News for hackers. Stuff that matters.

A comment on Why can’t a bot tick the 'I'm not a robot' box?. Parent comment

Re:Why can’t a bot tick the 'I'm not a robot' box? by cortesoft on Wednesday February 13, 2019 @06:03PM (#19158013)
If you are using TOR, and not accepting cookies, they are going to have no way of knowing that you are the same user who just solved the CAPTCHA. Every request is going to appear to be from a new user.

If you do everything you can to prevent google from knowing who you are, don't be surprised when they behave like they don't know who you are.

[ Parent | on HN ]
Re:Why can’t a bot tick the 'I'm not a robot' box? by Dylan16807 on Wednesday February 13, 2019 @08:05PM (#19158777)
Tor Browser accepts session cookies. It won't have an established google identity, but it fully supports a temporary "solved the captcha" identity.
[ Parent | on HN ]
Re:Why can’t a bot tick the 'I'm not a robot' box? by cortesoft on Wednesday February 13, 2019 @11:27PM (#19159612)
> The problem immediately goes away if you let google track you

I took that to mean they were blocking cookies

[ Parent | on HN ]
Re:Why can’t a bot tick the 'I'm not a robot' box? by puzzle on Thursday February 14, 2019 @12:38AM (#19159854)
What prevents a botnet from sharing that same session cookie?
[ Parent | on HN ]
Re:Why can’t a bot tick the 'I'm not a robot' box? by Dylan16807 on Thursday February 14, 2019 @10:54AM (#19162801)
A botnet doesn't need Tor in the first place. And you can limit the use of a single captcha solution. It's not much different from the problem of a legitimate google account being borrowed by a bot.
[ Parent | on HN ]