Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

googleonlinesecurity.blogspot.com

Post reply on HN
Print view View original

171–180 of 442 posts

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#171

Post by [deleted] »

junto wrote: post #123
ricg wrote: post #95

It's definitely not only relying on cursor movements. A simple $('iframe').contents().find('.recaptcha-checkbox-checkmark').click() proved that I'm not a robot, without me touching the mouse.

I tried this demo ( https://www.google.com/recaptcha/api2/demo ) in a new incognito window. Then in devtools: javascript:if(!window.jQuery||confirm('Overwrite\x20current\x20version?\x20v'+jQuery.fn.jquery))(function(d,s){s=d.createElement('script');s.src='https://ajax.googleapis.com/ajax/libs/jquery/1.8/jquery.js';(d.head||d.documentElement).appendChild(s)})(document); $('iframe').contents().find('.recaptcha-checkbox…

[deleted]

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#172

Post by _lce0 »

jrochkind1 wrote: post #88
jackalope wrote: post #75

I always assumed Google's use of reCAPTCHA was to augment the OCR used to digitize Google Books, particularly in results the software couldn't confidently match to a word. Is this true? It's interesting that it's still the fallback for the new method.

That was the original idea behind reCAPTCHA (which originated outside of Google, acquired in 2009), but my understanding is that they long ago ran out of actual text that needed human OCR'ing, and/or found other reasons that approach no longer was helpful. The "help OCR while also spam protecting" thing isn't currently mentioned on Google's recaptcha product page.

they also used it to decode street number addresses, for street view

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#173

Post by Jgrubb »

forgottenpass wrote: post #144
Jgrubb wrote: post #115

Earlier quoted context omitted.

Eh, you never know. Attitudes toward certain improprieties have moderated in recent years...

So what? Other once acceptable behavior is no longer tolerated. There is always a center, just because it moves doesn't mean that people can't be a socially unacceptable distance from it.

I suspect you have mistakenly stumbled into a lighthearted thread with an overly serious mindset.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#174

Post by nathas »

userbinator wrote: post #170

"If we can collect behavioural data from you, and it matches closely the behaviour of other humans, you are a human. Otherwise you're not a human." Does anyone else get that feeling from the description of what Google is doing? I've tripped their "we think you are a bot" detection filter and been presented with a captcha countless times while using complex search queries and searching for relatively obscure things, a…

"I have JS and cookies disabled"

So imagine what bots often don't have.

Adding JS interaction and cookies takes more effort on the part of the programmer writing a bot.

So yeah, you'd look a lot more like a robot. How else would you quickly differentiate between human vs non-human based on a single request, or even a collection of requests over time? It's a game of stats at scale.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#175

Post by jrochkind1 »

towelguy wrote: post #89
jrochkind1 wrote: post #88

Earlier quoted context omitted.

That was the original idea behind reCAPTCHA (which originated outside of Google, acquired in 2009), but my understanding is that they long ago ran out of actual text that needed human OCR'ing, and/or found other reasons that approach no longer was helpful. The "help OCR while also spam protecting" thing isn't currently mentioned on Google's recaptcha product page.

It is: > Creation of Value > Stop a bot. Save a book. > reCAPTCHA digitizes books by turning words that cannot be read by computers into CAPTCHAs for people to solve. Word by word, a book is digitized and preserved online for people to find and read. https://www.google.com/recaptcha/intro/index.html#creation-o...

Good catch.

I wonder where i heard/got the impression that it wasn't really being used for this much anymore. Maybe from when most of the recaptchas most of us saw switched from scanned books to google street view photo crops. And I was also surprised by the implication that google's algorithms really needed human help for visual recognition of almost exclusively strings of 0-9. I would have thought that would be a pretty well solved problem.

Anyway, somehow I got the idea that recaptcha wasn't actually providing much OCR help anymore, but maybe I just made that up.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#177

Post by _lce0 »

raverbashing wrote: post #124
ricg wrote: post #95

It's definitely not only relying on cursor movements. A simple $('iframe').contents().find('.recaptcha-checkbox-checkmark').click() proved that I'm not a robot, without me touching the mouse.

Are you logged into Google? If you have their cookies it's one indication you're not a robot.

I strongly believe it is the bot detection .. They may also added extra checks to already logged users

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#178

Post by xtracto »

userbinator wrote: post #170

"If we can collect behavioural data from you, and it matches closely the behaviour of other humans, you are a human. Otherwise you're not a human." Does anyone else get that feeling from the description of what Google is doing? I've tripped their "we think you are a bot" detection filter and been presented with a captcha countless times while using complex search queries and searching for relatively obscure things, a…

> and it's frankly very insulting and rather disturbing that they think someone who inputs "unusual" search queries, according to their measure, is not human.

Insulting? how is that insulting? You are entitled. You are entitled you block scripts, use Google's FREE service to perform any search query to search the web while blocking any program that attempts to identify you as not a bot.

But if while using their free service they cannot identify you as a human given the factors they measure(becuase you actively disabled the programs that measure such factors), then I see nothing wrong in them trying alternative ways (which were a standard before).

I think you are making a storm in a teacup. If you feel offended by the way their website work, just don't use them. I don't see any red flags at all.

Post reply on HN