Live data from Hacker News

Google broke reCAPTCHA for de-googled Android users

reclaimthenet.org

261–270 of 618 posts

Re: Google broke reCAPTCHA for de-googled Android users

#261

Earlier quoted context omitted.

My setup is similar and nearly 100% self-hosted, including email, files, AI. If something does not work on Graphene, I will do without it. I also have a Google profile, mostly for testing purposes.

How have you managed to accomplish self-hosted email? I tried similar in 2022 and found it damn near impossible without business static IP or a cloud provider.

You can't do it reliably without a static IP in a non residential subnet that lets you set reverse dns. If you have a static residential IP and they don't filter inbound SMTP you can make it work with a smarthost/relay like mailgun. Its not the insurmountable obstacle everyone makes it out to be, but its not going to be free unless you already have an IP that meets the criteria.

If you don't have a static IP you need will want to think about a MX relay service too ~ although mail is surprisingly tolerant of offline MX hosts if you can wait a little bit for your mail.

Re: Google broke reCAPTCHA for de-googled Android users

#263

archive.is just asked me for a QRcode scan, I'm so ashame of that crap (it's behind Cloudflare) , forcing website visitors to KYC? Are you guys insane!? the web is ruined if you push for this, this is millions of websites that will suddenly force KYC? What...the...f https://ibb.co/X9Q6Y84 By KYC, obviously it's because there is very few non-criminal ways to have a SIM without KYC and get a Google account for Playstor…

The water is already boiling and the frog can't get out anymore.

Re: Google broke reCAPTCHA for de-googled Android users

#265

Earlier quoted context omitted.

With the new reCAPTCHA this is going to happen because most human visitors will actually be unable to pass the CAPTCHA. It will be interesting to see whether this makes websites ditch reCAPTCHA or whether they literally just don't care about having customers, an attitude that seems to be getting more and more common every day.

I have been unable to give my money to Home Depot, REI and a growing list of online retailers because they use Akamai EdgeSuite, which just assumes I am a bot and 403s on protected API calls. This happens consistently on any IP and any browser on my Linux desktop/laptop.

It sure makes debugging headers a pain. curl -sLIXGET https://… never mind, that won’t work, _fires up browser yet again_

Re: Google broke reCAPTCHA for de-googled Android users

#266
post #24

Earlier quoted context omitted.

The Government reviewed the Google situation on behalf of you, and on behalf of the Government, and said “data, so piss off”: https://abcnews.com/Technology/google-hit-antitrust-lawsuit-... https://macdailynews.com/2026/02/04/u-s-files-appeal-in-goog...

If the masses can somehow point the absolute loose-cannon that is the current President at Google, things might actually change.

In August 2019, Trump tweeted that Google had “manipulated” millions of votes toward Clinton in 2016 and said the company “should be sued.”

Turns out that Presidents, once elected, largely do what Continuity of Government, and business interests, ask for.

Re: Google broke reCAPTCHA for de-googled Android users

#267

Given the way Google is going I'm not sure if my next phone will be Android. I am fully aware that I am probably in the minority here. For me the trust is entirely gone.

Motorola + GrapheneOS next year could be an alternative. So far they've been relatively insulated from the changes that have been coming down from Google.

https://motorolanews.com/motorola-three-new-b2b-solutions-at...

Re: Google broke reCAPTCHA for de-googled Android users

#269

My understanding is that this new reCAPTCHA is basically just remote attestation. Remote attestation doesn't use blind signatures (as that would be 'farmable') so tying the device to the 'attestee' is technically possible with collusion of Google servers: EK (static burned-in private key) -> AIK (ephemeral identity key in secure enclave signed by a Google server) -> attestation (signed by AIK). As you can see if the…

Stop visiting sites and using services that use reCAPTCHA. Problem solved.

HN uses reCAPTCHA under certain conditions

Re: Google broke reCAPTCHA for de-googled Android users

#270
post #172

It's a move to block competitor AI agents while securing access for your own, classic ladder kick. The market for autonomous agents providing services and doing online work will be gigantic so, unless you want your own bots locked out from ie properties guarded by Amazon, CloudFlare, Microsoft etc., you will need a bargaining chip.

As someone that uses AI agents, this makes me want to install a browser plugin for "public windows" that just archives everything I see, and then farms out clicks of content that are missing from those sites. The result of this would be to upload it all to a bot-friendly alternative to archive.org.

That exists! Check out Hoardy Web. https://oxij.org/software/hoardy-web/

Its whole point is undetectable archiving because it just saves what your browser already sees.

Post reply on HN