The constant CAPTCHAs and other "I-am-not-a-robot" tests from websites are annoying enough, without considering the reality that they really don't present much of a challenge for bots anymore. Wait till they have to pass age verification...

"Maybe they should change the button to say, "I am a robot"?

"On Friday, OpenAI's new ChatGPT Agent, which can perform multistep tasks for users, proved it can pass through one of the Internet's most common security checkpoints by clicking Cloudflare's anti-bot verification—the same checkbox that's supposed to keep automated programs like itself at bay."

"ChatGPT Agent is a feature that allows OpenAI's AI assistant to control its own web browser, operating within a sandboxed environment with its own virtual operating system and browser that can access the real Internet. Users can watch the AI's actions through a window in the ChatGPT interface, maintaining oversight while the agent completes tasks. The system requires user permission before taking actions with real-world consequences, such as making purchases. Recently, Reddit users discovered the agent could do something particularly ironic."

"The evidence came from Reddit, where a user named "logkn" of the r/OpenAI community posted screenshots of the AI agent effortlessly clicking through the screening step before it would otherwise present a CAPTCHA (short for "Completely Automated Public Turing tests to tell Computers and Humans Apart") while completing a video conversion task—narrating its own process as it went."

https://arstechnica.com/information-technology/2025/07/openais-chatgpt-agent-casually-clicks-through-i-am-not-a-robot-verification-test/

@briankrebs This is going to be another bear-proof trash can, isn't it, where bears will be able to open the trash cans, but humans are unable to figure them out? 🤔
@briankrebs captchas been dead since 2015-ish. My field has basically given up on researching that stuff, yet a large part of the industry keeps thinking it's still worth something. Imho it's nothing but a con that some vendors ride until it's dead (it's easy money).
@odr_k4tana @briankrebs IMHO they are largely a way to get crowdsourced work disgusting as anti-bot solutions for developers. I expect those having to include measures like adding prompt injections to them so the quality of this data doesn't degrade too much.

⬆️ @briankrebs

>> "On Friday, #OpenAI's new ChatGPT Agent, which can perform multistep tasks for users, proved it can pass through one of the Internet's most common security checkpoints by clicking Cloudflare's anti-bot verification—the same checkbox that's supposed to keep automated programs like itself at bay."

If #ChatGPT lies about itself, what else does it lie about?

#AI #FakeAI

⬆️
>>>> "…#OpenAI's new ChatGPT Agent …proved it can pass through one of the Internet's most common security checkpoints by clicking Cloudflare's anti-bot verification—the same checkbox that's supposed to keep automated programs like itself at bay."

>> If #ChatGPT lies about itself, what else does it lie about?

I love the witty term #AiSlop Fables coined by @spzb for #LLM lies 😂

🎶 Tell me lies, tell me sweet little lies…
🎵 Oh no no you can't disguise…

https://music.apple.com/us/album/little-lies/202271826?i=202272697

@briankrebs

Little Lies by Fleetwood Mac on Apple Music

Song · 1987 · Duration 3:38

Apple Music - Web Player
@briankrebs 💯 ✅ 💡 When I had read that article I was like — exactly. I'm tortured here with bs captchas meanwhile chatgpts be like I don't care.
@briankrebs I mean honestly CAPTCHA was never about anti-bot and always about crowdsourcing training data. Had it really been anti-bot it probably would still be effective.
@briankrebs I've been trying out new web browsers and moving my newsletter subscriptions to different addresses. The I-am-not-a-robot gauntlet has been brutal.

@briankrebs

i love* that we are teaching the models ot lie and obfuscate, as one of their primary objectives.

*really, dont love this

@briankrebs I changed all my products to "proof of work", which doesn't need any external services at all. All it does is slow down spammers significantly. I hope it even costs them more if they really want to spam my contact forms.
@briankrebs probably rename button to I’m a human help!

@briankrebs 🤷Breaking cloudflare has been known to work for some time now, but hey, having it nicely packaged as a MCP service …

(well at least we have one guy in the team that has written a number of crawlers for sites with CF "protection", if I listened correctly in our dailies. And no he didn't break it himself.)

@briankrebs "this step is necessary to prove I'm not a bot" 😭 yeah now I'm gonna prove I'm the President of the US and also an astronaut
@briankrebs
Someone needs to find a way to delete Cloudflare from the planet.
@briankrebs to be fair, cloudflare’s CAPTCHAs are borderline useless. All they do is look at your browser fingerprint and similar data, they don’t make you do any actual *things*

@briankrebs

Related/relevant: "Why reCAPTCHA is Spyware"

#link: https://youtu.be/VTsBP21-XpI

#reCAPTCHA #CAPTCHA #spyware

Why reCAPTCHA is Spyware

YouTube

@briankrebs

What is sophisticated is that it can simulate mouse movements and timing variances. That, or Cloudflare is just giving ChatGPT a free pass based upon IP reputation or browser identification.