cross-posted from: https://lemmy.ml/post/47972724

i encountered this for the first time today while attempting to read something on archive.today.

i confirmed that decoding the qrcode using a computer and following the URL it contains is insufficient; the error it gave directed me here which is what the linked screenshot is of.

the old type of captcha remains available too, for now:

screenshot of text: Important: Mobile verification for Google Cloud Fraud Defense is an experimental challenge type in Preview. Visual and audio challenges are available as alternatives for users who can't complete mobile verification. To use them, click the Visual  or Audio  buttons.

screenshot of google support webpage with text: To complete the mobile verification, you must use a compatible mobile device. If verifying on iOS/iPadOS device with version 15.0-16.4, download the reCAPTCHA app in the App Store. After installation, return to the challenge to try again. If verifying on Android device with Google Play Services version older than 25.41.30, upgrade to the latest Google Play Services version. After upgrading, return to the challenge to try again. Scan to Verify You're Human. Use your phone's camera app to scan this QR code. This securely links your device. Mobile Verification. Verification will initialize the reCAPTCHA app on your device.

top 50 comments

sorted by: hot top controversial new old
[–] 232 points 4 months ago (24 children)
  1. People without a mobile device are fucked out of being able to pass a captcha

  2. As if this isn't a way for them to associate multiple sessions on multiple specific devices with one another, this is just another avenue for data collection, period. Hidden under the guise of "more secure."

  • source
  • hideshow 24 child comments
  • [–] 53 points 4 months ago (4 children)

    Captcha has been one of the greatest google acquisitions ever.

    They acquired it under the guise of improving OCR and have since morphed it into an AI data farm (how else is google lens gonna know what objects are what?) and now total insight into a users every single action from desktop to mobile, tying it all together into a surveillance nightmare.

    I can guess the permissions that the recaptcha app needs now. Probably something akin to root access with all datapoints and considerations you could think of.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 20 points 4 months ago*

    I used to always add one incorrect tile and skip one correct tile.(It would still pass)

    I thiught I was such a rebel lol

    Then I figured, they'd be stupid if they didn't show the same image to multiple people...

  • source
  • parent
  • load more comments (3 replies)
  • load more comments (6 replies)
    [–] 120 points 4 months ago (3 children)

    Looks like a very good way to shoo actual humans off of your website.

  • source
  • hideshow 3 child comments
  • [–] 86 points 4 months ago (1 child)

    Nice captcha. Would be a shame if someone intentionally injected malicious code that had users scan a QR code under the guise of security.

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 67 points 4 months ago (5 children)

    There's no way this is ADA compliant.

  • source
  • hideshow 5 child comments
  • [–] 67 points 4 months ago (13 children)

    Verifying you have a phone doesn't verify that you're human.

  • source
  • hideshow 13 child comments
  • load more comments (13 replies)
    [–] 61 points 4 months ago (3 children)

    I once saw fake captcha scam that reuired scaning QR code to infect device. It looks exactly like that.

  • source
  • hideshow 3 child comments
  • load more comments (3 replies)
    [–] 58 points 4 months ago (8 children)

    I know it has been said already but how stupid is it to teach users the pattern of randomly scanning QR codes. So ironic given that reCaptcha is for security in some sense.

  • source
  • hideshow 8 child comments
  • load more comments (2 replies)
    [–] 57 points 4 months ago (1 child)

    Without a google account there will be many sites I can't visit. I'll look at such sites the same way as I look at paywalled sites.

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 54 points 4 months ago (2 children)
    1. Hype up AI.

    2. Everyone starts scraping the internet to obtain training data for their AI.

    3. To block the scrapers, countless sites implement stricter bot detection tools.

    4. The owners of the bot detection tools now effectively hold all of the internet by its throat, deciding who can access what and extorting more and more data from you to verify you're human.

    Fucking genius.

  • source
  • hideshow 2 child comments
  • load more comments (2 replies)
    [–] 47 points 4 months ago (1 child)

    No malicious site would ever fake this kind of flow in order to get someone to scan a dangerous QR code. Nope, that would never happen.

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 45 points 4 months ago (1 child)

    One more reason to not use google anything

  • source
  • hideshow 1 child comment
  • [–] 42 points 4 months ago (7 children)

    Any website that chooses to use this service will simply not get my traffic. If enough people feel the same, those websites will lose clicks and eventually tell Google to pound sand.

    Imagine the utter hubris on these fuckers to think that people will get a google device just to access a website.

    Or to think that an average user sitting at home would run to another room to grab their phone so they can verify themselves on the desktop just to visit blackcougar.com

  • source
  • hideshow 7 child comments
  • [–] 21 points 4 months ago* (last edited 4 months ago) (2 children)

    They're using the fact that everyone else both already owns a Google or iOS device, and does everything on those devices, to punish desktop and alt mobile OS users.

    The fact that this is going on right as AluminumOS is down the pipes, and right as rigged parts prices threaten to kill desktops as an option to begin with makes this especially sus.

    The way things are going right now, I won't be surprised if we see a computing future where you're either on a Google or Apple-controlled device, or you're on a thin client tied to a cloud subscription, and you won't own your tech anymore.

    Bezos' 'Give up your PC and rent from our cloud' threat is sounding less and less like a threat and more and more likely to become reality.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (2 replies)
  • load more comments (4 replies)
    [–] 42 points 4 months ago (3 children)

    If you haven’t already divested from Google and its related services then now is the time.

  • source
  • hideshow 3 child comments
  • load more comments (3 replies)
    [–] 40 points 4 months ago (1 child)
    load more comments (1 reply)
    [–] 38 points 4 months ago* (5 children)

    That's it. JavaScript was a mistake. Time to go back to HTML only pages

  • source
  • hideshow 5 child comments
  • load more comments (2 replies)
    [–] 33 points 4 months ago (10 children)
    load more comments (10 replies)
    [–] 32 points 4 months ago
    [–] 30 points 4 months ago

    Fuck absolutely everything about this.

  • source
  • [–] 30 points 4 months ago (1 child)

    We are making side loading harder because scammers are using "these" tactics to install malware on your devices.

    It's totally fine when we use the same tactics to install malware on your device.

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 29 points 4 months ago

    LOL, fuck off. How about instead I move on to somewhere less hostile toward the user instead?

  • source
  • [–] 28 points 4 months ago (1 child)

    Oh boy! Another way to fingerprint your devices! Scammer are sleeping good tonight with these new verifications

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 27 points 4 months ago (9 children)

    Many humans don't have smart phones

  • source
  • hideshow 9 child comments
  • load more comments (9 replies)
    [–] 24 points 4 months ago
    [–] 24 points 4 months ago*

    How soon before reCAPTCHA-encumbered sites are blocked on desktops entirely unless you're on ChromeOS or the upcoming AluminumOS?

  • source
  • [–] 22 points 4 months ago (4 children)

    Is an android emulator able to bypass this? Just curious - I haven't started the degoogle process.

  • source
  • hideshow 4 child comments
  • [–] [S] 28 points 4 months ago (3 children)

    I would guess not, given the other recent news about degoogled Android devices also being unable to pass reCAPTCHA.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 21 points 4 months ago

    @cypherpunks the mere idea of requiring a device to use another is absurd. This should be illegal

  • source
  • [–] 18 points 4 months ago

    Just another reason to not use Google.

  • source
  • [+] 18 points 4 months ago* (last edited 1 month ago) (2 children)
    load more comments (2 replies)
    [–] 17 points 4 months ago

    A good way to force the user to use by Google controlled devices and to download Google services for more control by Google. Also a good way that the user show the middle finger to Google, using alternatives.

  • source
  • load more comments
    view more: next ›