<...>
I am not even sure if it works against all botters though. They probably found a way to bypass it too already.
Captcha isn't meant to prevent attacks, it's meant to make them much more expensive to scale. Blasting thousands of HTTP requests costs next to nothing. Having each of those requests tied to a reCAPTCHA solve makes it around $1.5-$2.5 per thousand requests. A rather small cost for spam-based promoters (though if you're doing it internet-scale, it does add up), a massive cost for login bruteforcers (the main culprits responsible for the addition of reCAPTCHA to the login screen).
Bitcointalk should use geetest captcha like binance, it's much less annoying.
Since their website doesn't mention a specific price, I'd assume it's aimed at "enterprise" customers. Meaning, it'd cost a crap ton + not be targeted towards privacy-centric websites (e.g. by blacklisting TOR exit node IPs).
Have you ever experience being blacklisted by reCAPTCHA?
It's a nightmare when the images just take forever to load and they immediately fail you even after submitting the correct results.
According to your description, the images will appear forever even though I have chosen them correctly. I experienced it a few years ago, almost five years ago when I was accessing the internet at a game center. It never stops, even if I choose right but it still reports wrong. Definitely I am on their blacklist
(that game center)
AFAIK that's intentional. If reCAPTCHA has deemed you (with extremely high likelihood) to be a bot, it'll pretend that you still have a chance while auto-failing any of your attempts. The website you were the trying to solve the captcha in might've also selected the more strict security setting when setting up their reCAPTCHA integration.
I also have encountered cases where if you go through several attempts at completing the captcha (which you know you've done perfectly, yet they "failed"), it'll let you through.
<...>
Back when reCAPTCHA dominated all gambling and faucet sites, I nearly flipped the table each time I attempted to claim. Maybe because I acted like a bot 🙈
That's probably reCAPTCHA V3. It will detect if you're a bot, else it won't show up.
The more reCAPTCHAs you fill out (even if you do so successfully), the more suspicious you are to Google, the harder the captcha gets (up until you get secretly marked as a bot). Also, chances are that wasn't v3.
There's a way for the v2 to be implemented that it isn't even shown if no action is required from the user's end (the equivalent of clicking on it and the check mark immediately popping up). v3 silently collects behavioral data in the background, gives the website a score of how likely it is that you're a bot and then the website decides what it wants to do (deny an action, require manual review of said action, serve you up with a reCAPTCHA v2, etc.). I assume v2 also collects behavioral data though probably much less (since Google recommends you put the v3 on every page so that it could "get a feel" for how a regular visitor on your site behaves).
