<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: Rickardo Hudson</title>
    <description>The latest articles on Forem by Rickardo Hudson (@rickardo_hudson_83429b764).</description>
    <link>https://forem.com/rickardo_hudson_83429b764</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3870706%2F87009057-33b2-4d89-908d-46889410aa83.jpg</url>
      <title>Forem: Rickardo Hudson</title>
      <link>https://forem.com/rickardo_hudson_83429b764</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/rickardo_hudson_83429b764"/>
    <language>en</language>
    <item>
      <title>I built a CAPTCHA replacement after AI hit 91% bypass rate</title>
      <dc:creator>Rickardo Hudson</dc:creator>
      <pubDate>Fri, 10 Apr 2026 18:05:48 +0000</pubDate>
      <link>https://forem.com/rickardo_hudson_83429b764/i-built-a-captcha-replacement-after-ai-hit-91-bypass-rate-43gg</link>
      <guid>https://forem.com/rickardo_hudson_83429b764/i-built-a-captcha-replacement-after-ai-hit-91-bypass-rate-43gg</guid>
      <description>&lt;h2&gt;
  
  
  CAPTCHA is broken. Here's the data.
&lt;/h2&gt;

&lt;p&gt;Stanford AI Lab confirmed it in 2024: GPT-4V defeats reCAPTCHA image challenges at &lt;strong&gt;91% accuracy in under 2 milliseconds&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;Every contact form, login page, signup flow, and checkout on the internet is protected by a system that AI has definitively defeated. This isn't a future problem. It's happening right now.&lt;/p&gt;

&lt;p&gt;I got tired of waiting for Google to fix it. So I built a replacement.&lt;/p&gt;




&lt;h2&gt;
  
  
  Introducing ANIMA
&lt;/h2&gt;

&lt;p&gt;ANIMA replaces CAPTCHA with &lt;strong&gt;7 simultaneous biometric signals&lt;/strong&gt;. Instead of asking "can you see this image?" — we ask "are you biologically human?"&lt;/p&gt;

&lt;p&gt;AI can fake vision. It cannot fake biology.&lt;/p&gt;

&lt;h3&gt;
  
  
  The 7 signals:
&lt;/h3&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;#&lt;/th&gt;
&lt;th&gt;Signal&lt;/th&gt;
&lt;th&gt;How it works&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;01&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;Tremor Signature&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Measures hand tremor CV (0.25–2.5 in humans, near zero in bots)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;02&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;Rhythm Entropy&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Inter-tap timing variance — humans are naturally irregular&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;03&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;Associative Latency&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Word response time (humans: 400–2800ms, bots: &amp;lt;50ms)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;04&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;Mouse Dynamics&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Path curvature entropy — humans curve, bots go straight&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;05&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;Device Motion&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Physiological tremor from accelerometer&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;06&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;Scroll Behavior&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Momentum and irregularity patterns&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;07&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;Fusion Score™&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Weighted combination of all 6 signals&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;Any single signal can be spoofed with enough engineering effort. &lt;strong&gt;All 7 simultaneously is mathematically infeasible&lt;/strong&gt; for current AI systems.&lt;/p&gt;




&lt;h2&gt;
  
  
  How it compares
&lt;/h2&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Solution&lt;/th&gt;
&lt;th&gt;AI Bypass Rate&lt;/th&gt;
&lt;th&gt;Accessible&lt;/th&gt;
&lt;th&gt;Zero PII&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;ANIMA&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;&amp;lt;0.1%&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;✅ WCAG 2.2&lt;/td&gt;
&lt;td&gt;✅ Zero&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;reCAPTCHA v3&lt;/td&gt;
&lt;td&gt;91%&lt;/td&gt;
&lt;td&gt;❌&lt;/td&gt;
&lt;td&gt;❌ Google tracks&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;hCaptcha&lt;/td&gt;
&lt;td&gt;88%&lt;/td&gt;
&lt;td&gt;❌&lt;/td&gt;
&lt;td&gt;❌ Cookies&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Cloudflare Turnstile&lt;/td&gt;
&lt;td&gt;~60%&lt;/td&gt;
&lt;td&gt;Partial&lt;/td&gt;
&lt;td&gt;Partial&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;




&lt;h2&gt;
  
  
  Integration takes 5 minutes
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Step 1 — Add the script:&lt;/strong&gt;&lt;/p&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;
html
&amp;lt;script src="https://animaid.to/sdk/v3/anima.js"
        data-site-key="your_site_key"&amp;gt;
&amp;lt;/script&amp;gt;
&amp;lt;div class="anima-widget"&amp;gt;&amp;lt;/div&amp;gt;

Step 2 — Verify server-side:
const response = await fetch('https://animaid.to/api/verify/token', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    token: req.body['anima-token'],
    siteKey: process.env.ANIMA_SITE_KEY,
    secretKey: process.env.ANIMA_SECRET_KEY
  })
});

const { human } = await response.json();
if (!human) return res.status(403).json({ error: 'Bot detected' });

Works with Node.js, Python, PHP, React, and WordPress.
Privacy by design
    • Zero PII collected
    • Zero cookies
    • Zero consent banner needed
    • GDPR Article 4 not triggered
    • WCAG 2.2 compliant — no visual puzzles, accessible to blind users

Free tier
50,000 verifications per month. No credit card. No friction.
Paid plans start at $29/month for 250,000 verifications.
Try it
🔗 https://animaid.to
Sign up free, create an API key, and integrate in 5 minutes. I read every piece of feedback personally.
Happy to go deep on the signal math, the token architecture, or how the fusion scoring works in the comments.
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;

</description>
      <category>webdev</category>
      <category>security</category>
      <category>javascript</category>
      <category>showdev</category>
    </item>
  </channel>
</rss>
