News for hackers. Stuff that matters.

A comment on Google Broke reCAPTCHA for De-Googled Android Users. Parent comment

Re:Google Broke reCAPTCHA for De-Googled Android Users by brookst on Saturday May 09, 2026 @11:35AM (#48075795)
Look at Apple’s PAT: the website knows the service that did the attestation, but not the user. The service knows the user, but not the website. If you controlled both you can link the user, but otherwise you can’t.
[ Parent | on HN ]
Re:Google Broke reCAPTCHA for De-Googled Android Users by palata on Saturday May 09, 2026 @06:13PM (#48078799)
Yes, but they can still collude. It's possible to do age verification in a way that prevents that. Look e.g. at Privacy Pass.
[ Parent | on HN ]
Re:Google Broke reCAPTCHA for De-Googled Android Users by brookst on Sunday May 10, 2026 @01:07PM (#48085709)
PAT is Privacy Pass.
[ Parent | on HN ]
Re:Google Broke reCAPTCHA for De-Googled Android Users by palata on Sunday May 10, 2026 @03:56PM (#48087270)
Oh right, my bad. And how can they collude there?
[ Parent | on HN ]