Live data from Hacker News

Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

googleonlinesecurity.blogspot.com

411–420 of 442 posts

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#412
post #398

Earlier quoted context omitted.

You're missing the fact that they're relying on many cues, not just mouse movement. I don't think they're even discolosing everything they use.

You're missing the fact that they went from something that is quite difficult to get a program to do (essentially an AI complete task) to one that's not AI complete. It doesn't really matter how many non-AI complete components they are measuring... without at least one AI complete task, they removed the thing that makes CAPTCHAs work.

Except distorted text reading is not hard for AI anymore, and all "AI-complete" tasks, whatever that means, are pretty much broken nowadays.

So where left with a very hard problem, and their best solution so far seems to be security through obscurity with a bunch of non-disclosed "cues". Not great, but I guess it's hard to come up with anything better.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#414
post #352

"If we can collect behavioural data from you, and it matches closely the behaviour of other humans, you are a human. Otherwise you're not a human." Does anyone else get that feeling from the description of what Google is doing? I've tripped their "we think you are a bot" detection filter and been presented with a captcha countless times while using complex search queries and searching for relatively obscure things, a…

From you description, you do sound kinda' like a bot. Disabled cookies. Disabled Javascript. Irregular searches. I understand the frustration with saying, "You have to have these features supported to use the product," but let's face it: providing an experience to people who deliberately disable huge chunks of browser functionality is a tremendous pain in the ass. I think I can understand both sides of the argument u…

[deleted]

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#415

I don't understand how this can't be spoofed. I can only see how it'll slow a bot down, and maybe reduce the number of accounts it can create/commandeer.

As long as it behaves like a human, what difference does it make if it's actually a really sophisticated bot?

That brings me back to "why are we trying to prevent bots?" And I'm under the impression that we want to prevent automated spamming of $web_community_resourse. So to answer your question, it makes a difference because once the really sophisticated bot is in, it starts spamming up the place.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#416

Earlier quoted context omitted.

Well this is exactly the point. Obscure information has a very low social/viral index and as a result a lot of people don't interact with it so it is hard to find with Google - which is why I don't think it is a particularly robust search engine on it's own in the grand scale of knowledge development. Google seems robust because humans generally think pretty similarly, and generally look for the things that the peopl…

When trying to use Google to find something obscure, I'm not so much bothered by the difficulty of doing so as I am by the implication that "real humans" don't use complex search queries. They used to teach in computer literacy courses how to use search engines, complete with complex multi-term boolean queries, to find exactly what you're looking for. Now try the same with Google and you're a bot? WTF? They're basica…

Or that a lot of their target demographic has never been taught that, and so they've optimised their delivery to be accessible to the majority?

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#418

Earlier quoted context omitted.

> and it's frankly very insulting and rather disturbing that they think someone who inputs "unusual" search queries, according to their measure, is not human. Insulting? how is that insulting? You are entitled. You are entitled you block scripts, use Google's FREE service to perform any search query to search the web while blocking any program that attempts to identify you as not a bot. But if while using their free…

Google's services are not free. You trade your data, screen real estate, and attention for their service. This is worth a lot - Google is worth a lot. They didn't do it by giving out services for free.

They are if you block ads, scripts, and cookies.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#419

Earlier quoted context omitted.

It kind of is, actually. Cloudflare, for example, uses a single CAPTCHA to prevent ongoing DDoS attacks. If they switched to this new reCAPTCHA and if a DDoSer can use Selenium to get past the challenge, then the CAPTCHA process has failed. There are always tradeoffs with this. I strongly suspect Google is going to have to restrict it within a year or so, resulting in the number of users who still have to solve CAPTC…

'a bit' being key. It's not like a DDoSer can't already solve captchas for three minutes if that's the only protection.

The work still has to be done manually in those cases, though, whether they type it themselves or rent use of a captcha farm.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#420

Earlier quoted context omitted.

Well this is exactly the point. Obscure information has a very low social/viral index and as a result a lot of people don't interact with it so it is hard to find with Google - which is why I don't think it is a particularly robust search engine on it's own in the grand scale of knowledge development. Google seems robust because humans generally think pretty similarly, and generally look for the things that the peopl…

When trying to use Google to find something obscure, I'm not so much bothered by the difficulty of doing so as I am by the implication that "real humans" don't use complex search queries. They used to teach in computer literacy courses how to use search engines, complete with complex multi-term boolean queries, to find exactly what you're looking for. Now try the same with Google and you're a bot? WTF? They're basica…

Well to be fair most of their users probably are too "stupid" (aka were never taught) to do that.
Post reply on HN