I just hope it also works for pen-tablets, where the "pointer" can suddenly jump from one location to the next when the pen comes near the surface of the tablet.
Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
11–20 of 442 posts
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#12> Google also will use other variables that it is keeping secret—revealing them, he says, would help botmasters improve their software and undermine Google’s filters
I'm pretty sure that looking at the javascript calls will tell what "variables" they use, with browser agent, ip, cookies.
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#13Oh, so just program bots to provide a mouse movement toward a form element along a distorted path, and always trigger them through the UI rather than as events. Got it!
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#14The tiniest mouse movements I make while tabbing to the checkbox and hitting my spacebar to check it? Or tap it on my touch screen? And why wouldn't this be vulnerable to replaying a real user's input--collected on, say, a "free" pornographic website? Their answer seems to be "security through obscurity".
"Security through obscurity" is a weak concept, however the goal here is not security but fraud detection.
Obscurity is a legitimate component of a fraud detection system, for the same reason that hiding your cards is an important part (but only a part!) of being a good poker player.
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#15The tiniest mouse movements I make while tabbing to the checkbox and hitting my spacebar to check it? Or tap it on my touch screen? And why wouldn't this be vulnerable to replaying a real user's input--collected on, say, a "free" pornographic website? Their answer seems to be "security through obscurity".
It's always security through obscurity.
f(obscurity, time, analysis) = clarity
The details of implementation are left to the reader as an exercise
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#16[deleted]
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#17Sorry if the article mentioned it (i only read the first few paragraphs) but looking at the cat click, that looks like a great way to generate training data for AI.
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#18will GUI automation tools be able to surpass this?
It probably uses a LOT more info than only the mouse move/mouse click. Remember, google tracking is embedded in probably 99% of websites you visit so from your ip, cookies, tracking, logged in Google profile, etc... they're able to know if you're a human or not.
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#19I wish they would explain more about how the user interacts with the whole reCAPTCHA leads them to know it's a person and not a robot, but maybe they're worried about people writing bots to get around their protections.
> However, CAPTCHAs aren't going away just yet. In cases when the risk analysis engine can't confidently predict whether a user is a human or an abusive agent, it will prompt a CAPTCHA to elicit more cues, increasing the number of security checkpoints to confirm the user is valid.
Probably using a combination of G+ and GA to check your 'history' to see the activity is like a normal human. Visits a couple news sites each day, checks their gmail, searches for random crap randomly, GA registered a 'conversion' for some company = probably a human
Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
#20Here is a video introducing the no CAPTCHA reCAPTCHA https://www.youtube.com/watch?v=jwslDn3ImM0
Very cute video. I like the way the mouse pointers scares away the 'nasties'.