We detected a CAPTCHA solver in the wild, and what it says about bot defenses