Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA” • Hacker News Board

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#71

Post by asd » Wed, Dec 03, 2014, 3:59 PM UTC

whyNotBoth wrote: post #13

Oh, so just program bots to provide a mouse movement toward a form element along a distorted path, and always trigger them through the UI rather than as events. Got it!

Exactly what I was thinking. Even if Google got smart enough to detect that the distorted path speed was too mechanical, you could record 100's of macros of yourself moving the mouse towards a target. When it's time to submit a captcha, select one of the macros at random and play it back with some slight randomness added. Voilà!

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#72

Post by impostervt » Wed, Dec 03, 2014, 3:59 PM UTC

amelius wrote: post #11

I just hope it also works for pen-tablets, where the "pointer" can suddenly jump from one location to the next when the pen comes near the surface of the tablet.

Using my iPhone, it thought I was a bot.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#73

Post by bpicolo » Wed, Dec 03, 2014, 4:00 PM UTC

spacefight wrote: post #65

rbdn wrote: post #48

Earlier quoted context omitted.

Google collects all your data and applies machine learning to predict a probability value that you are human. If it is below a certain threshold you have to enter a CAPTCHA.

The question was more about on how the new captcha works, I guess.

That's the question he answered. It's machine learning based on browser variables and mouse movements.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#74

Post by towelguy » Wed, Dec 03, 2014, 4:00 PM UTC

[deleted] wrote: post #29

dj-wonk wrote: post #23

It seems plausible that as more sites adopt this kind of technology, automated web access (e.g. scraping) the web will become harder -- for whatever purpose, good or ill. This has long been an "arms race" between hiding and detection. I can hope that reasonable uses of automation still remain feasible.

[deleted]

It was good enough for 4chan, a site that used to recieve countless spam from probably dozens of botters before they got recaptcha. And the botters probably kept trying to spam afterwards without much success.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#75

Post by jackalope » Wed, Dec 03, 2014, 4:00 PM UTC

I always assumed Google's use of reCAPTCHA was to augment the OCR used to digitize Google Books, particularly in results the software couldn't confidently match to a word. Is this true? It's interesting that it's still the fallback for the new method.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#76

Post by slig » Wed, Dec 03, 2014, 4:01 PM UTC

tokenizerrr wrote: post #62

ins0 wrote: post #34

don't know if this works only for me but here is a live example - https://www.google.com/cbk?cb_client=maps_sv.tactile&output=...

It gives me the new version as well, but it seems google is convinced that I am a bot. Getting a regular captcha after clicking the button and I have to say that this is a lot worse of an experience than regular old captchas. Now I have to wait for a few seconds after clicking a button, then still solve a captcha. Hopefully it gets better with time.

Do you happen to browse incognito or with 3rd-party cookies blocked?

Looks like the new version needs an active and valid google cookie in order to tell if you're a robot or not.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#77

Post by Someone1234 » Wed, Dec 03, 2014, 4:02 PM UTC

timtadh wrote: post #22

Someone1234 wrote: post #3

I recently added recaptcha to a site and got this version. From an implementation standpoint it is utterly painless. The client side is copy/paste from Google's site and the PHP/server side was this: $recapchaURL = 'https://www.google.com/recaptcha/api/siteverify?secret=600SZZ0ZZZZZIZi-ZZ0ZEHZW1000Z_0ZZZ00QZZ&response=' . request_var('g-recaptcha-response','') .'&remoteip=' . $request->server('REMOTE_ADDR'); $recapch…

Is that your actual secret? you might not want to reveal that/you should get a new one.

It is not. I kept the length and style the same to give a better example, but replaced most of the characters with 0s and Zs.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#78

Post by TazeTSchnitzel » Wed, Dec 03, 2014, 4:02 PM UTC

asd wrote: post #71

whyNotBoth wrote: post #13

Oh, so just program bots to provide a mouse movement toward a form element along a distorted path, and always trigger them through the UI rather than as events. Got it!

Exactly what I was thinking. Even if Google got smart enough to detect that the distorted path speed was too mechanical, you could record 100's of macros of yourself moving the mouse towards a target. When it's time to submit a captcha, select one of the macros at random and play it back with some slight randomness added. Voilà!

Mouse movement is not the only factor Google is using.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#79

Post by towelguy » Wed, Dec 03, 2014, 4:03 PM UTC

Do they even need the checkbox anymore? They could track mouse movement, keypresses, history or whatever else they are tracking without showing any kind of GUI at all.

Re: Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”

#80

Post by [deleted] » Wed, Dec 03, 2014, 4:03 PM UTC

towelguy wrote: post #74

[deleted] wrote: post #29

Earlier quoted context omitted.

[deleted]

It was good enough for 4chan, a site that used to recieve countless spam from probably dozens of botters before they got recaptcha. And the botters probably kept trying to spam afterwards without much success.

[deleted]