Live data from Hacker News

Google broke reCAPTCHA for de-googled Android users

reclaimthenet.org

231–240 of 618 posts

Re: Google broke reCAPTCHA for de-googled Android users

#231

Earlier quoted context omitted.

It would be generated by some other website like Amazon. Because I own, say, Meta, I copy these Amazon-generated codes over to Meta, make people scan them on their phones to sign into Meta and then pass the solution back to Amazon so my bots can sign into Amazon.

We don't yet know how the client side works, perhaps there will be a decompilation posted soon. It's possible this scenario is acceptable to them because it means they can still tie your access to something that's easier to ban without requiring a full account login.

They're tying my access to random users of a completely different service, and a different random user each time.

Re: Google broke reCAPTCHA for de-googled Android users

#232
post #17

And soon desktop OSes will follow, if you don’t have TPM you won’t be able to browse half of the internet.

Not soon, now. The new reCAPTCHA on desktop shows you a QR code for you to scan with your Google-approved phone to prove you have one.

Re: Google broke reCAPTCHA for de-googled Android users

#233
post #98

Earlier quoted context omitted.

> Let's find a better solution please Is there an argument here that Google is creating a monopoly? Could this be challenged on similar grounds that forced Microsoft to recommend other browsers to users on Windows?

There is, but at least in the US neither party cares. They want to get rid of anonymity online, one to throw anyone who googles "trans" in jail, and the other because their biggest donors are tech companies that want to denonymize everyone. Our antitrust laws have been toothless for decades, and both parties love billionaires controlling the rest of us with an iron fist. GrapheneOS is looking more and more worth the…

Felt same way about GrapheneOS but a few friends set it up so i gave it a try. It is easy to install and use. As evidence, I gave my 70 year old father one and he loves it.

Re: Google broke reCAPTCHA for de-googled Android users

#234
We told you. You dismissed it, and thought we were just crazy conspiracy theorists. Too brainwashed by the mainstream propaganda about "threats" to see the truth. Now they're even more emboldened by how much they can herd the sheeple, and showing their actual goals even more clearly.

Spread the news, tell everyone you know, before it's too late. I wish we won't have to resort to even more drastic methods in this fight.

"Those who give up freedom for security deserve neither."

Re: Google broke reCAPTCHA for de-googled Android users

#235

Earlier quoted context omitted.

I have been unable to give my money to Home Depot, REI and a growing list of online retailers because they use Akamai EdgeSuite, which just assumes I am a bot and 403s on protected API calls. This happens consistently on any IP and any browser on my Linux desktop/laptop.

Home Depot at least has a physical presence, which you can go and directly give some much-needed feedback to.

It has a zero percent chance of reaching anyone who can do anything about it.

You could try handwriting and posting a letter to their CEO. I think that sometimes works. Probably not very often but there are more than zero CEOs who read those letters.

Re: Google broke reCAPTCHA for de-googled Android users

#236
post #201

Earlier quoted context omitted.

How would the phone camera know the domain name of the website displaying the QR code it's scanning?

After you scan the code, the verification app asks you "do you want to verify for example.com?"

If you don't verify for example.com you won't be allowed to view example2.com. So do you want to or not?

Re: Google broke reCAPTCHA for de-googled Android users

#237

Earlier quoted context omitted.

I love the vision, but I do wonder how the parallel internet will deal with DDoS levels of bot traffic. I hear ‘web of trust’ pretty often and I like the idea but that’s not anonymous or accessible either

Well, how does Tor or other services do it now?

Tor does it by being so painfully slow an unreliable that the only way you would use it is if there is a cocaine-style reward at the end of it.

Re: Google broke reCAPTCHA for de-googled Android users

#238
post #204
post #189

I have a good friend who doesn't own a cell phone. He's a math professor. Every year he keeps living life without a smartphone, I continue to be more impressed. Things like this makes me feel like he might have to eventually give in. https://archive.is is now serving, via Cloudflare, this QR code backed CAPTCHAs. There seems no way to get past them without a smartphone. Sad times. I wonder at what point even basic go…

> https://archive.is is now serving, via Cloudflare It looks like a cloudflare page but it's not hosted by them. eg. https://bgp.he.net/dns/archive.is#_ipinfo It's hosted by AS49505 JSC Selectel

To add onto this, cloudflare switched away from recaptcha a while ago. https://blog.cloudflare.com/moving-from-recaptcha-to-hcaptch...

I think they now use their own Cloudflare turnstile if I remember correctly, but back then they switched to hcaptcha.

Re: Google broke reCAPTCHA for de-googled Android users

#239

Earlier quoted context omitted.

Home Depot at least has a physical presence, which you can go and directly give some much-needed feedback to.

It has a zero percent chance of reaching anyone who can do anything about it. You could try handwriting and posting a letter to their CEO. I think that sometimes works. Probably not very often but there are more than zero CEOs who read those letters.

REI is allegedly a co-op, maybe there's a committee or something it could be presented to?
Post reply on HN