Live data from Hacker News

Recaptcha v3: new way to stop bots

webmasters.googleblog.com

11–20 of 147 posts

Re: Recaptcha v3: new way to stop bots

#11
post #6

Hopefully having an ad blocker (uMatrix) doesn't cause it to flag the user like reCAPTCHA v2 does on every single site I go to. I have had to click way too many cars and street signs at this point.

Probably WAI. What is the incentive for the site owner to provide a streamlined experience to an user that will consume resources but intentionally prevent monetization? Not sure I agree with it, but it is obvious to expect that.

Hold on. Who says the sites using CAPTCHA are also the sites that have an ad based monetization model? The other day I was logging into newegg to order something and I was presented with reCAPTCHA, for which I had to solve 4-5 challenges before letting through.

Looking through the documentations for reCAPTCHA v3, it wants to load a script from Google's servers. As an end user I do not want Google to track me across the web, on other people's property. Thus I want to block this HTTP call. This discussion is pretty orthogonal to "Ad"block, given that all sorts of places have a CAPTCHA implementation.

The cynical side of me thinks that Google's doing this such that a convenient side effect is crippling the user experience for those who uses content blockers/custom user agents to impede its adoption. Even without a cynical motive, this side effect seems to be conveniently ignored, which hurts users. Suppose another non-ad based company were to create such a system, I'd imagine they would want to explicitly work around the problems of blockers/tracking such that the website owner can get a more "true" metric of "suspicious" users as this would likely lead to more sales/engagement/whatever.

Re: Recaptcha v3: new way to stop bots

#12
post #10

I hate Recaptcha. In my experience using Firefox and not being logged into a google account results in a very long if not impossible chain of captcha challenges.

Yes, same here.

- Using Firefox with uBlock Origin

- Not logged in to Google (at least outside of Firefox's containers)

- Third-party cookies disabled + Cookie AutoDelete addon

They present me with 3-5 captchas every time

Re: Recaptcha v3: new way to stop bots

#13
post #10

I hate Recaptcha. In my experience using Firefox and not being logged into a google account results in a very long if not impossible chain of captcha challenges.

On the flip side, abuse exists, and wishing that anti-abuse measures went away does not acknowledge reality. Just like how I'm annoyed when I have to pay for a cup of coffee, but my annoyance doesn't really inform how things should be.

Besides, if a relatively simple puzzle is too much to ask, then maybe you didn't care all that much to begin with. I can think of various platforms where this would be a good filter even if there was no such thing as abuse. ;)

Re: Recaptcha v3: new way to stop bots

#14
post #10

I hate Recaptcha. In my experience using Firefox and not being logged into a google account results in a very long if not impossible chain of captcha challenges.

My home setup is a plain old Xubuntu installation; for browsing I'm running Firefox with uBlock Origin. Nothing fancy or too far out of the ordinary.

Lately I've experienced the same thing, often 3-4 rounds of captcha challenges, sometimes more. It's painful from UX standpoint and insulting as user. I've been trying to avoid any site that uses them, they're very user-hostile, but there's only so much you can avoid.

Re: Recaptcha v3: new way to stop bots

#15

Hopefully having an ad blocker (uMatrix) doesn't cause it to flag the user like reCAPTCHA v2 does on every single site I go to. I have had to click way too many cars and street signs at this point.

I’ll guess it’s going to be worse: without a checkbox to check (the whole “frictionless experience” thing), I don’t see a way for the site to give you a challenge to prove you’re human if the script hasn’t loaded. Correct me if I’m wrong, but I think this means that you simply can’t use the site that requires reCAPTCHA v3 with uMatrix (or uBlock hard mode) turned on.

Re: Recaptcha v3: new way to stop bots

#16
post #11
post #6

Earlier quoted context omitted.

Probably WAI. What is the incentive for the site owner to provide a streamlined experience to an user that will consume resources but intentionally prevent monetization? Not sure I agree with it, but it is obvious to expect that.

Hold on. Who says the sites using CAPTCHA are also the sites that have an ad based monetization model? The other day I was logging into newegg to order something and I was presented with reCAPTCHA, for which I had to solve 4-5 challenges before letting through. Looking through the documentations for reCAPTCHA v3, it wants to load a script from Google's servers. As an end user I do not want Google to track me across t…

> Who says the sites using CAPTCHA are also the sites that have an ad based monetization model?

> The other day I was logging into newegg to order something

Newegg uses ads.

> As an end user I do not want Google to track me across the web

Sure, and as a content provider, you might not want users who refuse to go through CAPTCHA. Nobody is forcing you to access the content.

> the side effect seems to be conveniently ignored, which hurts users.

It only hurts users that the content provider doesn't care about, because they don't generate any revenue.

Again, regardless of agreeing with this or not, it is clear that those are the economic incentives at play.

Re: Recaptcha v3: new way to stop bots

#18

The "deep telemetry" nature of this doesn't sound like a good idea. It's already been annoying with v2 thinking that I clicked a checkbox "too fast" to be human, to worry about every action taken in a site/app being compared to some weird AI model for "humanity". That's even before other panopticon questions of who all this added telemetry even benefits.

Websites that want to prevent automated bots from attacking them benefit immensely.

Re: Recaptcha v3: new way to stop bots

#19
> Since reCAPTCHA v3 doesn't interrupt users, we recommend adding reCAPTCHA v3 to multiple pages.

Frictionless user interfaces arr great, but could this be a ploy to get websites to add Google-property tracking JS on more pages?

Post reply on HN