I think it's possible to run the Play Services in an emulator, faking the device type. Google doesn't seem to use the platform attestation for now.
Treatment is not a cure.
Google broke reCAPTCHA for de-googled Android users
151–160 of 618 posts
Re: Google broke reCAPTCHA for de-googled Android users
#152Earlier quoted context omitted.
It's all fun until you can't get paid because some fintech app doesn't work. That's why we need regulations. I don't see politicians ever going against an advertising company when they're customers.
Already happening. The official German identification app, AusweisApp, is designed exclusively for Android and Apple mobile devices
> designed exclusively for Android and Apple mobile devices
That's very different from requiring hardware attestation, though.
Re: Google broke reCAPTCHA for de-googled Android users
#153Earlier quoted context omitted.
A parallel, fully public and accessible internet being widespread and available for anyone with a slight tinkering kick... Could actually be really awesome. Let the commerce-driven, corporatized hellhole that the modern web has become eat itself.
I love the vision, but I do wonder how the parallel internet will deal with DDoS levels of bot traffic. I hear ‘web of trust’ pretty often and I like the idea but that’s not anonymous or accessible either
Well, how does Tor or other services do it now?
Re: Google broke reCAPTCHA for de-googled Android users
#154Earlier quoted context omitted.
How does the verification app on your phone know what's in the URL bar on your desktop?
The QR code/URL would be generated/requested by the javascript running on the website you're viewing, which knows what's in your address bar.
It would be generated by some other website like Amazon. Because I own, say, Meta, I copy these Amazon-generated codes over to Meta, make people scan them on their phones to sign into Meta and then pass the solution back to Amazon so my bots can sign into Amazon.
Re: Google broke reCAPTCHA for de-googled Android users
#155Earlier quoted context omitted.
There really isn't much of an option. Apple's just as bad if not worse.
At least with an Android i have the option of Graphene, and have access to a terminal, and for now can sideload apps. With apple there's no choices, so I'll continue to take my chances with Android
Can Graphene OS pass this kind of Google attestation challenge, though?
Re: Google broke reCAPTCHA for de-googled Android users
#156Earlier quoted context omitted.
Why is every startup using that same Serif font now, Garamond or whatever. Is it an LLM design phenomenon? Its kinda ruining that font style for me. Also $1,500 a month for 10 "influencers" is wild. This doesn't seem that sophisticated unless they're doing something special to increase trust scores of accounts. They say they have "in house warming algorithm" which honestly doesn't inspire confidence for me. Whats fun…
I think the font is mimicking old Apple ads, eg: https://i.insider.com/5bf8592eb73c284de50e2f28
Ahh, that makes sense.
Re: Google broke reCAPTCHA for de-googled Android users
#157My understanding is that this new reCAPTCHA is basically just remote attestation. Remote attestation doesn't use blind signatures (as that would be 'farmable') so tying the device to the 'attestee' is technically possible with collusion of Google servers: EK (static burned-in private key) -> AIK (ephemeral identity key in secure enclave signed by a Google server) -> attestation (signed by AIK). As you can see if the…
Shouldn't that be illegal under GDPR?
Re: Google broke reCAPTCHA for de-googled Android users
#158Earlier quoted context omitted.
Already happening. The official German identification app, AusweisApp, is designed exclusively for Android and Apple mobile devices
No, you can also get it for Windows and Huawei devices. So three American and one Chinese companies. Great.
With Salt Typhoon, that's a whole four ways to choose how China steals your data.
And to think, people said consumer choice was dead...
Re: Google broke reCAPTCHA for de-googled Android users
#159Earlier quoted context omitted.
When companies like this exist, what is the point of relying of TPM? Looks like the future is bright for VC backed bots https://doublespeed.ai/
How is this not grounds to be sued into oblivion by Google and Meta? They clearly violate ToS for profit. This is something I expect to find on a dark web forum where 0days are traded, not in public.
This kind of thing has been common for ages. Obviously AI has kicked it into overdrive, but it’s not darkweb kind of stuff.
Note that they do not mention any specific companies on that landing page. That is pretty intentional.
But realistically going after bots is expensive and rarely successful, so most companies don’t do it. Even if you find the guy, the chances they can be legally reached are pretty low.
Re: Google broke reCAPTCHA for de-googled Android users
#160This is crossing the line where the governments should step in and ban/fine google heavilly for this monopol behavior
The governments are the ones who needs the most. They want to know who all the potential and current dissidents are.
Bingo. Remember all the people on HN who canvassed for consumers to vote with their dollar? Absent-minded consumption is what consumers voted for.
Now everyone pretends like it's monopoly abuse because the Leopards Eating Faces company finally rang the dinner bell.