I once worked for one of the largest media companies in my country and there was a project where they wanted to replace reCaptcha with a partner’s system that made users watch ads and ask a question about the ad instead of typing some hard to read text.

Testing such system, I quickly realized that the captcha part of it could easily be bypassed by anyone with minimal JS knowledge (the answer was available in a global JS var), but the answer would not be accepted by the server unless the entirety of the ad video had been successfully streamed to the video component.

I still remember clearly the response I got when I reported to the PO that the system was unfit due to being easily bypassed with JS:

“no user is gonna be coding anything just to avoid typing the answer on the input”.

Shouldn’t have expected much more from the same company that had me wait for the responsible person to get back from their 1-month vacation when I reported that their customers’ full credit card information was included in the output of a publicly available URL that only required an order ID.

But I later found out that most orders in that particular project were actually made by bots with stolen credit card information (the bots would use this company’s shopping cart to validate which cards were still working so they could use it for something useful afterwards). In the end we were mostly just leaking information that had already been leaked before.

Drink verification can

Sure but I’m gonna make McDonalds employees stand on the counter and say my name before I give them any money.

Yeah, I’d go back to digging holes and playing with action figures, fuck that.

I guess you can’t watch television if you’re deaf or mute then.

deleted by creator

Luckily it has been patented so the other companies can’t use this shit idea

Here’s some more info for people (like me) who like a little context with their confusing patent diagrams: Snopes - Does a Sony Patent Propose Viewers Skip Commercials by Yelling Brand Names at TV?

Rule