Google’s new reCAPTCHA has a dark side - Hackdot

Re:Google’s new reCAPTCHA has a dark side by Izkata on Friday June 28, 2019 @01:54PM (#20307017)

Wait, now you have me wondering: If this is just javascript from another domain, what's preventing bots from proxying requests, intercepting this one, and replacing it with a dummy function that returns a "no threat" score?

[ Parent | on HN ]

Re:Google’s new reCAPTCHA has a dark side by tgragnato on Friday June 28, 2019 @05:51PM (#20309063)

https://developers.google.com/recaptcha/docs/verify

[ Parent | on HN ]

Re:Google’s new reCAPTCHA has a dark side by Izkata on Friday June 28, 2019 @06:14PM (#20309206)

So... the answer is, nothing prevents it?

[ Parent | on HN ]

Re:Google’s new reCAPTCHA has a dark side by tgragnato on Friday June 28, 2019 @07:12PM (#20309586)

When the API reports a failed verification, the webmaster knows that the response has been tampered with?

[ Parent | on HN ]