★ New blog post: Otherkin-friendly CAPTCHAs, revisited.
Some folks have asked me how I make CAPTCHAs respect my non-human identity. The short answer is I copied code from @mavica_again. The longer-ish answer is this.
https://beeps.website/blog/2023-04-27-otherkin-friendly-captchas-revisited/
@batbeeps @mavica_again oooo that looks useful. Been cursing captchas for a while over this. Thank you!
@batbeeps@chitter.xyz I'm absolutely for fixing human centrism, and also we need more things that don't need complicated CAPTCHAs at all[*] but rather can rely on real moderation and just turning the thing off for a few hours during attacks. build small, don't scale giant.
(*: simple ones like /leave this field blank/ and /what's 4 + 1?/ are fine and good)
@polychromata Oh absolutely, CAPTCHAs are garbage experiences for a lot of _actual_ humans.
Honeypot fields are unfortunately less effective nowadays, but that's where using code to flag obvious spam and the element of manual moderation comes into it.
@batbeeps had to change "cf-stage" to "content" for the turnstile one to work, but now the internet is asking me if i'm a critter and that's good
@keeri Huh, they must've updated their code since. Turnstile is really hard to test with cuz it doesn't even show the message most of the time XP
@batbeeps it's not working on Cloudflare turnstile again. They changed the challenge-stage id to JStsl2, but even after modifying the script accordingly it's doing nothing.
Update: managed to fix it by using firefox's userContent.css instead of Stylus, as elements of the captcha are in shadow DOM, as well as previous tweak.
@munsterlandr Guh, that's annoying. Especially if they've started to move more stuff into the shadow DOM.
very neat, will try this :3
(one slight concern it has is some CAPTCHA providers being Silly and. idk, inspecting their own CSS and going "aha this must be a bot(bad)" and flagging it. idk. probably not a concern, but it wouldn't be surprised)
@5225225 I’ve not noticed or had reports of that being an issue, so it outta be fine.
The main issues I’ve encountered with it are mostly with Cloudflare, who seemingly have multiple versions of their CAPTCHA code used in different contexts.
The one in the code seems to be the most popular of them, but your mileage may vary.
@batbeeps i love this so much
@batbeeps @mavica_again very based :3