Re:Google’s new reCAPTCHA has a dark side
by SquareWheel on Thursday June 27, 2019 @11:49AM
(#20295495)
reCaptcha isn't able to read your non-Google cookies or history, so most of that isn't being considered.
[ Parent
| on HN ]
https://codelabs.developers.google.com/codelabs/reCAPTCHA/in...
Yeah, no. It certainly can read non-google cookies on the page (not httpOnly cookies, though).
Re:Google’s new reCAPTCHA has a dark side
by SquareWheel on Thursday June 27, 2019 @04:23PM
(#20298325)
I'm not sure what the link is meant to show, but "cookies on the page" is very different than the years worth of user history and cookies that GP mentioned.
Re:Google’s new reCAPTCHA has a dark side
by ceejayoz on Thursday June 27, 2019 @11:51AM
(#20295516)
I was under the impression sites using Google Analytics were included as a reCaptcha signal.
Re:Google’s new reCAPTCHA has a dark side
by SquareWheel on Thursday June 27, 2019 @12:04PM
(#20295672)
The signals aren't documented (for obvious reasons), but I'd be surprised if Google Analytics were a signal. These things are usually kept separate, and Analytics is a lot less user-specific under GDPR as the anonymizeIP flag is now very common.
That said, I've no evidence one way or the other!
My understanding is that it comes down to information they can read about your browser (does this look like a bot environment?), and heuristically how the user has behaved since the JS has been loaded (mouse movements, time between actions, etc).