Are you a Robot? Google hiding CAPTCHA

[WMGroomAK]

According to the following Ars Technica article, you may see less CAPTCHAs from Google.  Apparently Google feels that they have a system that can correctly predict most of who is a bot versus a person and will only ask for a CAPTCHA if it is questionable.

 

https://arstechnica.com/gadgets/2017/03/googles-recaptcha-announces-invisible-background-captchas/

 

Quote

The old reCAPTCHA system was pretty easy—just a simple "I'm not a robot" checkbox would get people through your sign-up page. The new version is even simpler, and it doesn't use a challenge or checkbox. It works invisibly in the background, somehow, to identify bots from humans. Google doesn't go into much detail on how it works, only saying that the system uses "a combination of machine learning and advanced risk analysis that adapts to new and emerging threats." More detailed information on how the system works would probably also help bot-makers crack it, so don't expect details to pop up any time soon.

I'm okay with doing away with CAPTCHAs but would really like to know how Google is making the determination that I'm not a bot.  Is it looking and storing IP and other personal information.

[Orangeator]

6 minutes ago, WMGroomAK said:

but would really like to know how Google is making the determination that I'm not a bot.  Is it looking and storing IP and other personal information.

This is my question as well... However, being this is Google we are talking about, I am assuming so.

[ZackBarletto]

I wonder if it has to do with their analytic capabilities. I think google can tell what page you come from and what page you are going to. I can imagine a robot will run through many things like a script or like a machine would do, perfectly and quickly.

 

And any human would take time to go from site to site. might type a little slower. the mouse may wiggle unsteadily in the hands of an actual human and have to center down on a button instead of a perfect straight angle from point to point click to click.

 

I though I was going to be first.... lol

[SCHISCHKA]

My guess:

that is how good they are at spying on consumers. They know how many web sites you have visited and your browsing patterns. A robot would have a different search and page view fingerprint

[vanished]

Quote

More detailed information on how the system works would probably also help bot-makers crack it, so don't expect details to pop up any time soon.

Systems that are secure only because no one knows how they work are always totally the best ones

 

/s

[Doobeedoo]

Only Google knows if I'm a robot.

[WMGroomAK]

5 minutes ago, Ryan_Vickers said:

Systems that are secure only because no one knows how they work are always totally the best ones

 

/s

Wasn't there something last week as well about how Google's own Speech to Text was able to get through their CAPTCHA?

[vanished]

10 minutes ago, WMGroomAK said:

Wasn't there something last week as well about how Google's own Speech to Text was able to get through their CAPTCHA?

yes

[Akima]

From the SEO community the captcha thing has always been a big problem. You're ghetto style SEO guy would be manually checking his keyword ranks. You end up making a pattern; Copy keyword from spreadsheet -> paste into google -> find position -> note position in spreadsheet then back go stage 1.

 

Do that 500 times and google thinks your a robot. I've even triggered it myself. Nowadays folk use a mix of automation software and private proxies to get their ranks. You rarely get caught out using that method.

 

For the serious automation systems, there are API services out there that basically grab any captcha images you might trigger, send it to an army of people in India/China, they'll manually fill in the captcha and the software carries on. Typical turnaround is 10-11 seconds. Company called Death by Captcha I believe that offers something like 1000 completes for a few $.

 

However that's for your more legit reasons you might trigger a captcha (like the above rank checking process) as opposed to spam automation.

[SansVarnic]

2 hours ago, WMGroomAK said:

<snip>

I'm okay with doing away with CAPTCHAs but would really like to know how Google is making the determination that I'm not a bot.  Is it looking and storing IP and other personal information.

Knowing Google ... most likely.

[dfsdfgfkjsefoiqzemnd]

9 hours ago, WMGroomAK said:

would really like to know how Google is making the determination that I'm not a bot.

Steve Gibson gave a pretty nice explanation in Security Now 593

The whole captcha discussion starts at 1:44:01 (timestamped to that) , Steve really goes into detail at 1:47:30

[sof006]

13 hours ago, WMGroomAK said:

According to the following Ars Technica article, you may see less CAPTCHAs from Google.  Apparently Google feels that they have a system that can correctly predict most of who is a bot versus a person and will only ask for a CAPTCHA if it is questionable.

 

https://arstechnica.com/gadgets/2017/03/googles-recaptcha-announces-invisible-background-captchas/

 

I'm okay with doing away with CAPTCHAs but would really like to know how Google is making the determination that I'm not a bot.  Is it looking and storing IP and other personal information.

It'll most likely be some complicated algorithm, I doubt Google would lightly release this if they weren't confident that it works. Its going to replacing previous versions which in most cases allow us to log in to website or access certain websites.

 

I doubt obviously as well that Google will tell us how they are doing it for reasons obvious. 

[Tam3n]

If you have ever wondered why you had to solve those text and image quizzes... You were Google's bitch all along :

 

[ZackBarletto]

That video is awesome. He kinda confirmed us all. Too much information. mouse pointers, history, jeeeeeeesus. lol