Live data from Hacker News

Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

googleonlinesecurity.blogspot.com

151–160 of 442 posts

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#152
post #134

It rise privacy concern for me. If real name and email validation is mandatory, I will wonder what Google will use that data for. Is that some kind of monitor tool which want to know REAL NAME, EMAIL ADDR whenever you want to use a website? Don't forget Google always beg for your telephone number for "security reasons", Google+ wants your real name for "Policy reason", I upgraded one of my Nexus to Android L, and eve…

Where are you seeing mandatory real name and email validation?

The video demonstrates filling in name and email, although it doesn't say anything about it.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#153
post #107

Earlier quoted context omitted.

It's only used to generate a confidence level. "In cases when the risk analysis engine can't confidently predict whether a user is a human or an abusive agent, it will prompt a CAPTCHA to elicit more cues" So if you have cookies disabled, you'll probably just get a regular captcha

okay, that's reasonable.

But then a bot need only copy a human's mouse movements and disable cookies and we're back to the status quo.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#154
It's based on Google account. There might be other vectors too. I tried browsing lots of pages in incognito, making Google searches, clicking ads etc. but that didn't help (might work in long term). Signing into my Google account (with history) was enough to pass the test.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#156
post #134

It rise privacy concern for me. If real name and email validation is mandatory, I will wonder what Google will use that data for. Is that some kind of monitor tool which want to know REAL NAME, EMAIL ADDR whenever you want to use a website? Don't forget Google always beg for your telephone number for "security reasons", Google+ wants your real name for "Policy reason", I upgraded one of my Nexus to Android L, and eve…

Where are you seeing mandatory real name and email validation?

In the video the user has to type in their first and last name, and an email address.

I have to assume there is a confirmation email, otherwise what's the point in asking for an email address?

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#158
post #108

And what about people with motor-neural conditions?

I think worst case scenario is that they get what they have today (solve a captcha style problem).

Con: They will have an additional click. Pro: They might get a more solvable puzzle than some of the "read this distorted text" images they would see today.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#159
post #11

I just hope it also works for pen-tablets, where the "pointer" can suddenly jump from one location to the next when the pen comes near the surface of the tablet.

Using my iPhone, it thought I was a bot.

More appropriately stated: couldn't determine a priori that you were a human.
Post reply on HN