Introducing the Invisible reCAPTCHA • Hacker News Board

Re: Introducing the Invisible reCAPTCHA

#31

Post by tyingq » Thu, Mar 09, 2017, 7:16 AM UTC

vidyesh wrote: post #24

tyingq wrote: post #13

Earlier quoted context omitted.

Guessing it's your browsing history (courtesy of including js from a Google domain) plus mouse tracking. It doesn't seem much different than the current "click here" one to me. They are just letting the page owner substitute their own button in lieu of the check box.

What about non-logged users/sessions?

I assume it pops up a challenge, again, just like the current one.

Edit: Yep. "Human users will be let through without seeing the "I'm not a robot" checkbox, while suspicious ones and bots still have to solve the challenges."

It really is just the current one, with the site owner's button instead of Google's checkbox.

Re: Introducing the Invisible reCAPTCHA

#32

Post by mulmen » Thu, Mar 09, 2017, 7:17 AM UTC

kuschku wrote: post #9

I'm wondering if this might not be illegal under several countries' data privacy laws. Users need to be directly and visibly be informed, if and when data of theirs will be transmitted to third parties. As Google's ReCaptcha is based on tracking what websites you visit, what search terms you enter, correlating this data, and comparing this tracking profile of yours, it's quite problematic that the user doesn't even s…

I think you are raising a valid point but this is outside my expertise. Could a site owner satisfy the EU Data Privacy Directive by simply notifying users that their activity is being provided to Google to prevent abuse on the site? I imagine something similar to the cookie warning.

Re: Introducing the Invisible reCAPTCHA

#33

Post by dzhiurgis » Thu, Mar 09, 2017, 7:19 AM UTC

macrael wrote: post #4

Google using captchas to get humans to read street addresses captured by street view cars to improve maps results remains one of the most Googly things they've ever done. Genius, lateral, and a little weird.

I wonder how long until they place some native ads in there so that publishers could earn a penny.

Re: Introducing the Invisible reCAPTCHA

#34

Post by retrogradeorbit » Thu, Mar 09, 2017, 7:34 AM UTC

daviding wrote: post #3

It's done by binding it to one of your own buttons, where I guess it does the 'jitter test' on that element (if it's a low risk IP). https://developers.google.com/recaptcha/docs/invisible

What is "the jitter test"?

Re: Introducing the Invisible reCAPTCHA

#35

Post by mirimir » Thu, Mar 09, 2017, 7:38 AM UTC

macrael wrote: post #4

Google using captchas to get humans to read street addresses captured by street view cars to improve maps results remains one of the most Googly things they've ever done. Genius, lateral, and a little weird.

I see lot's of those on Tor browser. There's nothing about entering street numbers, just identifying images that include street numbers. But perhaps that's also valuable. And what about the other major types, such as rivers, mountains, store fronts and street signs?

Re: Introducing the Invisible reCAPTCHA

#36

Post by sfifs » Thu, Mar 09, 2017, 7:42 AM UTC

malikNF wrote: post #5

While I like the idea of not having to deal with these annoying ReCAPTCHA prompts, something somehow feels "intrusive ?". I mean does this mean google is going to keep track of what I would be doing when I visit a site? Say for instance I am signing up for a website, does the password I enter get sent to google servers to be analyzed now?

don't they already? Almost everyone uses Google analytics and most websites that have ad placements use the Google network. Where do you think the data for those comes from?

Re: Introducing the Invisible reCAPTCHA

#37

Post by [deleted] » Thu, Mar 09, 2017, 7:42 AM UTC

mirimir wrote: post #35

macrael wrote: post #4

Google using captchas to get humans to read street addresses captured by street view cars to improve maps results remains one of the most Googly things they've ever done. Genius, lateral, and a little weird.

I see lot's of those on Tor browser. There's nothing about entering street numbers, just identifying images that include street numbers. But perhaps that's also valuable. And what about the other major types, such as rivers, mountains, store fronts and street signs?

[deleted]

Re: Introducing the Invisible reCAPTCHA

#38

Post by gregschlom » Thu, Mar 09, 2017, 7:43 AM UTC

retrogradeorbit wrote: post #34

daviding wrote: post #3

It's done by binding it to one of your own buttons, where I guess it does the 'jitter test' on that element (if it's a low risk IP). https://developers.google.com/recaptcha/docs/invisible

What is "the jitter test"?

I would guess testing that the mouse pointer moves semi-randomly over the button, in a fashion typical of the way humans browse a web page

Re: Introducing the Invisible reCAPTCHA

#39

Post by danielrhodes » Thu, Mar 09, 2017, 7:45 AM UTC

macrael wrote: post #4

Google using captchas to get humans to read street addresses captured by street view cars to improve maps results remains one of the most Googly things they've ever done. Genius, lateral, and a little weird.

https://en.m.wikipedia.org/wiki/Human-in-the-loop

Expect to see more of this.

Re: Introducing the Invisible reCAPTCHA

#40

Post by greenhatman » Thu, Mar 09, 2017, 7:48 AM UTC

retrogradeorbit wrote: post #34

daviding wrote: post #3

It's done by binding it to one of your own buttons, where I guess it does the 'jitter test' on that element (if it's a low risk IP). https://developers.google.com/recaptcha/docs/invisible

What is "the jitter test"?

That probably refers to check whether the mouse moves like a human or more bot-like.

Recaptcha does more than that though. It checks if you are logged into any other Google services, whether your browser user agent matches your actual browser, and I think one or two more things.