News for hackers. Stuff that matters.
Re:Google’s new reCAPTCHA has a dark side by oil25 on Thursday June 27, 2019 @12:02PM (#20295651)
reCAPTCHA on VPN is difficult, but on the Tor network, they are downright impossible. I've never been able to get past it, even after a few dozen painful attempts. That means Google services are entirely off-limits over Tor, even Search, which is a disgrace.
Re:Google’s new reCAPTCHA has a dark side by beefhash on Thursday June 27, 2019 @12:38PM (#20296065)
> That means Google services are entirely off-limits over Tor

If only it was Google services alone. CloudFlare loves serving up a ReCAPTCHA for Tor users before they can even passively read site contents. That hugely expands the damage done.

Re:Google’s new reCAPTCHA has a dark side by deftnerd on Thursday June 27, 2019 @12:46PM (#20296135)
Install the PrivacyPass Firefox or Chrome extension. It was developed by Cloudflare, Firefox, and Tor in partnership. It has you answer a ReCAPTCHA and using some crypto magic, generate a bunch of CAPTCHA bypass tokens that can't be traced to your specific computer.

https://support.cloudflare.com/hc/en-us/articles/11500199265...

https://blog.cloudflare.com/cloudflare-supports-privacy-pass...

https://blog.cloudflare.com/privacy-pass-the-math/

https://github.com/privacypass/challenge-bypass-extension

Re:Google’s new reCAPTCHA has a dark side by johndough on Thursday June 27, 2019 @02:09PM (#20296981)
Does not work with Tor.

The plugin requires "privacy passes". Those passes can be obtained by solving captchas, but when trying to do so, one is greeted with this message about being blocked: https://i.imgur.com/qXJfl6J.png

Re:Google’s new reCAPTCHA has a dark side by piyush_soni on Friday June 28, 2019 @03:39AM (#20302250)
Slightly off-topic, but the users who use Tor regularly, how do you do that? For me, it has been terribly slow every time I tried to use it.
Re:Google’s new reCAPTCHA has a dark side by ronsor on Saturday June 29, 2019 @09:55AM (#20312586)
On Tor I get roughly 700 KB/s speeds, which isn't terrible for me
Re:Google’s new reCAPTCHA has a dark side by piyush_soni on Sunday June 30, 2019 @01:52AM (#20316598)
And what is that compared to any regular browser?
Re:Google’s new reCAPTCHA has a dark side by beardog on Thursday June 27, 2019 @02:47PM (#20297320)
Try rebuilding your Tor circuit when this happens.

https://tb-manual.torproject.org/managing-identities/

Re:Google’s new reCAPTCHA has a dark side by Sirened on Thursday June 27, 2019 @07:10PM (#20299835)
This sort of breaks tor though, doesn't it? Tor works really well if you stay on the same circuit for a while since it reduces the chances you have a compromised circuit. If you start getting recaptcha to block every exit node except those you control, you essentially have amplified your effective strength on the tor network.
Re:Google’s new reCAPTCHA has a dark side by AlexCoventry on Thursday July 04, 2019 @02:33AM (#20352092)
Tor is already broken for an adversary with that capability.
Re:Google’s new reCAPTCHA has a dark side by redwards510 on Thursday June 27, 2019 @02:19PM (#20297077)
This sounds pretty good, but you still have to pass a captcha in order to get a pass, and sometimes that is impossible (or at least I just give up because I lost interest after 20 puzzles).

If it was developed in conjunction with Tor, how come it doesn't come bundled with the Tor browser or Tails?

Re:Google’s new reCAPTCHA has a dark side by baq on Thursday June 27, 2019 @12:43PM (#20296101)
they have a patent on giving out unbeatable challenges when the computer thinks it's dealing with a 'malicious agent'.

https://patents.google.com/patent/US9407661B2/en

Re:Google’s new reCAPTCHA has a dark side by Liquix on Thursday June 27, 2019 @12:50PM (#20296162)
So if you're running the wrong combination of addons/VPNs/browser you're denied access to half the web because Big G says so? And now they're aggressively pushing sysadmins to install silent data harvesting scripts on every page of their sites? WTF more will it take to get people interested in breaking up these monopolies?
Re:Google’s new reCAPTCHA has a dark side by redwards510 on Thursday June 27, 2019 @02:21PM (#20297091)
Not denied access, they just keep serving up challenges to you until you give up, WAY worse than saying "You appear to be a bot, sorry".
Re:Google’s new reCAPTCHA has a dark side by pnw_hazor on Thursday June 27, 2019 @12:59PM (#20296272)
I hear Google is a fun place to work and that they pay well.

Until software developers care -- nothing will happen.

Re:Google’s new reCAPTCHA has a dark side by Liquix on Thursday June 27, 2019 @02:24PM (#20297105)
Were Carnegie Steel or Bell fun places to work? Probably, they had cash spilling out their ears.

Monopolies need to be broken up because they threaten the free market and consequently our way of life - not because employees revolt.

Re:Google’s new reCAPTCHA has a dark side by tjpnz on Thursday June 27, 2019 @02:23PM (#20297103)
From what I've seen (and most of it's anecdotal) things do appear to be changing. There are already people who won't go anywhere near Facebook now for personal ethical reasons, and even concerns that it might hurt future career prospects.
Re:Google’s new reCAPTCHA has a dark side by lonelappd on Thursday June 27, 2019 @12:56PM (#20296232)
That's Juniper, not Google.

Juniper patented saying "No" to a client.

Re:Google’s new reCAPTCHA has a dark side by baq on Thursday June 27, 2019 @01:30PM (#20296604)
oh, sorry about that, it's conveniently grayed out in the corner :)
Re:Google’s new reCAPTCHA has a dark side by neilv on Thursday June 27, 2019 @01:14PM (#20296425)
Tor users don't want to be running reCAPTCHA at all. There's a few privacy problems for people who run that or other ambitious cross-site snooping. Usual stuff (requests, cookies, JS fingerprinting, etc.), behavioral fingerprinting, and very detailed monitoring of what information you were accessing/reading and possibly even entering.
Re:Google’s new reCAPTCHA has a dark side by jimmaswell on Thursday June 27, 2019 @01:26PM (#20296565)
You can hardly blame anyone for blocking Tor traffic. You might not be using it for abuse but a large volume of abuse originates from it.
Re:Google’s new reCAPTCHA has a dark side by verisimilitudes on Thursday June 27, 2019 @02:15PM (#20297032)
>You can hardly blame anyone for blocking Tor traffic.

Yes I can and do. It's bad enough that some websites won't let you do certain things over Tor, but preventing access to the website entirely is unacceptable. I made this account and comment entirely over Tor.

I don't see how it's okay to block Tor. That generic claim is made, but how are your spam measures doing if you couldn't handle Tor spam?

>You might not be using it for abuse but a large volume of abuse originates from it.

There is infinitely more ''abuse'' coming from Google, and yet it seems most every page I visit contains Google malware.

On principle, I hold the idea that Tor should be a first-class citizen and not disadvantaged in any way. Notice that Google's ''HTTP/3'' is over UDP, which Tor doesn't work with; I don't find that a coincidence.

Re:Google’s new reCAPTCHA has a dark side by judge2020 on Thursday June 27, 2019 @04:05PM (#20298115)
https://blog.cloudflare.com/the-trouble-with-tor/

> like all IP addresses that connect to our network, we check the requests that they make and assign a threat score to the IP. Unfortunately, since such a high percentage of requests that are coming from the Tor network are malicious, the IPs of the Tor exit nodes often have a very high threat score.

Re:Google’s new reCAPTCHA has a dark side by Faark on Thursday June 27, 2019 @02:35PM (#20297232)
And that will never change if significant services keep blocking Tor users. Thus we have a feedback loop effectively fighting privacy...
Re:Google’s new reCAPTCHA has a dark side by jimmaswell on Thursday June 27, 2019 @02:40PM (#20297265)
Somehow I doubt most Tor users are really just in it for privacy for general browsing, especially since it's so slow and limited. You can get a VPN for that. Unless you're a total privacy purist, there's not much incentive to use Tor unless you're buying drugs/something else illegal or just curious to look around the dark web.
Re:Google’s new reCAPTCHA has a dark side by Faark on Thursday June 27, 2019 @05:32PM (#20299018)
Tor is free with no signup / cc required. This makes a huge difference, especially for younger users. Did for me back then, at least.

Initially it was slow, yes. But totally fine the last few years for normal browsing and reasonable downloads. Speedtest.net, speedtest.googlefiber & fast.com just now gave me 5, 6 & 10Mbps for whatever server in Ghana i got. Only the high ping causes loading times to still be a bit annoying.

But right now the biggest reason not to use Tor for anything "legit" is the many services blocking you, since indeed most current Tor users are not what those services want and the race to the bottom of Tor will continue, if we haven't reached it already.

Re:Google’s new reCAPTCHA has a dark side by w1nst0nsm1th on Thursday June 27, 2019 @05:15PM (#20298837)
Tor is slow if you're used to browse with a 50 MB internet connection speed.

My own connection doesn't go over 1.6MB download speed, and only if the weather is clear and I have the wind in the back.

You can now achieve a 500KB or more speed in most Tor connection, which is enough to have a confortable browsing experience, imo.

The real downside is the google captcha, which happens sometimes to even denie you to solve a captcha in the first place for web pages where there is no user input.

Re:Google’s new reCAPTCHA has a dark side by BeetleB on Thursday June 27, 2019 @04:10PM (#20298172)
>You might not be using it for abuse but a large volume of abuse originates from it.

Given that Tor is a tiny percentage of Internet traffic, most of the abusive volume out there has little to do with Tor.

Re:Google’s new reCAPTCHA has a dark side by nullwasamistake on Thursday June 27, 2019 @12:09PM (#20295726)
Sometimes Google will flag you as robot and never allow you to pass no matter how many you get right. It's total horseshit
Re:Google’s new reCAPTCHA has a dark side by ramraj07 on Thursday June 27, 2019 @12:36PM (#20296038)
I'm assuming you are not logged into a Google account during this? What happens if you create a throwaway Google account while on Tor? Or is that also impossible?
Re:Google’s new reCAPTCHA has a dark side by innot on Thursday June 27, 2019 @01:18PM (#20296463)
I remember that these days google requires a phone number. Finding a throwaway number is hard, especially in some countries.
Re:Google’s new reCAPTCHA has a dark side by comfyinnernet on Tuesday July 02, 2019 @07:14PM (#20340223)
I find they don't want a phone number if you sign up to youtube and opt to create a new gmail address instead of providing an existing email addr. Whether this works consistently, though ...

edit: also didn't try it over tor