Live data from Hacker News

Google’s new reCAPTCHA has a dark side

fastcompany.com

51–60 of 566 posts

Re: Google’s new reCAPTCHA has a dark side

#51
Disabling browser API that adblockers/privacy protectors use. Fingerprinting users with adds at stackowerflow. Now collect information how user navigate webpage. This is a scary trend.

And I am not speaking here about how Android and Android apps (which is allowed by Google) track users.

Re: Google’s new reCAPTCHA has a dark side

#52

Earlier quoted context omitted.

I have the same experience, some pages don't work on FF but fine on Chrome. I like to apply Occam's Razor, but with so many users it seems to me as if that's either by design, or certainly there is little desire to fix the issue.

Worst part is my chrome installation is 100% fresh with no browsing history and FF has cookies and history older than an year ago.. still google trusts Chrome more than FF?

reCaptcha isn't able to read your non-Google cookies or history, so most of that isn't being considered.

Re: Google’s new reCAPTCHA has a dark side

#53

Earlier quoted context omitted.

I have the same experience, some pages don't work on FF but fine on Chrome. I like to apply Occam's Razor, but with so many users it seems to me as if that's either by design, or certainly there is little desire to fix the issue.

Worst part is my chrome installation is 100% fresh with no browsing history and FF has cookies and history older than an year ago.. still google trusts Chrome more than FF?

If they looked for identifying information in cookies or browsing history people would be even more upset and spammers would just simulate it with browser bots... which is why I believe it takes a black box approach to each detection regardless of external state. Besides obviously the cookies set within the iframe of the recatcha.

This of course doesn’t help explain why Firefox is so heavily targeted by what’s supposed to be a neutral utility like Google Analytics...

Re: Google’s new reCAPTCHA has a dark side

#54

Google's captcha system is overkill for most websites. If I want to filter out bad actors (on a simple straight-forward site), there are other more simpler and easier to solve captcha systems out there. They might not have the rigour of Google's system, but they do the job, and well. I would however use Google's system if the site is massive and there is the possibility that someone is using a script or some program…

I disagree. Adding Google's captcha is a 15 minute exercise. If i remember correctly, you copy/paste a snippet then add a callback in your own code. Whereas rolling your own captcha implementation would take much longer and be worse.

Re: Google’s new reCAPTCHA has a dark side

#55

Earlier quoted context omitted.

Worst part is my chrome installation is 100% fresh with no browsing history and FF has cookies and history older than an year ago.. still google trusts Chrome more than FF?

reCaptcha isn't able to read your non-Google cookies or history, so most of that isn't being considered.

I was under the impression sites using Google Analytics were included as a reCaptcha signal.

Re: Google’s new reCAPTCHA has a dark side

#57

There are a lot of sites that are totally unusable on Firefox regardless how much you use ff. I do all my mobile browsing on FF yet when I try to use some websites I always get this Recaptcha failed error(1) while it works flawlessly on chrome though I never use it often. Try it, maybe it will happen for you too. Same happens on most sites which show you that "checking your browser" page via cloudflare too. The web i…

It's even worse when you're running a VPN (especially one of the major public ones). When I see reCAPTCHA I basically give up as sometimes I have to go through 6 or 7 full sets to be let into a site. It's the evil of the internet this.

Re: Google’s new reCAPTCHA has a dark side

#58
So this is probably a bit off topic, but why don't more site owners just create their own unique anti-spam system? In my opinion, if they were simpler, yet all unique, there would be less bots that could mass spam and privacy would be improved.

Even something as simple as a question: "How many legs does a spider have?" ____

And then cycle through different types of free form questions of things that most people should know. Perhaps block the IP after {n} failed attempts for an hour.

Re: Google’s new reCAPTCHA has a dark side

#60
post #30

Earlier quoted context omitted.

I'm guessing their a-listers came up with something like this: // TODO: add impressive-looking math if (signedin && trackedEverywhere) { return 0.9 } else { return 0.7 } I think we give Google way too much credit for their talent. This is the same company that didn't feel like finishing their website for two decades and subsequently stole $75 million from their users even when Google knew [1]. The same company that s…

If I sign out of my google account in Chrome it drops from 0.9 to 0.7. I could have sworn I'd never signed in to Chrome using my google account, but I guess I must have mistakenly signed in to gmail or something. I use FF as my main browser, only ever drop back to Chrome sporadically, or when I really want tabs to be completely isolated (there are some annoyingly CPU/power intensive stuff I do from time to time, and…

> I could have sworn I'd never signed in to Chrome using my google account, but I guess I must have mistakenly signed in to gmail or something.

Chrome 69 tricked users into signing into the browser, myself included - https://lifehacker.com/how-to-disable-chromes-automatic-sign...

That was the last straw to uninstall Chrome from all my devices and I've been a happy Firefox user ever since. Well, except now reCAPTCHA hardly ever works.

Post reply on HN