The AI Arms Race Against Visual Captchas
According to reporting in The Wall Street Journal ("Why Are We Still Checking ‘I’m Not a Robot’ on Websites?"), vision-based captchas (selecting fire hydrants, crosswalks, or motorcycles) have become obsolete as computer vision models and multimodality allow automated scripts to solve puzzles faster and more accurately than humans.
Modern perimeter defenses (such as Cloudflare Turnstile, Google reCAPTCHA v3/Enterprise, and Arkose Labs) have migrated towards invisible behavioral biometrics. Instead of testing visual reasoning, engines passively sample client-side kinematic signals: high-frequency cursor path jitter, velocity derivatives, inter-keystroke timing distributions, and hardware sensor entropy.