• brbposting@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    0
    ·
    5 months ago

    I love Microsoft’s email signup CAPTCHA:

    Repeat ten times. Get one wrong, restart.


    iPhones already have it

    Private Access Tokens? Enabled by default in Settings  > [your name] > Sign-In & Security > Automatic Verification. Neat that it works without us realizing it, but disconcerting nonetheless.

    So, the spammers will need physical Android device farms…

    • StarLight@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      5 months ago

      Oh my god. I lost my fucking mind at the microsoft one. You might aswell have them solve a PhD level theoretical physics question

      • brbposting@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        0
        ·
        5 months ago

        Just noticed the screenshot shows 1 of 5.

        So five wasn’t good enough… they had to double it. Do kinda respect that they’re fighting spammers, but wonder how Google does it with Gmail. They seem to have tightened then recently loosened up on their requirement for SMS verification (but this may be an inaccurate perception).

    • OsrsNeedsF2P@lemmy.ml
      link
      fedilink
      English
      arrow-up
      0
      ·
      5 months ago

      More industry insight: walls of phones like this is how company’s like Plaid operate for connecting to banks that don’t have APIs.

      Plaid is the backend for a lot of customer to buisness financial services, including H&R Block, Affirm, Robinhood, Coinbase, and a whole bunch more

      • brbposting@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        0
        ·
        5 months ago

        No way!! Can’t find anything about it online - is this info by the way of insiders? Thanks for sharing, would have NEVER guessed. Not even that they’d have to use Selenium much less device farms.

        • OsrsNeedsF2P@lemmy.ml
          link
          fedilink
          English
          arrow-up
          0
          ·
          5 months ago

          Yup insider info they definitely don’t want public. Just confirmed the phone farms were to bypass rate limit, although they do use stuff like Selenium for API-less banks