News for hackers. Stuff that matters.

A comment on Why can’t a bot tick the 'I'm not a robot' box?. Parent comment

Re:Why can’t a bot tick the 'I'm not a robot' box? by Dylan16807 on Wednesday February 13, 2019 @08:05PM (#19158777)
Tor Browser accepts session cookies. It won't have an established google identity, but it fully supports a temporary "solved the captcha" identity.
[ Parent | on HN ]
Re:Why can’t a bot tick the 'I'm not a robot' box? by cortesoft on Wednesday February 13, 2019 @11:27PM (#19159612)
> The problem immediately goes away if you let google track you

I took that to mean they were blocking cookies

[ Parent | on HN ]
Re:Why can’t a bot tick the 'I'm not a robot' box? by puzzle on Thursday February 14, 2019 @12:38AM (#19159854)
What prevents a botnet from sharing that same session cookie?
[ Parent | on HN ]
Re:Why can’t a bot tick the 'I'm not a robot' box? by Dylan16807 on Thursday February 14, 2019 @10:54AM (#19162801)
A botnet doesn't need Tor in the first place. And you can limit the use of a single captcha solution. It's not much different from the problem of a legitimate google account being borrowed by a bot.
[ Parent | on HN ]