A person using binoculars looking at search bars.

The Washington Post

0215-helpdesk-searchnow

TF-GoogleFindMy

A collage with an iPhone in a monster truck.

0507-tf-iPad

A collage with an image of a person on TikTok

0423-help-TIKTOKUSERS

A person listening to headphones, meditating and holding a camera.

0503-tf-FunTech

0501-help-MSFTPASSKEYS

Mario jumps out of a phone with a victory #1 foam finger.

0430-TF-AppleCracks

An image of a flapper showing off her hip flask during the Prohibition against alcohol in the 1920s, but the flask has been replaced with a TikTok app.

0426-TF-TikTokQuestions

A no smoking sign at the German airport

iStock

An abstract illustration of a phone with shortcuts.

0418-help-SHORTCUTS-final

For The Washington Post

Goth characters hide in app-shaped holes in a phone.

0416-tf-gothapps

An illustration of a cereal box with internet symbols.

4120-TF-InternetLabels

Kyiv,,Ukraine,-,August,25,,2023:,Engraved,Apple,On,Iphone

ILLUSTRATION

An illustration of the Earth orbiting YouTube

0409-TF-YOUTUBE

Graphics reporter

Shooting the eclipse with your phone

A yellow tote bag with dotted lines showing the contents: a power bar to charge a phone, a solar-powered charger, a compass, a waterproof phone case, a weather radio, and an N95 mask

0719-help-emergencykit

0405-TF-TechHype

help-walkingdesk

Respond to prefers-color-scheme dark in app web views

Follow section front redirects in Spectrum

Enable NLP source in PCS for load testing

Switch off the News Alerts Survey Widget when we have enough responses

Poll to determine if new LUF updates are available

Allows the winning A/B test variant to be turned on without Spectrum deployment

Show infinite scrolling sections in Assembler MultiView

Show option for NLP article summaries in Action Bar

Show NLP summaries collection recirc on article pages

A general feature flag for Recipe Features that aren't yet released

Feature flag for media team features that aren't yet released

Use new Orca video player for preroll plugin in Spectrum

Show the snow tracker (instead of the heat tracker) on Spectrum

Middle East conflict live updates: Israel renews fight in north Gaza, advances on Rafah in south

Why Spain will recognize a Palestinian state

Far-right German party threat to democracy so can be spied on, says court

I used to dismiss my mom’s advice. Then I found a note she wrote before she died.  

Photos of his mom at lunch are a balm people didn’t know they needed

Dog hit by car loses leg, is adopted by firefighter who helped her

Mistakes pile up, leaving the Nationals with a 3-2 loss at Fenway Park

The Wizards will pick second in the NBA draft. Here’s whom they could take.

Eighth-inning decision burns the Nats in a 4-2 loss to the Red Sox

Can you spot bad financial advice on TikTok? Take our quiz

5 myths about Social Security as the program faces a funding crisis

Social Security has to be fixed. But you still need your own savings.

Manafort will no longer take on Republican convention role

An unexpected sight to behold: Ted Cruz working bipartisan deals

Narrative of Trump snoozing in court takes hold — much to his annoyance

No, Apple, people do not want tech to crush everything in its path 

The urgent air defense lessons of April 16 

Are smartphones destroying childhood? It’s complicated.

U.S.-China talks on AI risks set to begin in Geneva

Fooled by AI? These firms sell deepfake detection that’s ‘REAL 100%.’ 

Apple apologizes for iPad ad after blowback 

Pete Buttigieg’s view from the middle seat

The case for eating at Italian gas stations

Cruise ship drags dead whale into New York, prompting investigation

Carolyn Hax: What’s the real cost of going halfsies on a modest engagement ring?

Ask Amy: Dad hurt by daughter publicly reconnecting with her biological family

Miss Manners: Should I accept offered seat swaps when I’m flying for free?

Find your Westminster show dog name: You may be a CH Lolly’s Marble Tuxedo MX

Northern lights glow over Switzerland

Trump trial live updates: Michael Cohen testifies about Stormy Daniels, Trump in hush money case

Big Tech news and how to take control of your data and devices

See more coverage in your recommendations

Technology

Tips delivered to your inbox twice weekly

The Tech Friend newsletter

Business and Tech alerts

A cartoon graveyard with a headstone showing a captcha message.

This article is a preview of The Tech Friend newsletter. <a href="https://www.washingtonpost.com/newsletters/the-tech-friend/?method=SURL&location=ART&itid=lk_inline_manual_1&itid=lk_inline_manual_1&itid=lk_inline_manual_1&itid=lk_inline_manual_1&itid=lk_inline_manual_1&itid=lk_inline_manual_2&itid=lk_inline_manual_2&itid=lk_inline_manual_2&itid=lk_inline_manual_2&itid=lk_inline_manual_2&itid=lk_inline_manual_1&itid=lk_inline_manual_2&itid=lk_inline_manual_2" target=_blank>Sign up here</a> to get it in your inbox every Tuesday and Friday.

You have probably seen Captchas — puzzles that ask you to pick out all the bicycles in an image or to decipher letters that are written in squiggly lines.

These riddles are designed to let you buy concert tickets or sign up for Netflix but keep out someone who is using computers to hammer a bank website with bogus credit card applications or employing <a href="https://www.washingtonpost.com/technology/2020/12/16/ps5-buying-bot/" target="_blank">rapid-fire software to buy video game consoles</a> before you have a chance.

The problem is that Captchas don’t do a great job stopping bots. And for the rest of us, they waste time and harvest our personal information.

Captchas persist partly because there haven’t been better options to stop fraud or automated software. Finally, though, there are more technologies coming to put Captchas on their deathbed.

One basic premise behind the Captcha-killers backed by companies including Apple is that instead of you solving a puzzle, your computer must solve challenges to prove you’re human. You don’t have to do anything.

Captchas are a tiny annoyance, but they’re also one more stodgy technology that’s making your life harder, not easier. Like<a href="https://www.washingtonpost.com/technology/2023/01/10/lastpass-breach-kill-passwords/" target=_blank> online passwords</a> and <a href="https://www.washingtonpost.com/technology/2023/02/24/apps-subscription-costs/" target=_blank>app stores</a>, Captchas have a good reason to exist, but they have clung to life long after the drawbacks outweighed the benefits.

Let’s talk about why Captchas persist to annoy you, and why there’s hope they might slowly die.

The goal of Captchas is to prove that you’re a human by doing a task that (in theory) only a person can do.

The simplest version of a Captcha is a box you check that says, “I am not a robot.” The complicated versions of a Captcha are diabolical:

While Captchas can be tough for humans, they aren’t so effective at proving humanness.

Artificial intelligence has <a href="https://www.theverge.com/2019/2/1/18205610/google-captcha-ai-robot-human-difficult-artificial-intelligence" target=_blank>solved many types of Captchas for years.</a> Recently, <a href="https://twitter.com/sayashk/status/1671576723580936193" target=_blank>ChatGPT has cracked some of the puzzles</a> or <a href="https://www.businessinsider.com/gpt4-openai-chatgpt-taskrabbit-tricked-solve-captcha-test-2023-3" target=_blank>tricked people</a> into solving Captchas. Businesses also<a href="https://www.f5.com/labs/articles/cisotociso/i-was-a-human-captcha-solver" target=_blank> pay armies of workers</a> to fill out Captchas in bulk.

The more people and machines <a href="https://www.vice.com/en/article/mgxqb8/the-man-who-broke-ticketmaster" target="_blank">find ways to get around</a> Captchas, <a href="https://www.wired.com/story/smiling-dogs-horses-made-of-clouds-captcha-has-gone-too-far" target="_blank">the harder companies have made them</a>. This creates a doom loop of irritation that might drive you away from buying stuff or accessing your accounts.

Forter, which helps retail websites stop fraud, said that for every dollar a business loses to bogus transactions, it turns away $30 by mistakenly blocking or discouraging legitimate customers, including through use of Captchas.

“Captchas have been broken to some extent for a long time,” said John Graham-Cumming, chief technology officer of the security firm Cloudflare.

Cloudflare’s data shows that people take 25 seconds on average to solve a Captcha. “They’re a hell of a waste of time,” Graham-Cumming said.

Captchas also compromise your privacy. When you run across a Captcha, the technology might keep a permanent record of your phone or computer identity that can track everywhere you go online.

They also tend to be difficult for people with low vision or other disabilities.

The potential Captcha killers are here

What’s changing are newer approaches that don’t make you prove to a computer that you’re human — which, let’s face it, is a silly idea.

Instead, machines back channel to one another to sort out who is a legitimate web visitor and who isn’t.

If you’re trying to buy tickets to a football game, for example, throwing a Captcha at you is a traditional way to stop people from using software to hoard tickets.

Instead, Graham-Cumming said, the ticketing company’s computer systems might challenge your web browser to draw a random piece of text.

It might then look for clues in the small differences in fonts between the Chrome web browser on a Mac and Windows computer that signal a browser is being controlled by automated software and not a real person.

courtesy of Cloudflare

Humans also fiddle with a computer mouse or move around a touch screen phone in a “very human way,” Graham-Cumming said, so the ticketing computer might scope out how the cursor is moving.

Apple says a ticketing app might also detect whether you’re logged in to your Apple account and therefore the ticket buyer is more likely to be an individual rather than automated software.

The best-case scenario is that all this happens without you doing anything. The computer on the ticketing end is making a yes-or-no assessment about whether the computer on your end is exhibiting bot-like behavior.

There’s also separation between you and the ticketing website to keep your identity and information private.

These approaches use a technology standard called <a href="https://datatracker.ietf.org/wg/privacypass/about/" target="_blank">privacy pass</a> that’s backed by companies such as <a href="https://www.theverge.com/2022/6/20/23175765/apple-ios-16-captcha-private-access-tokens" target="_blank">Apple</a>, Google, <a href="https://blog.cloudflare.com/turnstile-private-captcha-alternative/" target="_blank">Cloudflare</a> and its competitor <a href="https://www.fastly.com/blog/private-access-tokens-stepping-into-the-privacy-respecting-captcha-less" target="_blank">Fastly</a>.

Carlos Alvarez, the chief technology officer of Ticketmaster, said the ticket seller also uses machine-to-machine scoring systems to sort out legitimate ticket buyers from scalpers using software.

Alvarez wouldn’t spill details on exactly what computer signals the ticketing service uses to distinguish bots from the rest of us. He said no technology on its own will stop ticket bots.

There will be ways around these non-Captcha technologies, too. As long as locked gates have existed on the internet, people have found ways to go around or through them.

The challenge is to strike a balance between making it easy for you to buy tickets while putting up roadblocks to fraudsters or hoarders. Captchas aren’t striking the right balance anymore.

“Captchas are such a nightmare for people that something better had to come along,” Graham-Cumming said.

If you’re wondering whether there’s anything you can do to see fewer maddening Captchas … sorry, not really.

The websites and apps you use are the ones that determine whether you see a Captcha and what form it takes.

Experts in online security told me that if you’re using technologies intended to shield your online activity such as a virtual private network (<a href="https://www.washingtonpost.com/technology/2023/06/20/best-digital-photo-services/" target=_blank>VPN</a>) or <a href="https://support.apple.com/en-us/HT212614" target=_blank>Apple’s iCloud Private Relay</a>, you might see more Captchas.

You may also be more likely to hit Captchas on less sophisticated websites than on large sites that have smarter ways to verify you’re a legitimate customer.

And if you’re wondering, as I did, why the image-picking Captchas always seem to ask you to identify snapshots of the same handful of items like bicycles, buses and motorcycles, it’s because those images are taken from Google’s Street View. (Google owns popular Captcha-generating technologies.)

Shira Ovide

Bicycles and motorcycles are seen on public streets, and people (mostly) recognize them no matter what country they’re from, said Dan Woods, from online security firm F5 Inc. (Woods once worked on a Captcha-solving click farm and <a href="https://www.f5.com/labs/articles/cisotociso/i-was-a-human-captcha-solver" target=_blank>wrote about it.</a>)

And when we solve Captchas like the ones that ask us to identify images of buses, we are <a href="https://www.youtube.com/watch?v=1-cZkc7gyfI" target=_blank>training corporations’ AI systems</a>.

Haverford College

Columbia Journalism School

Shira Ovide writes The Washington Post's The Tech Friend, a newsletter about making your technology into a force for good. She has been a technology journalist for more than a decade and wrote a tech newsletter at the New York Times. 

washpost

Everyone hates Captchas. These technologies may finally kill them. 

the-washington-post

A graveyard with a gravestone showing a captcha message

Emma Kumer/The Washington Post

0725-techfriend-captcha

Tech in Your Life

Future of Work

Your Data and Privacy

Internet Access

What's New

Ethical Issues

Ask a Question

Help Desk

prism://prism.query/site,/technology/consumer-tech/tech-your-life&limit=20

prism://prism.query/site,/technology/consumer-tech&limit=20

prism://prism.query/two-sites,/technology,/politics/powerpost/the-technology-202?limit=20