Google’s new reCAPTCHA has a dark side - Hackdot

Re:Google’s new reCAPTCHA has a dark side by tgragnato on Friday June 28, 2019 @08:55AM (#20303748)

> Their business model depends on becoming inescapable

What will happen with v3 if I block gstatic.com? Will I be given the highest threat score?

[ Parent | on HN ]

Re:Google’s new reCAPTCHA has a dark side by Izkata on Friday June 28, 2019 @01:54PM (#20307017)

Wait, now you have me wondering: If this is just javascript from another domain, what's preventing bots from proxying requests, intercepting this one, and replacing it with a dummy function that returns a "no threat" score?

[ Parent | on HN ]

Re:Google’s new reCAPTCHA has a dark side by tgragnato on Friday June 28, 2019 @05:51PM (#20309063)

https://developers.google.com/recaptcha/docs/verify

[ Parent | on HN ]

Re:Google’s new reCAPTCHA has a dark side by Izkata on Friday June 28, 2019 @06:14PM (#20309206)

So... the answer is, nothing prevents it?

[ Parent | on HN ]

Re:Google’s new reCAPTCHA has a dark side by tgragnato on Friday June 28, 2019 @07:12PM (#20309586)

When the API reports a failed verification, the webmaster knows that the response has been tampered with?

[ Parent | on HN ]