Scan to Verify You're Human

Comments

• gressen@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

  Name the offending website please.

  source

  • lemmyng@piefed.ca ⁨2⁩ ⁨weeks⁩ ago

    Google. It’s their recaptcha service doing that. The QR code validation also gets rejected if you’re using a privacy oriented mobile OS like Graphene.

    source

    • markz@suppo.fi ⁨2⁩ ⁨weeks⁩ ago

      At the cost of conditioning people into following orders from random qr codes

      source
    • dieTasse@feddit.org ⁨2⁩ ⁨weeks⁩ ago

      you mean it was google.com? Or on which website was this recaptcha?

      source

      • -> View More Comments
  • sidebro@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

    archive.is in this case

    source

    • 9bananas@feddit.org ⁨2⁩ ⁨weeks⁩ ago

      are they fucking serious with this shit?

      what the hell…

      source

      • -> View More Comments
  • wander1236@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

    It looks like a Cloudflare interstitial. I also don’t think sites get to choose which challenge types show up in reCAPTCHA, so this is on Google.

    source

    • fizzle@quokk.au ⁨2⁩ ⁨weeks⁩ ago

      Isn’t the site choosing to use recaptcha?

      source

      • -> View More Comments
• laundry861@fedinsfw.app ⁨2⁩ ⁨weeks⁩ ago

  None of these are about identifying if you’re human, they’re about identifying which human you are.

  source

  • WizardofFrobozz@lemmy.ca ⁨2⁩ ⁨weeks⁩ ago

    How does that work

    source

    • laundry861@fedinsfw.app ⁨2⁩ ⁨weeks⁩ ago

      They combine your browser fingerprint (what extensions you have installed, version, etc), your IP address, and how you move your mouse, how fast you click, etc. It’s surprisingly accurate.

      source

      • -> View More Comments
  • wisdomsuccubus@thelemmy.club ⁨2⁩ ⁨weeks⁩ ago

    Really

    source
• EisFrei@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  Not to excuse Google’s practices, but you can select the eye icon to continue training an AI to detect buses and bikes.

  source

  • sidebro@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

    Oh, thanks for letting me know. I missed that one, as it isn’t all that clear that’s what it does.

    source

    • feannag@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

      I also use an extension called buster that automatically solves the audio accessible captcha challenge.

      source

      • -> View More Comments
• DrunkAnRoot@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

  I tried watching some yt in librewolf made me do 5 captchas an i had to switch vpn location so fuck google

  source

  • W3dd1e@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

    I have degoogled but YT is the only thing I’m stuck with. The monopoly is too much to overcome.

    source

    • ohshit604@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

      Freetube + Invidious

      source

      • -> View More Comments
    • CeeBee_Eh@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      If you’re on mobile, check out the Greyjay app. It’s promoted (sponsored?) by Louise Rossman

      source

      • -> View More Comments
    • A_Random_Idiot@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      Creating an infrastructure that could potentially ingest terrabytes of data per second, and then processing it into multiple resolutions, is a massive ask.

      Especially for a new site that might not ever get picked up by users, much less creators.

      I think the only people that have a hope in hell of having a success at starting a youtube competitor are the owners of the big porn sites, since they are in a similar, if much smaller than youtube business with regards to infrastructure demands and processing needs. . So they have the institutional knowledge and infrastructural inertia to get started easier than anyone else on the planet. assuming they want to do a SFW video site, which they may not want to do.

      source

      • -> View More Comments
    • NewNewAugustEast@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

      I just quit watching it a few months ago. No big deal, it’s all crap and mindless shit anyways.

      source

      • -> View More Comments
    • LordCrom@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      Use a VPN in Albania. No signin, no ads, its great

      source
  • plutopos@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

    I tried using Konqueror, but Cloudflare websites (like WineHQ) would verification loop me

    source
  • trackball_fetish@lemmy.wtf ⁨2⁩ ⁨weeks⁩ ago

    Doesn’t yt-dlp still work? Could go that route, then just delete the video if you don’t want it afterwards

    source
• psx_crab@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

  Man i will nope out if this website so quick.

  source
• Redjard@reddthat.com ⁨2⁩ ⁨weeks⁩ ago

  Beware it’d be quite easy to decensor that qr from the image.

  source
• 45o3b@lemmy.ml ⁨2⁩ ⁨weeks⁩ ago

  I’ll get hate for referencing a solution that involves AI, but this looks promising: github.com/Captcha-Sonic/CaptchaSonic-Extension

  source

  • AssaultPepper@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

    This is a good use of AI.

    source

    • muhyb@programming.dev ⁨2⁩ ⁨weeks⁩ ago

      Eye for an eye

      source
  • lemmyman@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    Lmao so the captchas don’t even do anything anyway. Except harass us.

    source

    • 9bananas@feddit.org ⁨2⁩ ⁨weeks⁩ ago

      that’s been true for years now:

      captchas have been a mild inconvenience for bots for like 10 years.

      they are, like so many things, pure security theater…not actual security.

      source

      • -> View More Comments
• MonkderVierte@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

  Recaptcha users will experience some visitor losses.

  source
• Frenchgeek@lemmy.ml ⁨2⁩ ⁨weeks⁩ ago

  Image

  source

  • sidebro@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

    Such a gem of a movie

    source
• winkledinkle@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

  First time I saw that, I immediately suspected a malware attack.

  If it’s not, it soon will be.

  source
• MrSoup@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

  I see phishing opportunity here

  source
• Hubi@feddit.org ⁨2⁩ ⁨weeks⁩ ago

  Not justifying this by any means but you can just click on the eye icon at the bottom to get the regular captcha.

  source

  • snooggums@piefed.world ⁨2⁩ ⁨weeks⁩ ago

    Vague option is vague.

    source
  • Peter_Arbeitslos@feddit.org ⁨2⁩ ⁨weeks⁩ ago

    Fröhlichen Kuchentag!

    source

    • Hubi@feddit.org ⁨2⁩ ⁨weeks⁩ ago

      Danke, dir auch!

      source
• Maxxie@piefed.blahaj.zone ⁨2⁩ ⁨weeks⁩ ago

  I dont understand how and why is the phone involved in this check. I assume its a link to a website that authenticates you (probably google), but why not open it in the browser its alread at? Like what recaptcha was already doing for the past decade?

  Im so confused

  source

  • IphtashuFitz@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    A few years ago I was given a technical deep dive into Akamai’s bot detection systems. One area they were quite focused on were bots impersonating mobile devices, and in particular mobile apps. It’s commonplace for attackers to try to mimic the behavior of mobile apps because it often provides more direct access to the data they’re looking for than trying to scrape websites.

    To counter this threat Akamai developed a library for their customers to incorporate into their apps. This library collects a bunch of haptic data from the mobile device, such as the tilt sensors, accelerometers, finger taps/swipes on the screen, and other available data. It then encrypts it and sends it along to Akamai along with the data the app sends. Akamai then analyzes that haptic data and uses it as part of their bot detection analysis.

    It is VERY difficult for a computer to mimic the truly random way a mobile device moves in space, or the way your fingers tap/swipe on a screen. If you were asked to draw a straight line from the upper left corner to the bottom right corner of your smartphone, not only would it not be perfectly straight but it would be quite fluid in its randomness. Writing a computer program to simulate that would be very tough. You’re far more likely to get lots of short straight lines with jagged angles than something that looks like a human drew it. And computer algorithms can quickly analyze this sort of data and return a confidence score indicating if it appears to have been created artificially or not.

    So my guess is that when that QR code is scanned it will launch a Google app that will collect some similar haptic data and send it off to Google along with a unique id for that captcha. Google will then quickly analyze that haptic data to determine if you’re a bot or not.

    source

    • Maxxie@piefed.blahaj.zone ⁨2⁩ ⁨weeks⁩ ago

      Ohh, I’ve never thought about phone authentication being superior due the amount of sensors it has. Thanks for explaining, it makes a lot of sense (and I hate it)

      source
  • ambitiousslab@feddit.uk ⁨2⁩ ⁨weeks⁩ ago

    I think they can use remote attestation on the mobile device to prove that it’s a physical device. They do that through Google Play Services or whatever the equivalent is on iOS. So, for instance, scanning the QR code on a custom ROM like lineage or GrapheneOS doesn’t work.

    source

    • snooggums@piefed.world ⁨2⁩ ⁨weeks⁩ ago

      They want to force interaction with your phone so they can identify who you are.

      source

      • -> View More Comments
• Luisp@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

  Scan to get hacked

  source

  • Phantaloons@piefed.zip ⁨2⁩ ⁨weeks⁩ ago

    Google’s already on their phone. Consumers gladly pay for the priviledge of malware.

    source
• TryingToBeGood@reddthat.com ⁨2⁩ ⁨weeks⁩ ago

  Wow. No.

  source
• Stopwatch1986@lemmy.ml ⁨2⁩ ⁨weeks⁩ ago

  Doesn’t clicking on the headphones switch to an audio test like with regular captcha? That’s what I do and it works first time instead of getting an endless number of images when I use VPN. The words you enter don’t even have to be 100% correct.

  source
• NeatNit@discuss.tchncs.de ⁨2⁩ ⁨weeks⁩ ago

  … what?

  source
• chunes@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  I don’t have a mobile device. Guess I’m not human anymore.

  source