break it), it does make
| me wonder if you could have a WarioWare CAPCHA. A minigame with
| extremely vague description that you have to react to quickly to
| pass.
|
| Thinking about it some more it fails the primary criteria for a
| CAPCHA: it needs to be harder to write the bot that cracks it
| than each test case, by at least a couple orders of magnitude.
| Otherwise bot makers will just create custom bots for each
| contingency. They have more time and funding than you do.
| GuB-42 wrote:
| It mostly depends on what you are trying to protect with your
| CAPTCHA.
|
| When I managed a small phpbb forum, all I had to do was to
| change a few lines in the register page to make it non-standard
| and it stopped all bots. Better than the built-in CAPTCHA.
| Simply, no one cared enough about our forum to write a
| specialized tool, no matter how easy it was.
|
| If it is all you have to protect, go ahead with your clever
| ideas, it can add a bit of flair to your website and stop bots
| effectively. For accessibility, you can always deal with
| special requests manually.
|
| The problem is entirely different if you are Google. People
| will spend months trying to break your CAPTCHA for fun and
| profit. Hand crafted problems will be solved faster than they
| can be written so "bot vs bot" is essentially your only option.
| Ntrails wrote:
| I am on a forum with like 20 other posters and bots were
| stopped by the addition of a call/response field. Nobody who
| wanted to register would forget the classic response, but no
| bot was going to be able to answer it without some pretty
| specific google fu
| thedrbrian wrote:
| How does that work if you want to grow your hobby or group?
|
| And if it's something between friends why not use a private
| whatsapp group or IRC
| dankwizard wrote:
| The one's I've seen are not difficult questions. I.e if
| it was a forum for some TV Series fandom, a question
| could be 'What is the main character's name?'
| swiley wrote:
| Perhaps you could generate the games/descriptions from
| parametric components.
| lamontcg wrote:
| Have the CAPCHA require properly constructing a nonlinear
| programming problem to solve an optimization problem, where the
| requirements are not expressed in terms of the NLP and the
| human has to design it.
|
| Which would have the side effect of putting the bot makers to
| work on useful and hard problems to solve.
| robertlagrant wrote:
| Good idea! To prove you are a human, mine three Bitcoin.
| handrous wrote:
| The trouble with anything designed to prevent computers from
| understanding something, while allowing humans to understand
| it, is accessibility.
| rootsudo wrote:
| This is a great patent esque idea. I thank you good sir, now to
| see if I can steal it as my own.
|
| It also reminds me of only Konami able to have mini games in
| loading screens.
| royjacobs wrote:
| I believe that was Namco (as evidenced by the Ridge Racer PS1
| loading screen).
| rootsudo wrote:
| Aha, yes, they own Pac Man.
| flanbiscuit wrote:
| The DOOM Captcha is just using html/css/js so it's easy for
| bots to crack with simple DOM querying/manipulation in an
| automated browser. But what if canvas was used instead?
|
| > A minigame with extremely vague description that you have to
| react to quickly to pass.
|
| I dont know how advanced current bots are at breaking captchas
| these days but if you're using a canvas then they would have to
| use some kind of image/video processing and recognition and
| then also know the rules of the game. Just curious if using
| canvas would make things harder for bots. Maybe it's already
| been done, I have no idea
| grogenaut wrote:
| While I know this is a fun captcha, it does bring up a problem
| I'm having more and more with the web and mobile. There's no
| way my mom would ever be able to handle this captcha. Heck I
| didn't even get the 4 kills on the first one and I regularly
| play FPSes (I used a trackpad for this).
| bawolff wrote:
| Things that require quick reflexes are probably easier for a
| computer.
| jandrese wrote:
| WarioWare games aren't twich reflex games. They'll do
| something like show a bomb with a lit fuse on the screen and
| flash a single word like "blow" and you have to quickly
| maneuver the mouth of the character next to the fuse and
| press the button before it explodes. It's about comprehending
| the situation quickly, the actual action is extremely simple
| and low fidelity.
| hirundo wrote:
| Am I the only one that has a problem with audio that defaults to
| maximum volume? Amazon does this too. But I keep my default to a
| volume that lets me crank up soft stuff enough to be audible. For
| pages like this, the sound just about makes my ears bleed before
| I can mute it.
| thrdbndndn wrote:
| My pet peeve of these is not the volume being too high (which
| they normally are), but the lack of volume control on
| web/desktop.
|
| Unfortunately it would be more and more common as the mobile
| world take the dominance.
| bob1029 wrote:
| No. This is a problem in a lot of places.
|
| See: Every video game ever made with audio settings locked
| behind a 2 minute unskippable cutscene.
| donkarma wrote:
| Yeah it is awful, I should just turn down Firefox to low and
| watch all videos on VLC
| forgotmypw17 wrote:
| You can use browser permissions to allow/deny sound
| privileges just like with JavaScript
| colechristensen wrote:
| I don't, the "volume" adjusters on websites are all ... fake?
|
| There are several layers of volume control but the last one on
| the stem level is the only real one (ok maybe one more level on
| a physical speaker amp if you have it)
|
| Application levels can only cut dynamic range by adjusting
| volume, i would expect the default level to be full, if i want
| something quieter i'll turn down the system loudness
|
| The nominal loudness of a sound is sometimes inconsistent but
| that is on the sound mastering level not the application level.
| chovybizzass wrote:
| i c ouldn't do it fast enough :(
| maxk42 wrote:
| THIS is the captcha I've been looking for all these years!
| abdusco wrote:
| Cool! Music is a bit too much, but it's great that it can be
| turned off.
|
| Link to repo: https://github.com/vivirenremoto/doomcaptcha
| gentleman11 wrote:
| I enjoy the music, but when you click to start, if there were
| two buttons it would be nice: click to start (silent) and start
| (with audio)
___________________________________________________________________
(page generated 2021-05-24 23:00 UTC)