Re:Uncaptcha2: Defeat ReCaptcha with Google Speech2Text
by alfongj on Saturday January 05, 2019 @12:58PM
(#18833066)
From what I can read on the twit and GitHub, the researcher hasn't proven this works at scale.
The point of recaptcha is blocking "captcha farms" or automated bots from abusively creating accounts, buying tickets, etc.
The author hasn't demonstrated that this attack is effective in those scenarios. The only thing he has shown is a very convoluted way for a human to solve a recaptcha (harder for 99.9% of humans than the standard recaptcha experience)
That would explain why Google didn't care about them publishing this.
The point of recaptcha is blocking "captcha farms" or automated bots from abusively creating accounts, buying tickets, etc.
The author hasn't demonstrated that this attack is effective in those scenarios. The only thing he has shown is a very convoluted way for a human to solve a recaptcha (harder for 99.9% of humans than the standard recaptcha experience)
That would explain why Google didn't care about them publishing this.