Re:Google’s new reCAPTCHA has a dark side
by deftnerd on Thursday June 27, 2019 @12:46PM
(#20296135)
Install the PrivacyPass Firefox or Chrome extension. It was developed by Cloudflare, Firefox, and Tor in partnership. It has you answer a ReCAPTCHA and using some crypto magic, generate a bunch of CAPTCHA bypass tokens that can't be traced to your specific computer.
https://support.cloudflare.com/hc/en-us/articles/11500199265...
https://blog.cloudflare.com/cloudflare-supports-privacy-pass...
Re:Google’s new reCAPTCHA has a dark side
by johndough on Thursday June 27, 2019 @02:09PM
(#20296981)
Does not work with Tor.
The plugin requires "privacy passes". Those passes can be obtained by solving captchas, but when trying to do so, one is greeted with this message about being blocked: https://i.imgur.com/qXJfl6J.png
Re:Google’s new reCAPTCHA has a dark side
by piyush_soni on Friday June 28, 2019 @03:39AM
(#20302250)
Slightly off-topic, but the users who use Tor regularly, how do you do that? For me, it has been terribly slow every time I tried to use it.
On Tor I get roughly 700 KB/s speeds, which isn't terrible for me
Re:Google’s new reCAPTCHA has a dark side
by piyush_soni on Sunday June 30, 2019 @01:52AM
(#20316598)
And what is that compared to any regular browser?
Try rebuilding your Tor circuit when this happens.
This sort of breaks tor though, doesn't it? Tor works really well if you stay on the same circuit for a while since it reduces the chances you have a compromised circuit. If you start getting recaptcha to block every exit node except those you control, you essentially have amplified your effective strength on the tor network.
Re:Google’s new reCAPTCHA has a dark side
by AlexCoventry on Thursday July 04, 2019 @02:33AM
(#20352092)
Tor is already broken for an adversary with that capability.
Re:Google’s new reCAPTCHA has a dark side
by redwards510 on Thursday June 27, 2019 @02:19PM
(#20297077)
This sounds pretty good, but you still have to pass a captcha in order to get a pass, and sometimes that is impossible (or at least I just give up because I lost interest after 20 puzzles).
If it was developed in conjunction with Tor, how come it doesn't come bundled with the Tor browser or Tails?
If only it was Google services alone. CloudFlare loves serving up a ReCAPTCHA for Tor users before they can even passively read site contents. That hugely expands the damage done.