75
Google reCAPTCHA new feature requires you to scan a QR code with your phone to verify that you are human (thelemmy.club)
submitted 4 months ago by to c/technology@hexbear.net
21 comments fedilink hide all child comments
 

https://cloud.google.com/blog/products/identity-security/introducing-google-cloud-fraud-defense-the-next-evolution-of-recaptcha/

https://archive.is/lJQfu

https://old.reddit.com/r/privacy/comments/1t5irqn/introducing_google_cloud_fraud_defense_the_next/

https://news.ycombinator.com/item?id=48039362

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 36 points 4 months ago* (last edited 4 months ago) (6 children)

This is not something that can be avoided by not using google. Many websites use the google recaptcha program at account registration to prevent bots from registering. Some ddos protection systems use this captcha system.

You may have seen the "click to verify that you are human" type button on websites. A simple version exists where you only click the button and that's it Some people think it works by some mouse tracking magic. My theory is that it uses cookies to verify you are logged in with your google account.

If you do not have a google account, you always get a complicated captcha which says like "click on all of the crosswalks", buses, bicycles, etc.

Yesterday I was visiting some website and an antibot protection gave me the scan-qr-code captcha. I refreshed the page a couple times and then it gave me one of the click-on-bicycles captchas instead.

correcting my post to not say cloudflare. it seems that cloudflare has their own captcha service.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 21 points 4 months ago (2 children)

    Yeah this is the end of the private web if fully implemented unless it prompts a mass move to cloudflare by websites and they decline to do the same. Many sites would never change though, they have a solution, it works, doesn't work for you or too privacy invasive? Lol they don't care.

    VPN? Doesn't matter, Google will see your real IP and all your info when you scan using your phone that they have full info on.

    Private browsing extensions? Don't matter, you scanned using your phone, they know exactly who you are now.

    Trying to spoof your location for some reason? Lol busted we see your phone.

    I am seething most of all at all the "lol we'll just use tor and VPNs, ID laws cannot be enforced, me a tough and smart pirate" types. Funny thing on the piracy front too... 97% of piracy sites including private trackers are behind some sort of captcha, most use cloudflare not Google thankfully but you have to wonder how long until they implement something similar. And the reason why is some actors including rivals and maybe media company bandits were DDOSing the crap out of all of them a few years back, to stay online they had to get behind a solution like that.

    Things like this and ID requirements which tech isn't fighting because AI made it impossible to sell ads because they can't pick out real humans have basically doomed the open anonymous web. It's going to be dead by 2030 at this rate. So really AI ruined the internet in multiple ways, first the slop and bots diluting real content then the crackdown and total removal of privacy/anonymity to fight to slop bots and of course paying to search or being coerced to use AI to sift through the slop. Really the ultimate capitalist move.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 4 months ago

    maybe media company bandits

    I believe the US government was doing some of this as part of protecting their national interests and trying to provoke site owners into finding solutions that would lead to de-anonymisation errors.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 4 months ago

    torrents, if someone lights fire under their asses, can transfer to internal advertisement by peers of available links (as verified by consistency of hashes among peers or whatever harebrained scheme), sites are not long for this world, almost definitely, in more paranoid fantasy they can switch to non-ip based external device, like meshtastics. what i'm saying that vpn helps obfuscate your traffic as p2p as legit download for isp, no more no less, the rest of infra will have to be moved tho.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 9 points 4 months ago (1 child)

    If you do not have a google account, you always get a complicated captcha which says like "click on all of the crosswalks", buses, bicycles, etc.

    Not true, I have never had a google account and clear all cookies on browser close but nowadays I get the checkboxes more often than not.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •