I don't think many people realize how little effort it would take me, to go and create a bot that just creates accounts on their instance, and then posts pro-trump things on other instances.

Let that run for, oh. a day or two, and I imagine that would be the end of federation for everyone.

[–] N0tTheBees@sh.itjust.works 2 points 2 years ago* (last edited 2 years ago) (2 children)

I heard there is the option to enable captcha in the new 0.18 version, so there should be some protection soon.

edit: I had it the wrong way around and the removed captcha in 0.18 to reimplement it in a future version

[–] NotABot@sh.itjust.works 3 points 2 years ago (1 children)

100% NOT a bot here...

[–] N0tTheBees@sh.itjust.works 1 points 2 years ago (1 children)

wow honestly a cool way to prove a point. But I'm curious about captcha (as it is not enabled here yet), is v2 really that easy to crack?

[–] Difficult_Bit_1339@sh.itjust.works 1 points 2 years ago* (last edited 2 years ago)

All captchas are easy to crack because there are services that employ workers to solve captchas. You can buy packages of solves and they guarantee a specific accuracy rate and solve time. You submit via an API and get a result back in a few seconds. The result may be a string or it may include a mapping of how the user interacted with the app (which your client then emulates to fool the captcha app that it is receiving human input).

It's just another electronic service provided by workers in low wage countries.

Captchas mitigate the issue slightly but they're not a magic solution to bots. They can be the difference between the instance gaining 1,000 bot accounts in a day instead of 10,000,000 however.

[–] xtremeownage@lemmyonline.com 2 points 2 years ago

There was captchas in 0.17 too.

The problem is, captchas are not effective against bots. Its trivial to solve captchas with a bot... much quicker then we can solve them as humans.