ribtoks

Sure, the limitation is mostly on the verification side (of CAPTCHA solution). For client-side it does make sense.

Use proof-of-work captchas, many are private by default. Look into Private Captcha or Cap captcha.

I feel like we need a library of better prompt-injections because not all (obvious) bot applications added the prefix.. Do you have any references?

There are other captcha alternatives like Turnstile, for example Private Captcha, Altcha etc. - they are owned by mostly “small” independent companies, they are not visual captchas (proof-of-work based) and very accesssible.

I remembered $30 from some comment I read, but didn't look for it later. If it was yours, thank you! (def. thank you for the Wallmart link! - would you like a credit in the blogpost like a quote?

> actually human generated

Human written, not generated.

> HN isn't popular enough to be invoked as a source

Excuse me, what do you mean there? The author happens to read HN too.

Have you seen Private Captcha? It's main point is privacy and GDPR compliance (while being self-hosted). It's a more modern PoW captcha without the limits of Altcha (mCaptcha is mostly out of equation at this point).

Is there a write-up/walkthrough on this? Would be interesting to read.

Also: this is kind of another nail in the coffin of non-opensource non-pow captchas.

Keeping time series in Mongo…