Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Is it even possible to have an inverse captcha without time bounds?

Humans can use agents behind the scenes to crack it, right?



To me this reads as obviously a joke for marketing to the HN crowd (it worked), but their product is built around web agents, it is not a bad thing to have in the onboarding flow to make sure the agent is configured correctly.


Yeah, we are aiming all OpenClaw/Hermes Agent agents to sign up for free without humans intervention, so you need some sort of proof-of-stake (or proof of compute) algorithm so that a simple deterministic algorithm can't just claim thousands of API keys. Most agents (at least in the current token subsidised market) don't care about token consumption, so the stakes are very small for the user!


What prevents the person who used to write a simple deterministic algorithm to call an LLM a thousands times?


That's what I though too, maybe I'm missing something or I don't fully get it. But the human is always behind what's the difference if they go and sign up or tell an agent that they must sign up for you ?.

My best guess is that this a way of making a system talk to your agent without you knowing what they are talking about ? As a way of not exposing the real sign up method ?


Since it’s just used once, you can also just have an agent solve the captcha and then use the returned api key yourself. This has to be engagement bait.


We do have time bounds. For our purposes, a human using an agent is fine. Our main goal is to let in everyone's agents (OpenClaw, Hermes...) and prevent deterministic API-key-farming scripts.


It's flame-bait.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: