Computer puzzles are dead. AI is too good. Anomaly detection is the future. Track your users’ behaviour yourself, find outliers, handle them appropriately.
"Squiggly letters" captchas are still fine. There's a lot of FUD around AI & ML breaking them but I have yet to find an off-the-shelf tool that can break them; and so do the spammers.
Sure, you might break them if you pay a team of computer vision scientists for a few months but that isn't profitable for spammers, so even though they are technically breakable, in practice they're still good enough to thwart spam & bruteforce.
