TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Google's new CAPTCHA security login raises 'legitimate privacy concerns'

109 pointsby r0h1nabout 10 years ago

13 comments

rdlabout 10 years ago
Does anyone have good alternatives to old&#x2F;new ReCAPTCHA? I&#x27;ve been scratching the surface of academic research in the area, and it&#x27;s all kind of messy.<p>(It&#x27;s no great secret that CloudFlare would love to switch away from ReCAPTCHA, for a whole variety of reasons. It&#x27;s one of the things Tor users complain about the most, but it&#x27;s an issue for a lot more users than that. We&#x27;re doing a lot of stuff to reduce reliance on CAPTCHAs overall throughout 2015, but we still need a good one for some checks.)<p>I wonder if some kind of prize (anti-Turing prize?) would help. There&#x27;s the core algorithm&#x2F;approach question, as well as the infrastructure and deployment model question. I&#x27;m a lot more comfortable answering the latter; the former is a black art mixture of science and art.
评论 #9100007 未加载
评论 #9099692 未加载
评论 #9104103 未加载
评论 #9101573 未加载
评论 #9101702 未加载
评论 #9101555 未加载
评论 #9101002 未加载
pilifabout 10 years ago
So if google is grabbing all your profile data via the traditional reCAPTCHA but also makes you fill out a form, then it&#x27;s all ok. But once it becomes obvious that they are collecting the data and they are using (the already collected) data to make it so you don&#x27;t have to type in the text on the picture, <i>then</i> it&#x27;s a privacy concern.<p>Or do you honestly believe they bought and continued to operate the old reCAPTCHA out of the goodness of their hearts, never collecting all that data that everybody is upset about now?
评论 #9099868 未加载
评论 #9099695 未加载
评论 #9100492 未加载
评论 #9099702 未加载
评论 #9099933 未加载
DanBCabout 10 years ago
This sounds pike Google could be violating EU laws about data protection. We&#x27;ve seen that the EU is happy to enforce stupid laws (cookie notification; right to be forgotten) so they need to be a bit careful. They at least need a robust rebuttal to researched concerns.
LeoPantheraabout 10 years ago
I&#x27;ve been presented with this new captcha about a dozen times, and &quot;failed&quot; it every single time, whereupon it falls back to the traditional squiggly text.<p>I run Ghostery, so perhaps passing it relies on possessing some tracking cookies? If so, I&#x27;m happy to continue failing it.
评论 #9099755 未加载
评论 #9099585 未加载
whizzkidabout 10 years ago
Little bit off topic but, if you use only &lt;tab&gt; to go to checkbox and press space to select it, it brings up the good old &quot;type the text in the image&quot; verification (distorted text).<p>So it thought I was a robot and fallback is to use the old captcha. Well, not sure if this new captcha solves the problem it was intended to do so. Am i missing something?<p>This is quoted from their blog post about recaptcha --&gt;<p>&quot;However, our research recently showed that today’s Artificial Intelligence technology can solve even the most difficult variant of distorted text at 99.8% accuracy.&quot;<p>Here you can test it by yourself --&gt; <a href="https://www.google.com/recaptcha/api2/demo" rel="nofollow">https:&#x2F;&#x2F;www.google.com&#x2F;recaptcha&#x2F;api2&#x2F;demo</a>
评论 #9099685 未加载
vlunkrabout 10 years ago
I assumed this was how it worked. Tracking mouse&#x2F;keyboard seemed a little phony, and google is hardly a stranger to tracking personal information. It really is a bummer that there aren&#x27;t many great alternatives.
joshfraserabout 10 years ago
I can&#x27;t imagine there are many sites using this that aren&#x27;t already using Google Analytics, which is already deeply integrated with their ad platform and knows exactly who you are using cookies.
pearjuiceabout 10 years ago
Friendly reminder that every request to any Google associated server comes at the price of having your privacy invaded. Yes, this means Google Search but also GMail, Android, reCAPTCHA, Maps (any website displaying a Google Map), Google fonts (any website using Google fonts), Google CDN (any website using Google CDN), G+ (any website using an integration) et cetera.<p>In fact, completing this list with ALL Google its tentacles will probably break the character limit on HN. On a very few exceptions, Google its scooping eye is there to learn more about you.
评论 #9102283 未加载
andridkabout 10 years ago
I can&#x27;t understand why anyone is surprised. Anything you load from Google&#x27;s servers is used to gain more insight into your online habits.<p>It&#x27;s their core business. To learn as much as possible about people online to be able to show them the most relevant ads.
hellbannerabout 10 years ago
Forgive my ignorance, is there a way I can use cookies for authentication tracking only on websites while blocking access to screen-size, CSS etc?
mavhcabout 10 years ago
I&#x27;m confused as to why people would care. It&#x27;s easy to block, and if so you have to do a harder test. No one said wanting more privacy wasn&#x27;t hard work.<p>For the 99% of people who don&#x27;t care, it&#x27;s a great improvement.<p>And if someone wants to write a better system, who&#x27;s stopping them?
评论 #9100131 未加载
评论 #9099940 未加载
homakovabout 10 years ago
So what? Kind of useless article, nothing new.
blueskin_about 10 years ago
It&#x27;s google. By this point, if anyone is really surprised they hate privacy, they have clearly been living without any internet or newspaper access for the last 10 years.