Live data from Hacker News

Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

googleonlinesecurity.blogspot.com

191–200 of 442 posts

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#191

Earlier quoted context omitted.

What do you mean by "break"?

Passing the captcha through an entirely automated procedure.

In bulk? It's not supposed to stop real users from using a bit of scripting.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#194
post #103

Earlier quoted context omitted.

The cursor movement story seems to be a smokescreen to dilute the fact they're actually running an internet wide monitoring network, tracking users from site to site and building profiles on them.

I'm not sure where cursor movement was mentioned, other than the comments.

I read it in the wired.com article about this also submitted to HN: "And [Vinay] Shet says even the tiny movements a user’s mouse makes as it hovers and approaches a checkbox can help reveal an automated bot."

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#196

They've been doing this for a while. With recaptcha, you got easier captchas (a single street number instead of two words) if the system thought you were human. There was an official post about this a year ago. [1] Now they have probably improved the system enough to be confident in not showing captcha at all. It's nothing revolutionary. If it thinks you're a robot, you still get the old captcha. [2] [1] http://googl…

Am I being paranoid when I think that offering this "free" service is a great way to track people over even more sites and usually the most important conversion pages that don't have the usual google display ads. I don't see a big technological innovation here as it appears that mostly they are checking your cookies to see if they recognize you.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#197
Robot testing if user is not a robot.

Now that it knows how to detect humans, one day we'll all laugh when we read the news that Google can't log in to their own administration systems, because an AI security algorithm evolved the decision to lock out human beings.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#198

"If we can collect behavioural data from you, and it matches closely the behaviour of other humans, you are a human. Otherwise you're not a human." Does anyone else get that feeling from the description of what Google is doing? I've tripped their "we think you are a bot" detection filter and been presented with a captcha countless times while using complex search queries and searching for relatively obscure things, a…

Can you suggest a way to tell the difference between you and a bot? Merely throwing flags around without offering anything better isn't very helpful.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#199
I'm concerned this will just ban people using obscure browsers, blocking javascript and cookies, and just behaving in non-typical ways.

Fortunately I rarely encounter CAPTCHAs outside of creating an account, and I can just do that through a different browser.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#200

"If we can collect behavioural data from you, and it matches closely the behaviour of other humans, you are a human. Otherwise you're not a human." Does anyone else get that feeling from the description of what Google is doing? I've tripped their "we think you are a bot" detection filter and been presented with a captcha countless times while using complex search queries and searching for relatively obscure things, a…

Can you suggest a way to tell the difference between you and a bot? Merely throwing flags around without offering anything better isn't very helpful.

There isn't a way. As AI improves bots become increasingly indistinguishable from humans. All this does is rely on the fact that bots tend to use different browsers and behave in different ways than humans. But that can be fixed.

But it doesn't matter. If a human user spams tons of links in the comments after creating 20+ accounts, who cares if they are a bot or are doing it manually? I believe that websites should instead use machine learning like this to detect the bad behavior itself, rather than try to determine who the user actually is.

Post reply on HN