Why can’t a bot tick the 'I'm not a robot' box?

Re:Why can’t a bot tick the 'I'm not a robot' box? by byte1918 on Wednesday February 13, 2019 @02:54PM (#19156303)

I think you are partially wrong. Maybe Google is not doing this intentionally but it also doesn't happen just because traffic is coming out of a tor node. I am using ff with some of the recommended extensions from https://www.privacytools.io/ and I get to fill in traffic signs all the time. And yes I am logged into Google.

[ Parent | on HN ]

Re:Why can’t a bot tick the 'I'm not a robot' box? by morpheuskafka on Wednesday February 13, 2019 @03:56PM (#19156906)

I think what OP is talking about is Cloudflare not Google's decision. Google provides the CATCHPA API but Cloudflare decides to flag nearly all Tor traffic and make it go through the CATCHPA.

[ Parent | on HN ]

Re:Why can’t a bot tick the 'I'm not a robot' box? by eldridgea on Wednesday February 13, 2019 @05:36PM (#19157821)

In the case of Cloudflare specifically, they support Privacy Pass[0], an extension that allows solving one captcha to allow you through to multiple sites without de-anonymizing or reducing the security properties that tor provides.

[0] https://blog.cloudflare.com/cloudflare-supports-privacy-pass...

[ Parent | on HN ]

Re:Why can’t a bot tick the 'I'm not a robot' box? by jorvi on Wednesday February 13, 2019 @05:11PM (#19157603)

Cloudflare is a good actor, they offer the PrivacyPass extension that basically generates 30 auth tokens from one CAPTCHA challenge and then uses those until it needs new tokens. Sadly the overwhelming majority of sites doesn't use CAPTCHA through CloudFlare but directly through Google, rendering PrivacyPass moot.

[ Parent | on HN ]

Re:Why can’t a bot tick the 'I'm not a robot' box? by SahAssar on Wednesday February 13, 2019 @05:44PM (#19157858)

Cloudflare is not a good actor in this, they have shown that they do not care about encryption (allowing non-https backends while showing https to the end user) and embedding trackers in verification pages (the CAPTCHAs on random pages).

[ Parent | on HN ]

Re:Why can’t a bot tick the 'I'm not a robot' box? by jplayer01 on Thursday February 14, 2019 @04:40AM (#19160732)

Cloudflare is the scum of the internet. They've put a crazy amount of effort towards making wide swathes of the internet unusable for people trying to protect their identity and privacy. I wouldn't trust their implementation of Privacy Pass.

[ Parent | on HN ]

Re:Why can’t a bot tick the 'I'm not a robot' box? by jgrahamc on Thursday February 14, 2019 @05:08AM (#19160813)

Sigh. We changed this so long ago yet people repeat this over and over again. Do you use the Tor Browser? Please show me a site on Cloudflare which uses CAPTCHA on Tor.

[ Parent | on HN ]

Re:Why can’t a bot tick the 'I'm not a robot' box? by Legogris on Thursday February 14, 2019 @05:00PM (#19166485)

I don't know about TOR, but a couple of years ago we had a site on Cloudflare that had the CAPTCHA come up for visitors from mainland China - where the great firewall blocked the requests to Google. Chinese users were effectively locked out. We contacted Cloudflare about this and got dismissive replies.

[ Parent | on HN ]

Re:Why can’t a bot tick the 'I'm not a robot' box? by RidingPegasus on Wednesday February 13, 2019 @04:21PM (#19157142)

I ended up removing a chrome extension that randomises user-agents because of this. It dramatically cut down google captchas.

Another thing that sets it off is virtual machine usage, I can be logged into chrome and gmail on the same residential IP for hours but the moment I try to search google for a problem inside a VM it's a minute of slow loading captchas.

Have moved to bing instead, that sort of wasted productivity is a burden.

[ Parent | on HN ]