1080

Research Findings:

  • reCAPTCHA v2 is not effective in preventing bots and fraud, despite its intended purpose
  • reCAPTCHA v2 can be defeated by bots 70-100% of the time
  • reCAPTCHA v3, the latest version, is also vulnerable to attacks and has been beaten 97% of the time
  • reCAPTCHA interactions impose a significant cost on users, with an estimated 819 million hours of human time spent on reCAPTCHA over 13 years, which corresponds to at least $6.1 billion USD in wages
  • Google has potentially profited $888 billion from cookies [created by reCAPTCHA sessions] and $8.75–32.3 billion per each sale of their total labeled data set
  • Google should bear the cost of detecting bots, rather than shifting it to users

"The conclusion can be extended that the true purpose of reCAPTCHA v2 is a free image-labeling labor and tracking cookie farm for advertising and data profit masquerading as a security service," the paper declares.

In a statement provided to The Register after this story was filed, a Google spokesperson said: "reCAPTCHA user data is not used for any other purpose than to improve the reCAPTCHA service, which the terms of service make clear. Further, a majority of our user base have moved to reCAPTCHA v3, which improves fraud detection with invisible scoring. Even if a site were still on the previous generation of the product, reCAPTCHA v2 visual challenge images are all pre-labeled and user input plays no role in image labeling."

you are viewing a single comment's thread
view the rest of the comments
[-] someguy3@lemmy.world 271 points 2 years ago* (last edited 2 years ago)

I kinda figured. It was annoying to do one, but then they wanted you to do two or three and that's absurd. Whenever it comes up now, I usually just close out.

[-] Bezier@suppo.fi 82 points 2 years ago

they wanted you to do two or three and that's absurd

Yea how about 20

[-] LucidNightmare@lemm.ee 53 points 2 years ago

VPN? Google will just go in a loop with these things, so I just stopped using Google completely.

[-] Bezier@suppo.fi 12 points 2 years ago* (last edited 2 years ago)

No. But it's also not like I get 20 constantly, it was just the worst I've seen. Usually it's 2 to 5, I think.

I assume they're just collecting data on how many are users willing to do.

[-] LucidNightmare@lemm.ee 20 points 2 years ago

One time I did five in a row, because I use VPNs for everything, and realized after the 5th time that it would have been easier to just use bing so I do that first now. Google has turned into my last last resort, which is quite funny, because that’s where Bing used to be. Lmao

[-] ICastFist@programming.dev 10 points 2 years ago

Whenever I'm on a private window the captchas just keep on coming. Trying to reset your Steam password via the program will also trigger an infinite loop of captchas, you HAVE to use a browser.

[-] Dudewitbow@lemmy.zip 10 points 2 years ago

if you have to do that many, you either have some privacy setting on or on a flagged ip given from a VPN

[-] Landsharkgun@midwest.social 31 points 2 years ago

Well yah of course I do. Why the hell is that 'abnormal'?

[-] catloaf@lemm.ee 5 points 2 years ago

Most people don't, most bots do. You look more like a bot, so you get extra challenges.

[-] Dudewitbow@lemmy.zip 5 points 2 years ago

its abnormal to them because vpns are often also used by bad actors. your use is not abnormal but its a there are other people misusing it making it worse for everyone else.

[-] Landsharkgun@midwest.social 2 points 2 years ago

Wow, way to blame individuals who take basic precautions instead of the corporations who are blantly invading your privacy. Good job making the world a better place, bud.

[-] Dudewitbow@lemmy.zip 1 points 2 years ago

point where i blame the individuals, the blame is clearly on the bad actors (e.g bots)

[-] snooggums@midwest.social 6 points 2 years ago

Or google knows you will out up with it and want the most interaction it can get from you.

[-] crank0271@lemmy.world 1 points 2 years ago

Google's just lonely 🥺👉👈

[-] iiGxC@slrpnk.net 1 points 2 years ago
[-] sramder@lemmy.world 6 points 2 years ago

I tried to order some components on Digikey a few months ago and I’m still mentally scarred. Probably did a few hundred of those things over the course of 2 weeks.

[-] radivojevic@discuss.online 5 points 2 years ago

That’s because you’re shady.

[-] Bezier@suppo.fi 25 points 2 years ago

They knew I was committing crimes with my adblocker.

[-] msage@programming.dev 12 points 2 years ago

The worst kind - crimes against profit!

[-] radivojevic@discuss.online 3 points 2 years ago

Elon musk wants to know what the government is going to do about you not viewing ads on Xitter

[-] KingThrillgore@lemmy.ml 3 points 2 years ago

Not going to his shithole website.

[-] SpaceMan9000@lemmy.world 6 points 2 years ago

Had this when at uni, mostly due to the amount of requests coming from a single IP

[-] ArmoredThirteen@lemmy.ml 4 points 2 years ago

Cries in battlenet sign up process

[-] yum@lemmy.eco.br 3 points 2 years ago

The one reason I tried to create an account and never came back

[-] Kusimulkku@lemm.ee 2 points 2 years ago

STOP BEING SNEAKY MICHAEL

[-] Fisch@discuss.tchncs.de 25 points 2 years ago

Some captchas have also just gotten obvious AI training. "Click on the living being in this image", "Select every image of the same object as in this example image". And the images you have to select look obviously AI generated.

[-] cm0002@lemmy.world 15 points 2 years ago

Heh, I got one just the other day "Select the images containing structures built by people" lmao

[-] SkaveRat@discuss.tchncs.de 15 points 2 years ago

"click on all people not helping with the robot uprising"

[-] WildPalmTree@lemmy.world 2 points 2 years ago

Alas, I have but one up-vote. :~(

[-] aaaaace@lemmy.blahaj.zone 1 points 2 years ago

Those one answers incorrectly.

[-] unexposedhazard@discuss.tchncs.de 21 points 2 years ago

Im surprised that this is in the news right now. This has been acknowledged as fact for a decade or so.

[-] GhostTheToast@lemmy.world 5 points 2 years ago
[-] Petter1@lemm.ee 1 points 2 years ago

I still don’t get this one even after being linked to it so many times 😌🤣

[-] Tja@programming.dev 6 points 2 years ago

Someday you will, and you'll be one of the lucky 10.000 that day.

[-] Petter1@lemm.ee 2 points 2 years ago
[-] Croquette@sh.itjust.works 5 points 2 years ago

Things that are common knowledge for you is not common knowledge for everyone and vice versa.

Instead of making fun of people for not knowing things, you should take the opportunity to teach so that you can get these fun moments of discovery and learning.

[-] Petter1@lemm.ee 1 points 2 years ago

😮l made fun of people that did not know something?

[-] Croquette@sh.itjust.works 3 points 2 years ago

No, I explained what the comic is trying to convey.

Just answering your question.

[-] Petter1@lemm.ee 2 points 2 years ago
[-] unexposedhazard@discuss.tchncs.de 1 points 2 years ago

Lots of lucky ones i guess

[-] dinckelman@lemmy.world 12 points 2 years ago

At a certain point I did like 10 of them, and then ended up closing the page, cause it never let me in, all because I was on a vpn

[-] CosmoNova@lemmy.world 8 points 2 years ago

Funny thing is they stop asking if you do them really slowly. Almost as if to tell you, you‘re too inefficient to even be an unpaid intern or something. Anyway, if they annoy you, take your time.

this post was submitted on 24 Jul 2024
1080 points (98.4% liked)

Technology

81024 readers
546 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS