News for hackers. Stuff that matters.
Re:Google Broke reCAPTCHA for De-Googled Android Users by tamimio on Friday May 08, 2026 @04:14PM (#48068176)
And soon desktop OSes will follow, if you don’t have TPM you won’t be able to browse half of the internet.
Re:Google Broke reCAPTCHA for De-Googled Android Users by Andrex on Friday May 08, 2026 @04:49PM (#48068616)
A parallel, fully public and accessible internet being widespread and available for anyone with a slight tinkering kick... Could actually be really awesome.

Let the commerce-driven, corporatized hellhole that the modern web has become eat itself.

Re:Google Broke reCAPTCHA for De-Googled Android Users by spencerflem on Friday May 08, 2026 @06:48PM (#48069697)
I love the vision, but I do wonder how the parallel internet will deal with DDoS levels of bot traffic.

I hear ‘web of trust’ pretty often and I like the idea but that’s not anonymous or accessible either

Re:Google Broke reCAPTCHA for De-Googled Android Users by SV_BubbleTime on Friday May 08, 2026 @07:34PM (#48070086)
Well, how does Tor or other services do it now?
Re:Google Broke reCAPTCHA for De-Googled Android Users by spencerflem on Friday May 08, 2026 @07:57PM (#48070247)
They get blocked by Recaptcha, I think.

I’m not talking about the network itself but the servers on the other end.

I guess my point is that while Google is definitely malicious, I don’t think every site using recaptcha is and if we expect them not to use that tool there should probably be an alternative.

Re:Google Broke reCAPTCHA for De-Googled Android Users by 986aignan on Friday May 08, 2026 @08:32PM (#48070494)
> They get blocked by Recaptcha, I think.

I think SV was asking what onion services, which can't really use recaptcha, do to prevent the DDoS storm.

And I would imagine the answer is obscurity, since the dark web isn't nearly as well-mapped as the public web. That and some Anubis or other PoW would probably go far.

Re:Google Broke reCAPTCHA for De-Googled Android Users by SV_BubbleTime on Friday May 08, 2026 @09:43PM (#48070934)
Proof of work I get, but isn’t that like step2?

If I’m hosting at some IP, I still need Anubis or something to serve up the challenge, so doesn’t that become the attack point?

Re:Google Broke reCAPTCHA for De-Googled Android Users by eddythompson80 on Friday May 08, 2026 @10:04PM (#48071020)
Tor does it by being so painfully slow an unreliable that the only way you would use it is if there is a cocaine-style reward at the end of it.
Re:Google Broke reCAPTCHA for De-Googled Android Users by staringforward on Saturday May 09, 2026 @12:33AM (#48071849)
> Tor does it by being so painfully slow an unreliable

I do 95% of my web browsing via Tor Browser and it is very tolerable, most circuits are fast enough for 1080p video (Youtube, Twitch livestreams, etc) without any buffering.

Here is a speedtest I ran just moments ago, I would hardly consider this "painfully slow": https://www.speedtest.net/result/19172283165.png

Of course this is a single tor circuit with an exit node, so speeds are slower when going directly to .onion sites, but the only real slowness comes from the latency and not throughput.

Re:Google Broke reCAPTCHA for De-Googled Android Users by nervysnail on Wednesday May 13, 2026 @06:31AM (#48120124)
Do you add uBlock Origin to Tor? I know that it is not recommended.
Re:Google Broke reCAPTCHA for De-Googled Android Users by donmcronald on Friday May 08, 2026 @09:13PM (#48070767)
> I love the vision, but I do wonder how the parallel internet will deal with DDoS levels of bot traffic.

Something that makes it expensive to initiate a connection and cheap (relatively) to accept or reject would probably help. I think that’s a hard problem though.

Re:Google Broke reCAPTCHA for De-Googled Android Users by Andrex on Saturday May 09, 2026 @12:06AM (#48071730)
How do personal blogs deal with the HN hug of death? In this increasingly-utopian vision, I imagine that being more widespread than (paid) DDOS attempts. There won't be any money to be made (banks, Paypal, etc. won't trust the "parallel web") and with the proliferation of synthetic training data I'm not sure how useful a target a bunch of blogs and smallweb sites would be.
Re:Google Broke reCAPTCHA for De-Googled Android Users by fsflover on Friday May 08, 2026 @06:02PM (#48069333)
TPMs can also be based on free software and our own keys. It works well with Heads and Librem Key.
Re:Google Broke reCAPTCHA for De-Googled Android Users by cyklosarin on Friday May 08, 2026 @06:53PM (#48069751)
TPM with things like Heads are borderline zero security and theater compared to actually decent implementations on Android/iOS platforms, I doubt the big companies would rely on that. TPM in general on non Mac/Chromebook PCs is mediocre even from big OEMs.
Re:Google Broke reCAPTCHA for De-Googled Android Users by fsflover on Saturday May 09, 2026 @05:51PM (#48078613)
Do you have any evidence if this? Qubes team disagrees with you.
Re:Google Broke reCAPTCHA for De-Googled Android Users by anonymars on Friday May 08, 2026 @08:25PM (#48070447)
What a coincidence that Windows 11 makes it a requirement!
Re:Google Broke reCAPTCHA for De-Googled Android Users by roywiggins on Friday May 08, 2026 @09:47PM (#48070947)
Not soon, now. The new reCAPTCHA on desktop shows you a QR code for you to scan with your Google-approved phone to prove you have one.