Click the traffic lights! Now the planes! And now find the alien! Yes, we understand that captchas exist to prevent bots from devouring a web page, but we won't hide the fact that they are insufferable. The Cloudflare Privacy Pass extension aims to eliminate (or at least reduce) user interaction with captchas to improve their experience... as long as the necessary conditions are met.
Verifying our age, doing small sums, sliding buttons… solving captchas. The web has adopted different strategies to limit the impact of bots and scripts, but in general they do nothing more than transfer the responsibility to the user and ruin their experience. Unfortunately, this is something that comes with the package: As long as automatic manipulation mechanisms exist, blocks like the captcha will not go anywhere. Unless…
...that someone intervenes at a deeper level, like Cloudflare. For years, this CDN and security company has been working on Privacy Pass, an extension compatible with Firefox and Chrome that helps us automatically avoid captchas, but not everything is as magical as it seems at first.
How to Avoid Captchas with Privacy Pass
The first step is to understand how Privacy Pass works: By solving captchas manually, the user generates a package of tokens or passes (30 per captcha). These passes can be consumed as an equivalent for a captcha solution each time a website presents the corresponding challenge. If the user runs out of passes, all they have to do to generate additional packages is solve more captchas on their own.
It’s very simple: We click on the extension, and by hovering over the word Cloudflare we’ll see the option Get more passes!. Another click there, and that will take us to a compatible captcha demo. The rest is a matter of solving the captcha as many times as we want.
So, if everything is so simple, what’s the fine print? What limitations does it have? Why are the reviews of both extensions so bad? This is nothing more than a conflict of "expectations versus reality": The Privacy Pass profile on GitHub clearly explains that the extension only works with Cloudflare captchas (or rather, the sites it protects) when the user expects it to work everywhere. In other words, its potential is great, but it needs to extend its compatibility.
Official site: Click here
