Live data from Hacker News

Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

github.com

11–20 of 98 posts

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#11
post #10

Earlier quoted context omitted.

Same problem for me on Android with Firefox.

Wow, so it's not just me! I'll ask around Mozilla and see if anyone knows why Twitter does this.

A refresh usually helps, and this "feature" isn't exclusive to Firefox.

For some reason, it is exclusive to the links opened from another apps and doesn't appear when accessing a link directly (via a refresh). That might narrow down your search a bit.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#12
I've seen this a week ago on reddit. The researched told google about this vulnerability and Google doesnt care about it, they are totally OK with it. You can see here that captcha doesn't block robots, but blocks people and makes browsing inconvenient. reCaptcha is a way google mines data from us for free.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#13
post #5

I'm using Buster[0] for this purpose, and it relies on the same method. Available on Firefox, Chrome and Opera in their respective add-on stores, and no additional steps are needed (like in this project). From my experience, it works perfectly in a default session and not at all in the private browsing mode. I've never bothered to figure out why is that (possibly some other add-on interfering). [0] https://github.com…

reCAPTCHA relies on things like Google cookies to lower the "user is a bot" risk score. Higher risk scores (such as when you go via a blank slate browsing session) result in more/more difficult challenges.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#14
post #7

I'm guessing Google will start using some sort of steganography to prevent this from happening.

Historically they just make it more complicated http://www.dc949.org/projects/stiltwalker/

Steganography prevents for people to use their exact service while making it more difficult in general prevents people from using any existing service.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#15
post #10

Earlier quoted context omitted.

Same problem for me on Android with Firefox.

Wow, so it's not just me! I'll ask around Mozilla and see if anyone knows why Twitter does this.

It happens to me too, also on Firefox mobile. I assumed it was because I block some trackers but maybe not?

Also t.co links from within the Twitter app don't load at all from me until I hit "open in Firefox" on the drop-down.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#17
post #12

I've seen this a week ago on reddit. The researched told google about this vulnerability and Google doesnt care about it, they are totally OK with it. You can see here that captcha doesn't block robots, but blocks people and makes browsing inconvenient. reCaptcha is a way google mines data from us for free.

Oh please, what a total joke of a comment.

> Google doesnt care about it, they are totally OK with it

Google hasn't said they don't care about it, where did you see any of that ?

They merely allowed the code to be released despite it still working against the current. Previous experience (namely the original uncaptcha) prove that they intend to find a way to fix it.

> You can see here that captcha doesn't block robots, but blocks people and makes browsing inconvenient.

Total BS, remember it's not Google that uses it, it's website owners (us), if what you claim was indeed true we wouldn't be using it, we would use something else that did what we wanted.

> reCaptcha is a way google mines data from us for free.

Of course, through the visual selection it displays when "unsure", although I do not know the detail it seems pretty obvious that once it's sure you're human it sometimes ask you to detect things in picture anyway so as to provide training data (for maps, waymo, image search, whatever ...)

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#18
post #17
post #12

I've seen this a week ago on reddit. The researched told google about this vulnerability and Google doesnt care about it, they are totally OK with it. You can see here that captcha doesn't block robots, but blocks people and makes browsing inconvenient. reCaptcha is a way google mines data from us for free.

Oh please, what a total joke of a comment. > Google doesnt care about it, they are totally OK with it Google hasn't said they don't care about it, where did you see any of that ? They merely allowed the code to be released despite it still working against the current. Previous experience (namely the original uncaptcha) prove that they intend to find a way to fix it. > You can see here that captcha doesn't block robot…

>> Google doesnt care about it, they are totally OK with it

> Google hasn't said they don't care about it, where did you see any of that ?

Check this out:

> The Recaptcha team is aware of this attack vector, and have confirmed they are okay with us releasing this code, despite its current success rate.

Source: https://github.com/ecthros/uncaptcha2/blob/master/README.md

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#19
post #17
post #12

I've seen this a week ago on reddit. The researched told google about this vulnerability and Google doesnt care about it, they are totally OK with it. You can see here that captcha doesn't block robots, but blocks people and makes browsing inconvenient. reCaptcha is a way google mines data from us for free.

Oh please, what a total joke of a comment. > Google doesnt care about it, they are totally OK with it Google hasn't said they don't care about it, where did you see any of that ? They merely allowed the code to be released despite it still working against the current. Previous experience (namely the original uncaptcha) prove that they intend to find a way to fix it. > You can see here that captcha doesn't block robot…

> if what you claim was indeed true we wouldn't be using it

Not saying this is the case here, but cargo culting does exist in tech, so this is quite a weak argument in my opinion.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#20
post #11
post #10

Earlier quoted context omitted.

Wow, so it's not just me! I'll ask around Mozilla and see if anyone knows why Twitter does this.

A refresh usually helps, and this "feature" isn't exclusive to Firefox. For some reason, it is exclusive to the links opened from another apps and doesn't appear when accessing a link directly (via a refresh). That might narrow down your search a bit.

I always was rate limited until I signed into Twitter. Problem solved.

I think they cap guest views/minute.

Post reply on HN