Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA” • Hacker News Board

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#31

Post by seren » Wed, Dec 03, 2014, 3:38 PM UTC

towelguy wrote: post #27

Khao wrote: post #18

Earlier quoted context omitted.

It probably uses a LOT more info than only the mouse move/mouse click. Remember, google tracking is embedded in probably 99% of websites you visit so from your ip, cookies, tracking, logged in Google profile, etc... they're able to know if you're a human or not.

So if I don't have a Google account or allow their cookies in other sites then I'm not a human anymore?

Nothing as dramatic : if you don't have a strong Google footprint, it is less likely that the system will recognize you automatically as human, and you'll have to answer the picture question.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#32

Post by emcrazyone » Wed, Dec 03, 2014, 3:38 PM UTC

chrisan wrote: post #19

cheshire137 wrote: post #9

I wish they would explain more about how the user interacts with the whole reCAPTCHA leads them to know it's a person and not a robot, but maybe they're worried about people writing bots to get around their protections.

> However, CAPTCHAs aren't going away just yet. In cases when the risk analysis engine can't confidently predict whether a user is a human or an abusive agent, it will prompt a CAPTCHA to elicit more cues, increasing the number of security checkpoints to confirm the user is valid. Probably using a combination of G+ and GA to check your 'history' to see the activity is like a normal human. Visits a couple news sites e…

I was thinking they may be looking at how long it takes for a user to click the "I'm not a robot" link. A robot would probably load the page and quickly, without delay, send the HTTP POST but I have to imagine they thought of this already and bots writers would quickly add a sleep() call in there at some point... Yea, I wonder about their internal logic too.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#33

Post by merlincorey » Wed, Dec 03, 2014, 3:38 PM UTC

towelguy wrote: post #26

Is it keyboard friendly?

I want to know how well it works with accessibility concerns of various and sundry natures.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#34

Post by ins0 » Wed, Dec 03, 2014, 3:40 PM UTC

don't know if this works only for me but here is a live example - https://www.google.com/cbk?cb_client=maps_sv.tactile&output=...

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#35

Post by zoidb » Wed, Dec 03, 2014, 3:40 PM UTC

How long before you will have to answer a series of annoying and difficult questions if you don't allow tracking cookies and google to collect personal information (which I assume the far majority of users allow on a regular basis)? Not sure how I feel about this.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#36

Post by spain » Wed, Dec 03, 2014, 3:41 PM UTC

So how does it work?

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#37

Post by ggambetta » Wed, Dec 03, 2014, 3:41 PM UTC

whyNotBoth wrote: post #13

Oh, so just program bots to provide a mouse movement toward a form element along a distorted path, and always trigger them through the UI rather than as events. Got it!

Yeah, good luck with that.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#38

Post by chopin » Wed, Dec 03, 2014, 3:41 PM UTC

towelguy wrote: post #27

Khao wrote: post #18

Earlier quoted context omitted.

It probably uses a LOT more info than only the mouse move/mouse click. Remember, google tracking is embedded in probably 99% of websites you visit so from your ip, cookies, tracking, logged in Google profile, etc... they're able to know if you're a human or not.

So if I don't have a Google account or allow their cookies in other sites then I'm not a human anymore?

Not from Googles point of view, probably...

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#39

Post by [deleted] » Wed, Dec 03, 2014, 3:43 PM UTC

mdhgriffiths wrote: post #28

> in the last week, more than 60% of WordPress’ traffic and more than 80% of Humble Bundle’s traffic on reCAPTCHA encountered the No CAPTCHA experience—users got to these sites faster. Does this mean WordPress saw an 60% decrease in traffic from bots?

[deleted]

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#40

Post by grimtrigger » Wed, Dec 03, 2014, 3:43 PM UTC

It seems like they're using cursor tracking to validate human-ness. Assuming thats the case: Since the cursor is outside of javascript's control, it would force the attacker one level higher (to the browser/os, instead of the dom). Not impossible, but still a significant barrier.