I am now getting captchas that are humanly impossible to solve. They have 16 options each wave with 10 waves, and when I look at the captcha information you have a whole 30 seconds to solve it. That means you would need to look at over 5 images a second, not accounting for the long animation time between each wave.
I get these whenever logging into accounts I have not previously accessed or attempting to create a new account. However, I can get easier captchas when logging into accounts I have recently signed into, likely due to Roblox assigning a lower risk.
I am not using any VPNs and I have a residential IP, and I am doing this in incognito mode so there is no outdated/cached code.
Here is one of the impossible captcha ids: 6941772c087b74804.6196043801
This is also happens for me. I have captcha with 16 options and i need it to complete 15 times to log in roblox studio. I’m not using any VPN or smth. Fr i can’t use studio in case of that. Captcha id: 820177337ad221895.1449165601
Damn I thought I was the only one getting these near impossible captchas due to me getting them externally to solve in Discord
I’ve been getting this when trying to login via user/pass, which makes it near impossible to host on things like replit after the notorious cookie update
It appears these CAPTCHAs are Roblox’s main solution to botting. Simply they are attempting to make it more cost prohibitive and more complex to automate actions (bot) such as joining groups, posting comments, visiting places, attempting logins etc. This approach is creating a lot of friction for regular users and is not an effective solution to the botting issues.
These captchas are far too complex for some users and therefore prohibit genuine users from using the platform. Furthermore, the individuals running these bots have found ways to bypass the CAPTCHAs entirely by:
A . Programmatically automating the CAPTCHA-solving process.
B. Hiring individuals or services to solve them (using services like “DeathByCaptcha” or “1stcapcha”).
C. Accessing Roblox in such a way they aren’t given a CAPTCHA in the first place.
A more effective solution could be the implementation of behavioral biometrics and the utilization of machine learning. Behavioral biometrics allow you to create a unique fingerprint for each user by analyzing patterns: scrolling habits, navigation choices, mouse movements, keystroke movements (speed, shortcuts used and advanced keys), touch screen behavior (screen pressure, size and area), device movements (gyroscope and orientation). With these data, you are able to create a unique finger print for each individual no matter the account they are on - further compounded with other user and device information*. Then machine learning can be utilized for finding abnormalities (or based on other predefined metrics for undefined fingerprints). Thus detecting botting and potential account theft or fraud to then require further verification or the action denied.
I’ve just gotten a captcha while logging on to one of my accounts, where I was required to match orbitals of icons with the number orbital. Some of the logos on there just do not exist, therefore making the captcha not difficult - but literally impossible.
