Live data from Hacker News

Google broke reCAPTCHA for de-googled Android users

reclaimthenet.org

51–60 of 618 posts

Re: Google broke reCAPTCHA for de-googled Android users

#53

Earlier quoted context omitted.

Stop visiting sites and using services that use reCAPTCHA. Problem solved.

With the new reCAPTCHA this is going to happen because most human visitors will actually be unable to pass the CAPTCHA. It will be interesting to see whether this makes websites ditch reCAPTCHA or whether they literally just don't care about having customers, an attitude that seems to be getting more and more common every day.

One problem with these things is that businesses have minimal visibility on the amount of users they lose.

On the opposite, if they see reports of many visitors not completing the captcha, they're likely to think "Wow so many bots!!! This defense nowadays is indispensable..!".

Sometimes you need to pass a captcha even to contact them (if you want to tell them that you can't pass their captcha).

Re: Google broke reCAPTCHA for de-googled Android users

#54

Sites that use reCAPTCHA/Turnstile/etc. have already been broken for me for years now due to neverending captcha/refresh loops. My ISP regularly changes everyone's IP, and I apparently share an ISP with people who suck, so I get flagged just trying to do all sorts of normal things. Some examples: - I've never bought anything from Etsy but I'm somehow banned from even viewing their site at all. - Discord immediately b…

Almost would bet one or a few of your ISP's customers have their connections being used as residential VPNs.

I know people like to think of suspicious android box setups but even a lot of "free" apps, extensions and other such services scarily seem to do that duty these days. I'm sure I'm preaching to the choir here, but its sad how many people will use some free of cost vpn and not even think why that might be.

Re: Google broke reCAPTCHA for de-googled Android users

#57
post #47

Earlier quoted context omitted.

Stop visiting sites and using services that use reCAPTCHA. Problem solved.

Yeah, live in a cave, and problem solved. However much I hate it, right now among the sites using reCAPTCHA there are many that I strongly want to use. Let's find a better solution please

[dead]

Re: Google broke reCAPTCHA for de-googled Android users

#58
post #49

I don't use Android right now and haven't used Google'd Android for almost a decade. And I won't. If this is the hill I die on, so be it. I'm not going to use any sort of hardware attestation, especially one controlled by Google. You shouldn't either, even if you have an unrooted Google-certified Android phone.

It's all fun until you can't get paid because some fintech app doesn't work. That's why we need regulations. I don't see politicians ever going against an advertising company when they're customers.

Re: Google broke reCAPTCHA for de-googled Android users

#59
post #47

Earlier quoted context omitted.

Stop visiting sites and using services that use reCAPTCHA. Problem solved.

Yeah, live in a cave, and problem solved. However much I hate it, right now among the sites using reCAPTCHA there are many that I strongly want to use. Let's find a better solution please

sieabahlpark, I probably hate this more than you, you misunderstood

Re: Google broke reCAPTCHA for de-googled Android users

#60

My understanding is that this new reCAPTCHA is basically just remote attestation. Remote attestation doesn't use blind signatures (as that would be 'farmable') so tying the device to the 'attestee' is technically possible with collusion of Google servers: EK (static burned-in private key) -> AIK (ephemeral identity key in secure enclave signed by a Google server) -> attestation (signed by AIK). As you can see if the…

Stop visiting sites and using services that use reCAPTCHA. Problem solved.

Stop visiting sites and using services that use reCAPTCHA. Problem solved.

No. Bigger problem created, since there are innumerable government, health care, and educational web sites that use reCAPTCHA.

I'm not going to give up reading the test results from my doctor because of some simplistic ideologue decides that it's "problem solved."

Post reply on HN