October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk3 min

I Gave a CAPTCHA Memory Instead of Making the Model Bigger

SwipeCHA adds historical security context around an existing CAPTCHA classifier. The architecture is described, but accuracy and security gains are not measured.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Instead of enlarging a CAPTCHA’s classifier, Shiva Mani’s SwipeCHA adds memory around it: a Random Forest evaluates the current swipe, then a security agent can consider what the system has retained from earlier security decisions. The idea is to make the decision contextual—not to claim that memory made the classifier more accurate.

What changed in SwipeCHA?

In his September 29, 2026, DEV Community write-up, Shiva Mani describes SwipeCHA, a behavioral CAPTCHA in which a user slides a handle along a track. The browser captures pointer movement and timing, and the system derives ten features for an existing Random Forest classifier:

As an Amazon Associate I earn from qualifying purchases.

  • Average mouse speed
  • Mouse-path entropy
  • Click delay
  • Task-completion time
  • Idle time
  • Micro-jitter variance
  • Acceleration curve
  • Curvature variance
  • Overshoot-correction ratio
  • Timing entropy

The design leaves that model in place. It adds a memory layer and a security agent to help interpret the classifier’s current result alongside earlier security experiences.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How the decision flow is meant to work

The author’s framing is: “What does this swipe look like, and does it fit the security experiences I’ve already seen?” That separates evidence from the current interaction from context retained over time.

  1. Evaluate the current swipe. The Random Forest processes the behavioral features from the interaction.
  2. Retrieve relevant history. Hindsight supplies stored security context that may inform a later decision.
  3. Interpret the combined context. A Security Agent considers the classifier’s output and recalled experience.
  4. Apply a decision policy. Possible actions include allowing the interaction, blocking it, or asking the user to try the challenge again. The author also describes a deterministic hard-rule path for obvious automation.

The roles matter: the model assesses the live signal; memory provides historical context; the agent interprets; and policy governs the response. Hindsight’s official project documentation describes three core operations—retain information, recall memories, and reflect on memories. That explains the memory layer’s intended capabilities, but does not validate this CAPTCHA integration or its security performance.

What gets remembered—and what happens first?

The system is intended to begin without fabricated history. On a first interaction, it evaluates the evidence available from that swipe; the resulting security experience can then be retained for consideration on a later interaction. The described memory is distilled security context, not a dump of raw pointer coordinates and timestamps. A simplified example includes a prediction, confidence, risk level, reason codes, and recommended action.

Mani reports running a sequence, restarting the application, and then seeing memories recalled on later turns. He says the development and staging setup used the official Hindsight client with a local Hindsight-compatible deployment; he does not claim a verified Hindsight Cloud deployment. This is the author’s report, not an independently replicated test.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What the write-up establishes—and what it doesn’t

The contribution is an architectural proposal and implementation account: keep the live behavioral classifier, then add remembered context and a controlled decision policy around its output. Mani writes, “The Random Forest didn’t suddenly become a better classifier. The decision became contextual.”

The article does not report a sample size, benchmark, baseline comparison, false-accept or false-reject rate, or measured accuracy improvement. Its example confidence value of 0.98 is an illustrative system output, not a study result. The write-up therefore does not establish that memory improves CAPTCHA accuracy or security.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Fallbacks and the limits of behavioral history

Mani describes a fallback to the Random Forest path when Hindsight or the agent layer is unavailable or times out, along with a circuit breaker intended to limit repeated latency during service failures. These are reported implementation features; the article does not independently verify their behavior.

The author’s own cautions are central to interpreting the design: “Behavioral signals are not identity,” and “Historical consistency is not proof that an interaction is legitimate.” The account does not provide a privacy impact assessment, retention or deletion policy, bias analysis, threat model, production audit, or quantitative security evaluation. Memory can add context to a decision; the description alone cannot establish how safely or effectively that context works in production.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.