Bots are better and significantly faster than humans at cracking Captcha tests, according to a comprehensive new study that inspected the security system deployed in over 100 popular websites. Automated bots pose a significant threat to the internet because they can masquerade as legitimate human users and perform harmful operations like scraping content, creating accounts and posting fake comments or reviews, as well as consuming scarce resources. “If left unchecked, bots can perform these nefarious actions at scale,” warned scientists, including those from the University of California, Irvine. For over two decades, Captchas have been deployed as security checks by websites to block potentially harmful bots by presenting puzzles that are supposed to be straightforward for people to solve – but very difficult for computers. Earlier forms of Captcha, for instance, asked users to transcribe distorted text from an image, but with advances in computer vision and machine learning, bots soon caught up to recognise the text with near perfect accuracy. Engaged in an arms race with bots, Captchas have since evolved into an annoying presence on the internet, becoming increasingly more and more difficult to solve for both bots and humans. However, the new yet-to-be peer-reviewed research, posted in arXiv, finds bots are able to quickly crack Captcha tests with ease, suggesting global effort users put into cracking these puzzles every day may be more trouble than its worth. In the study, scientists assessed 200 of the most popular websites and found 120 still used Captcha. They took the help of 1,000 participants online from diverse backgrounds – varying in location, age, sex and educational level – to take 10 captcha tests on these sites and gauge their difficulty levels. Researchers found many bots described in scientific journals could beat humans at these tests in both speed and accuracy. Some captcha tests took human participants between nine and 15 seconds to solve, with an accuracy of about 50 to 84 per cent, while it took the bots less than a second to crack them, with up to near perfection. “The bots’ accuracy ranges from 85-100 per cent, with the majority above 96 per cent. This substantially exceeds the human accuracy range we observed (50-85 per cent),” scientists wrote in the study. They also found that the bots’ solving times are “significantly lower” or nearly the same as humans in almost all cases. Since current Captchas do not meet the required security goal of keeping bots away, researchers have called for better and more dynamic approaches to protect websites. Read More Shock for millions of voters as details exposed in hack – which went undetected for a year AI-driven cyberattack can now steal your passwords with near 100 per cent accuracy, study warns More than a million NHS patients’ details compromised after cyberattack Many adults would struggle to understand video-sharing platforms’ rules – Ofcom Now even Zoom tells staff: ‘Come back to the office’ Ozzy Osbourne PlayStation tweet which failed to reveal link to Sony banned

ROCKFORD, Ill.--(BUSINESS WIRE)--Jun 20, 2023--

A new report claims that Strava could be used to track people down – despite the platform’s efforts to make their data anonymous. Strava is a fitness tracking platform that allows people to log their exercises as well as engage with other based on their workouts. But it also includes other tools, such as its heatmap feature, which is intended to anonymously gather together people’s journeys and show them on one map. The tool is intended to allow people to see which parts of the world are particularly active, which can be helpful for finding particularly good areas for workouts or trips. But it can also be used to find out people’s personal information, according to a new report. That heatmap data is anonymised, so that it shows more general trends and cannot be used to track specific people who might mark their routes private. But the new research suggests that it is possible to de-anonymise that data, at least in some cases, to work out who lives where. The paper, published by three computer science researchers at North Carolina State University, says that “the home address of highly active users in remote areas can be identified, violating Strava’s privacy claims and posing as a threat to user privacy”. They detailed a complicated process that they claimed was able to find addresses and then combine that with other data from Strava to find the home address of a certain individual. In short, they were able to use the heat map to identify locations where people lived, and then take other location data to work out who might live at that specific house. The attack will not work on everyone: they need to live in remote areas where people’s houses stand on their own, those users need to have the heat map setting switched on, and might run in patterns that do not identify their home addresses, for instance. But the researchers claimed that a significant number of users could be identified based on publicly available information on Strava. That is a “violation of user privacy”, the researchers said. And it could also pose a threat to those users, by allowing people’s addresses to be made public, and then matched to certain activities, such as when they work out or where they tend to travel. The researchers suggested two ways to avoid the attack. One would be to remove heat map data that is clearly near a home, and another would be to add Strava’s existing “privacy zones” tools that block out data from certain locations to its heat map, which is not currently the case. Strava said that it looks to ensure users’ data stays private, and suggested that people concerned about potential issues turn off the use of aggregated user data on their account. “The safety and privacy of our community is our highest priority. We’ve long had a suite of privacy controls (including Map Visibility Controls) that give users control over what they share and who it’s shared with,” the company said. “Strava does not track users or share data without their permission. When users share their aggregated, de-identified data with the Heatmap and Strava Metro, they contribute to a one-of-a-kind data set that helps urban planners as they develop better infrastructure for people on foot and bikes, and makes it easy to plan routes with the knowledge of the community. “The Global Heatmap displays aggregated data from a subset of Strava activities and will not show ‘heat’ unless multiple people have completed an activity in a given area. Any Strava user who does not wish to contribute to the Heatmap can toggle off the Aggregated Data Usage control to exclude all activities or default their Activity Visibility to be only to themselves (’Only You’) for any given activity. “We are consistently strengthening privacy tools and offering more feature education to give users control over their experience on Strava. This includes simplifying our Privacy Policy with our Privacy Label at the top.” Read More Breakthrough could soon allow us to actually use quantum computers, scientists say Three and Vodafone are merging. Here’s what that means for your phone McDonald’s, Delta among websites down after Amazon Web Services cloud crashes Breakthrough could soon allow us to actually use quantum computers, scientists say Three and Vodafone are merging. Here’s what that means for your phone McDonald’s, Delta among websites down after Amazon Web Services cloud crashes

According to leaks, Michael Myers will be added to the Fortnite Item Shop during Fortnitemares 2023 on Oct. 24 at 8 p.m. ET.

China’s leading internet search provider Baidu Inc. may get a fresh tailwind from the sooner-than-expected launch of its

With Windows 11, Microsoft boldly changes up its market-leading desktop operating system, giving it a

So much of your day-to-day work happens with your eyes. Your workspace may have a

The reports were right: WhatsApp has added the ability to edit messages you've already sent.

A new Warzone 2 Resurgence map called Vondel is coming to Warzone 2 Season 4 on June 14 to give fans a break from Ashika Island.

Tesla is letting some drivers use its Autopilot driver-assist system for extended periods without making them put their hands on the steering wheel, a development that has drawn concern from U.S. safety regulators

Smoke from Canadian wildfires will obscure the skies in New York and across the Mid-Atlantic starting Wednesday, just

By Hadeel Al Sayegh, John O'Donnell and Elizabeth Howcroft LONDON/DUBAI Palestinian militant group Hamas uses a global financing