Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

googleonlinesecurity.blogspot.com

Post reply on HN
Print view View original

181–190 of 442 posts

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#181

Post by emodendroket »

ryandvm wrote: post #136
cheshire137 wrote: post #9

I wish they would explain more about how the user interacts with the whole reCAPTCHA leads them to know it's a person and not a robot, but maybe they're worried about people writing bots to get around their protections.

Or more likely they realize that explaining that your robot quotient is based on a statistical analysis of the last 6 hours of your browser traffic would probably freak everybody the fuck out. They're almost certainly using the adwords cookies that get hit from 90% of the sites out there to figure out if you're a bot or not.

True enough, although it doesn't stop Google Now from coming up with helpful suggestions like "Hey, we noticed you were looking at this movie; would you like to see it on Amazon?"

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#184

Post by Sir_Cmpwn »

ascorbic wrote: post #179
Sir_Cmpwn wrote: post #157

Earlier quoted context omitted.

Passing the captcha through an entirely automated procedure.

Does your automated process still send your real Google cookies though?

Yeah, it uses real user's cookies to accomplish it, but I was also able to break it with traditional captcha-breaking mechanisms after Google presents the fallback. The point I'm making here is that this change doesn't really help much with proving that you are a human.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#185

Post by msallin »

dyeje wrote: post #155

In regards to the video, I feel like it has become a cliche to have upbeat, light ukelele music in the background for product demonstration videos. I instantly felt myself become annoyed when the music started.

God, I never put my finger on it until you mentioned it. So true.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#186

Post by yclept »

userbinator wrote: post #170

"If we can collect behavioural data from you, and it matches closely the behaviour of other humans, you are a human. Otherwise you're not a human." Does anyone else get that feeling from the description of what Google is doing? I've tripped their "we think you are a bot" detection filter and been presented with a captcha countless times while using complex search queries and searching for relatively obscure things, a…

Why shouldn't us bots be able to search or participate in forums?

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#187

Post by Xorlev »

raverbashing wrote: post #124
ricg wrote: post #95

It's definitely not only relying on cursor movements. A simple $('iframe').contents().find('.recaptcha-checkbox-checkmark').click() proved that I'm not a robot, without me touching the mouse.

Are you logged into Google? If you have their cookies it's one indication you're not a robot.

I wonder if you used a Google account in good standing for a bot, at what point would they start to detect it was a bot? I imagine if you used it for more than a few CAPTCHAs daily you'd probably end up having to do additional validation.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#188

Post by _lce0 »

ChrisArchitect wrote: post #131
Nib wrote: post #92

Hmmmm. Nice move Google. But I also remember that a machine passed the Turing test. And I don't like the sound of these two news together. Not because I'm worried about you, but because I'm worried about the websites I run as a dev. Moreover, I'm not sure if most people know this, but reCaptcha was supposed to be converting ancient text to digital text[I read that once on quora, I'm not really sure if it's entirely t…

ha yeah that was definitely the original purpose/project of reCAPTCHA.... but I think shortly after the google purchase, the AI got so good at reading garbled ancient texts that G allowed it to move on to other things..like house numbers.

.. or human tracking?

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#189

Post by ifdefdebug »

1Hz wrote: post #103
ricg wrote: post #95

It's definitely not only relying on cursor movements. A simple $('iframe').contents().find('.recaptcha-checkbox-checkmark').click() proved that I'm not a robot, without me touching the mouse.

The cursor movement story seems to be a smokescreen to dilute the fact they're actually running an internet wide monitoring network, tracking users from site to site and building profiles on them.

I tested it a few times in their demo trying hard to to funny things with the mouse pointer. Still I was asked to type in some text all the time.

Then I logged into my gmail account and yes it worked.

So you're probably right about that smoke screen and it has nothing to do at all with mouse movement.

My fx browser deletes cookies at exit and my IP changes frequently and I think that's the true explanation for the outcome of my little test.

Post reply on HN