Actually the check is a combination of serverside and client side. The server generates a random binary with a predictable output. The client then executes the binary and verifies its output with the server. It's a very clever trick and nearly impossible to spoof.