Replace CAPTCHAs with Private Access Tokens

Re:Replace CAPTCHAs with Private Access Tokens by nojito on Tuesday June 21, 2022 @08:54AM (#31823298)

Not enough info to track. The website only sees the url you’re going to and the fact you have a token.

[ Parent | on HN ]

Re:Replace CAPTCHAs with Private Access Tokens by feet on Tuesday June 21, 2022 @09:01AM (#31823382)

So the token doesn't get recorded anywhere? I find that hard to believe

[ Parent | on HN ]

Re:Replace CAPTCHAs with Private Access Tokens by nojito on Tuesday June 21, 2022 @12:22PM (#31825738)

https://blog.cloudflare.com/eliminating-captchas-on-iphones-...

>The website knows only your URL and IP, which it has to know to make a connection.

>The device manufacturer (attester) knows only the device data required to attest your device, but can't tell what website you visited, and doesn’t know your IP.

>Cloudflare knows the site you visited, but doesn’t know any of your device or interaction information.

[ Parent | on HN ]

Re:Replace CAPTCHAs with Private Access Tokens by feet on Tuesday June 21, 2022 @02:04PM (#31827105)

With how much data cloudflare has access to and how the market for data is, I don't believe it for a second that they can't correlate connections even if what you say is true

[ Parent | on HN ]

Re:Replace CAPTCHAs with Private Access Tokens by nojito on Tuesday June 21, 2022 @03:58PM (#31828427)

Hard to do if they just know the destination url!

[ Parent | on HN ]

Re:Replace CAPTCHAs with Private Access Tokens by feet on Tuesday June 21, 2022 @04:37PM (#31828833)

And why would they not know anything else? Is everyone on their network using tor?

[ Parent | on HN ]