How Arkose Labs' FunCaptcha works: why it ships interactive games instead of text, the encrypted bda fingerprint that decides difficulty, the gt2/gfct/verify token flow, and the economic model behind the challenge design.
Traces the Arkose Bot Manager session from the client-side enforcement token to the server-side Verify API, the risk fields it returns, and how challenge difficulty scales with the telemetry behind each session.
Traces FunCaptcha from Kevin Gosschalk's game-dev roots and the 2014-era rotate-the-image challenge to the Arkose Labs rebrand, the MatchKey suite, and the cost-of-attack model now defending Twitter, Microsoft and OpenAI.