Live data from Hacker News

Introducing the Invisible reCAPTCHA

google.com

131–140 of 245 posts

Re: Introducing the Invisible reCAPTCHA

#131
post #118
post #104

Earlier quoted context omitted.

But what if it's a generic captcha. It doesn't improve anything. Are you okay with that?

A generic captcha doesn't use the work done by the user. I'm not the person you're replying to, but I think I can guess what could be their answer.

What would it be? It's not clear to me.

Going from throwing away the work to improving Google's image recognition is a Pareto improvement so I'm interested in the justification.

Re: Introducing the Invisible reCAPTCHA

#132

Earlier quoted context omitted.

I would guess testing that the mouse pointer moves semi-randomly over the button, in a fashion typical of the way humans browse a web page

I can't image it being limited to jitter, I'm curious how they handle touchscreens.

Seeing how you scroll the pages how you click your finger, the speed that you tap elements.

Honestly I feel mobile is easier to validate

Re: Introducing the Invisible reCAPTCHA

#133
post #95

Earlier quoted context omitted.

I actually feed google false information (select rectangular objects when asked to select traffic signs, flat surfaces when asked for water surfaces, and so on). It'll probably be filtered out when aggregated with other users, but I like to think that I'm at least influencing it even if a little. I wouldn't have a problem if they'd open the data set, but I'm not exactly keen on being forced to work for free.

So you'd do the work if it were not productive but not otherwise? Like, if they just threw away your input into the CAPTCHA after confirming you're human, you're okay with that? Or do you just hate CAPTCHAs on principle?

Imagine you're at an airport and an inspector takes your batteries out of your luggage. All other things being equal, does it matter if he tosses them in the trash, or keeps them for his personal use?

From one perspective it doesn't matter - your batteries are gone either way.

But from another perspective, inspectors who keep what they find have completely different motivations - making the same outcome much more sinister and corrupt.

Re: Introducing the Invisible reCAPTCHA

#134
post #94

Earlier quoted context omitted.

How is that "free work"? Automated usage can threaten a site's bottom-line, and even its existence. A site resorts to Google's CAPTCHA's service because they don't have the money to build their own detector. It's not a service that was free for Google to create. edit: Also worth noting that some of this "free work" that users do for Google is used to improve bot-detection overall. The comment to this blog post (the p…

How is that "free work"? The original recaptcha was used to help clear up text from book digitization projects where OCR couldn't understand the data. The appeal of this was that these works were in the public domain, and thus proper digitization of these works is a societal-wide benefit. Since Google purchased it, they've been using it to: 1.) Clean street view data for a proprietary product (Google maps) 2.) Build…

Recaptcha was not a free service. Or if it was, why did Google end up paying millions for it? And it's not free now, unless the engineers and scientists working on it are working pro bono.

According to Wikipedia and the New York Times, reCaptcha was not developed for public domain works. Its pilot project was to digitize the NYT archives, archives which were not released to the public domain nor are fully available without being a subscriber: http://www.nytimes.com/2011/03/29/science/29recaptcha.html

I'm not a machine learning expert but I'm going to laugh at your suggestion that Google could "pay a group of people to do". In the above referenced NYT article from 2011, recaptcha's creator says several million words were being processed by recaptcha per day.

And again, have to disagree that the end user "does not benefit in any significant way". We would not be discussing this if Google hadn't learned from massive user data to iterate their captcha from distorted word mush to what it is today. Captcha was a serious drain of user energy and patience, that's why recaptcha was invented in the first place. And the worst captchas were tolerated because automated usage was a financial threat to websites that end users use.

Re: Introducing the Invisible reCAPTCHA

#135
post #9

I'm wondering if this might not be illegal under several countries' data privacy laws. Users need to be directly and visibly be informed, if and when data of theirs will be transmitted to third parties. As Google's ReCaptcha is based on tracking what websites you visit, what search terms you enter, correlating this data, and comparing this tracking profile of yours, it's quite problematic that the user doesn't even s…

To use the reCAPTCHA service you must agree to its Terms of Service agreement that clearly specifies that you must inform users on the collection and use of the data collected by reCAPTCHA + get consent from EU users [1]:

> You acknowledge and understand that the reCAPTCHA API works by collecting hardware and software information, such as device and application data and the results of integrity checks, and sending that data to Google for analysis. Pursuant to Section 3(d) of the Google APIs Terms of Service, you agree that if you use the APIs that it is your responsibility to provide any necessary notices or consents for the collection and sharing of this data with Google. For users in the European Union, you and your API Client(s) must comply with the EU User Consent Policy [...]

The "EU consent policy" from Google is here:

https://www.google.com/about/company/user-consent-policy.htm...

[1] https://termsfeed.com/blog/privacy-policy-recaptcha/

Re: Introducing the Invisible reCAPTCHA

#136
post #30

What I want to know is what happens if you get 'trapped' in this invisible ReCAPTCHA? The most frequent encounters with CAPTCHA's I see are rejected API requests over VPN.

I was browsing Upwork the other week and I got trapped.

I couldn't load any more jobs, or view any more workers. I had to inspect the Network tab in Chrome, open the API request and then click a "I am not a bot" on their API page.

That was a poor implementation tbh.

Re: Introducing the Invisible reCAPTCHA

#137

Earlier quoted context omitted.

It modifies your behaviour in ways that aren't in your interest.

There is an option somewhere in Google settings to turn off personalized ads.

Which makes the ads much poorer. You'd need a particular philosophy to want to check that box; most people, I think, would use a blocker.

Re: Introducing the Invisible reCAPTCHA

#138
post #99

Earlier quoted context omitted.

People that project their paranoia on others are usually running ad, tracking and probably even script blockers.

I do that not because I want to not be tracked, but because I am bad at computers and don't want to accidentally install a virus because blatting and starting again would be an bunch of effort and it's not like my stuff is backed up or anything. Sometimes though I wonder if I shouldn't turn adblock off, for example, and then I'm at work and some website auto-plays video and I remember .

Imagine, if you will, a scene like this. It is dusk. You are out running in the park, trying to get exercise before the last light fades. Suddenly you realize: A group of people have been closing on you, boxing you in from all sides.

You try to run. Your muscles burn, you heave for breath. They match your pace exactly, coming closer... and closer... and closer. You cast your gaze desperately from side to side. Isn't anyone around? You're scared. You're not a strong man, and these people all look like body-builders and criminals. No, now that they've come closer, you're not sure they look like men at all. Is that a tattoo, or is it... is it a tusk?

Then you stumble over a rock, fall, and scrape your hands. While you're rolling around and trying to get back to your feet, the men stop in a tight circle around you. They look down at you.

"What," you begin. Your voice is quavering.

"Take backups," the men say, as one. "Take backups, for you never know what may happen."

Then they disperse into mist.

Re: Introducing the Invisible reCAPTCHA

#139
post #128

Doesn't anyone else see it as a problem that Google's bots (and possibly CIA/NSA) can access any system using Google ReCAPTCHA? They can create unlimited amount of accounts on social networks, blogs, forums etc. and thus have unlimited social voting power on the Internet. There is a need for a decentralized Captcha that can't be circumvented by anyone.

Would not having ReCAPTCHA prevent this?

Re: Introducing the Invisible reCAPTCHA

#140
post #13
post #2

That whole page wasn't apple to explain WHY it is invisible and how it works if it's invisible.

Guessing it's your browsing history (courtesy of including js from a Google domain) plus mouse tracking. It doesn't seem much different than the current "click here" one to me. They are just letting the page owner substitute their own button in lieu of the check box.

Is that why I always have to solve a challenge? Because I use Privacy Badger and uBlock Origin?
Post reply on HN