Live data from Hacker News

Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

googleonlinesecurity.blogspot.com

101–110 of 442 posts

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#101
post #68
post #54

Earlier quoted context omitted.

You can try it out here: https://www.google.com/recaptcha/api2/demo If you are a recognized as human you could perhaps try it via Tor.

I wish these google pages wouldn't automatically assume you speak some language based on your IP address - I get mine in German without any option to switch. Aren't there standards for setting language in web browsers?

> Aren't there standards for setting language in web browsers?

Yes, the Accept-Language HTTP header.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#102
post #87

Earlier quoted context omitted.

On what page did you tested the new system?

Here you go: https://www.google.com/recaptcha/api2/demo

Wow, that's odd. I checked it out on mobile and they confirmed me human without giving me the images set similarity question.

I don't think they can predict this from the way I touch the screen >.<

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#103
post #95

It's definitely not only relying on cursor movements. A simple $('iframe').contents().find('.recaptcha-checkbox-checkmark').click() proved that I'm not a robot, without me touching the mouse.

The cursor movement story seems to be a smokescreen to dilute the fact they're actually running an internet wide monitoring network, tracking users from site to site and building profiles on them.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#104
post #94

It says that they do take mouse movement into account but the cookie part makes me feel a little uneasy: > IP addresses and cookies provide evidence that the user is the same friendly human Google remembers from elsewhere on the Web. If this becomes a trend then major commercial websites will become unusable for people who are not accepting (third-party) cookies. "Because those damn bots" is a straw man argument to m…

It's only used to generate a confidence level.

"In cases when the risk analysis engine can't confidently predict whether a user is a human or an abusive agent, it will prompt a CAPTCHA to elicit more cues"

So if you have cookies disabled, you'll probably just get a regular captcha

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#105
post #45

Think of Captcha as the first battle in humanity's fight against AI. Over the long term this problem has no solution.

Except by answering captchas, you're helping the machines (first words for books, then numbers for street view, now pictures for classification).

That's an interesting thought that every time we introduce novel classification schemes to resolve humans from computers we feed a large training set for them.

I never understood how that works, though. If I get a captcha street address wrong then that means they already had the answer, so how am I contributing?

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#106
post #52

It's definitely not mouse based. I tried it in an incognito tab and it showed me the old form when I clicked the checkbox.

I tried the demo in two different browsers that I use regularly. On the one that stays logged into my google account, I was not challenged with a captcha. On the other browser, which I use quite a lot but not with my google account, the captcha appears.

I'd think that having a long-standing google account with a normal history of activity would be a good indication that one might be a human. If google is weighting that heavily for this test, that may create a new incentive for spammers and scammers to hijack people's google accounts.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#107
post #94

It says that they do take mouse movement into account but the cookie part makes me feel a little uneasy: > IP addresses and cookies provide evidence that the user is the same friendly human Google remembers from elsewhere on the Web. If this becomes a trend then major commercial websites will become unusable for people who are not accepting (third-party) cookies. "Because those damn bots" is a straw man argument to m…

It's only used to generate a confidence level. "In cases when the risk analysis engine can't confidently predict whether a user is a human or an abusive agent, it will prompt a CAPTCHA to elicit more cues" So if you have cookies disabled, you'll probably just get a regular captcha

okay, that's reasonable.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#109
post #48

Earlier quoted context omitted.

Google collects all your data and applies machine learning to predict a probability value that you are human. If it is below a certain threshold you have to enter a CAPTCHA.

The question was more about on how the new captcha works, I guess.

The old system presented you a challenge-response test no matter what.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#110

I can not find any documentation about how to put in the new reCAPTCHA if you already using their older version...

I'm fairly certain that it doesn't require you to change anything, it will just start working. You must be a bot.
Post reply on HN