(09-04-2024, 01:11 PM)Lynyrd Skynyrd Wrote: There are sophisticated Captcha challenges that might still defeat AI. I've seen some that require seeing relationships between disparate things. I wonder if AI could fool a human into giving them a Captcha solution?
There are browser plugins that automatically solve captchas. They do work, although I'm fairly certain all they're doing is sending a screenshot of the captcha to India and someone in a boiler room is solving captchas all day.
What Maxmars describes is already here. ISPs have been adding headers to your comms with your credentials stuffed in them for YEARS now and they sell this as a service to... whoever wants to buy it.
Your smartphone is your ID. All the sensors in that phone are cataloging and tracking every single thing you do, how you interact with websites (google analytics does this too), points of interest, recently visited sites, the size of your screen, what graphics card is in the device you're using, etc etc and they use all this to develop a "fingerprint" that uniquely identifies you. Now, add in the new crap the Goog is pushing for - IPv6 with SLAAC addressing, in its default mode, includes your MAC address in the final address (sneaky sneaky) and tack that in with stuff like the QUIC protocol and "secure DNS" (which really just means sending your DNS requests to one of the central logging points with encryption keys that directly point back to your browser) and the level of accuracy goes WAY up.
If you'd like to see an example of this in your own browser, check out:
https://coveryourtracks.eff.org/
It will run a basic set of browser fingerprint tests(uncheck the box to use real providers!) and will tell you how unique your browser is based on the last XX days of tested browsers. There are some other sites that do this on a wider scale and can tell you how unique your browser is out of millions of tests.
I got into a tissy with Amazon a couple years back over an exploding smart watch which culminated in my sending them a request to delete all of my personal info and accounts. They went back and forth with me a few rounds about "verifying my identity" until I pointed out their request was entirely bullshit, they already knew my credentials and had my voice prints and everything else in their Alexa AI DB, etc etc. After about a week of silence, they deleted my account as requested. "Here's your sign."
