Live data from Hacker News

Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

googleonlinesecurity.blogspot.com

21–30 of 442 posts

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#21
post #17

Sorry if the article mentioned it (i only read the first few paragraphs) but looking at the cat click, that looks like a great way to generate training data for AI.

This is exactly what the previous implementation was as well. The "words" you had to recognize were either scanned from Google Books, or house numbers from StreetView, effectively enhancing their OCR training set.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#22

I recently added recaptcha to a site and got this version. From an implementation standpoint it is utterly painless. The client side is copy/paste from Google's site and the PHP/server side was this: $recapchaURL = 'https://www.google.com/recaptcha/api/siteverify?secret=600SZZ0ZZZZZIZi-ZZ0ZEHZW1000Z_0ZZZ00QZZ&response=' . request_var('g-recaptcha-response','') .'&remoteip=' . $request->server('REMOTE_ADDR'); $recapch…

Is that your actual secret? you might not want to reveal that/you should get a new one.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#23
It seems plausible that as more sites adopt this kind of technology, automated web access (e.g. scraping) the web will become harder -- for whatever purpose, good or ill. This has long been an "arms race" between hiding and detection. I can hope that reasonable uses of automation still remain feasible.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#27
post #18
post #10

will GUI automation tools be able to surpass this?

It probably uses a LOT more info than only the mouse move/mouse click. Remember, google tracking is embedded in probably 99% of websites you visit so from your ip, cookies, tracking, logged in Google profile, etc... they're able to know if you're a human or not.

So if I don't have a Google account or allow their cookies in other sites then I'm not a human anymore?

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#29
post #23

It seems plausible that as more sites adopt this kind of technology, automated web access (e.g. scraping) the web will become harder -- for whatever purpose, good or ill. This has long been an "arms race" between hiding and detection. I can hope that reasonable uses of automation still remain feasible.

[deleted]
Post reply on HN