undefined | Better HN

0 pointswoodrowbarlow6y ago0 comments

there are updates coming that will make it much more tied to your google account. i fear that it will mean anybody not currently logged in is assumed to be a robot. (even more so than now, i mean.)

0 comments

darkpuma6y ago

ReCAPTCHAv3. It will differ from ReCAPTCHAv2 in one important respect: it will no longer ask you any questions, meaning it will no longer give you the opportunity to appeal it's snap judgement of you.

https://developers.google.com/recaptcha/docs/v3

philpem6y ago

> "reCAPTCHA v3 will never interrupt your users, so you can run it whenever you like without affecting conversion. reCAPTCHA works best when it has the most context about interactions with your site, which comes from seeing both legitimate and abusive behavior. For this reason, we recommend including reCAPTCHA verification on forms or actions as well as in the background of pages for analytics."

Just what the world needs, another tracking script...

bduerst6y ago

According to the recent Planet Money podcast on Captcha, the upcoming changes will only use the signal of whether or not you have an account, and not any account-based data, since it will be domain based on the website or something.

Also, they're doing away with the questionnaire. It works by using a scoring system or something similar since it loads on the pages leading up to form fills.

Edit: Source for you disbelievers - https://developers.google.com/recaptcha/docs/v3

>reCAPTCHA v3 returns a score for each request without user friction. The score is based on interactions with your site and enables you to take an appropriate action for your site.

woodrowbarlowOP6y ago

> It just "works" by default.

right. until it doesn't, like it wouldn't for someone who actively avoids feeding their personal information to the goog. and it is sounding an awful lot like the fail case is full denial of service, without any option for the user to prove themselves.

forgottenpass6y ago

>the upcoming changes will only use the signal of whether or not you have an account, and not any account-based data

Recaptcha doesn't care. But totally unrelated, it just accidentally worked out to be awfully convenient for Google's other surveillance products embedded on the same sites, which do care quite a bit about how long and how often they can follow me with a single unique identifier.

pmlnr6y ago

You still believe PR fairytales?

sdinsn6y ago

And the alternative is believing something else with no evidence. Is that better?

j / k navigate · click thread line to collapse