9 ms·

Judge tosses proposed class action accusing Google of CAPTCHA fraud

90 points by pavornyoh 11y ago

deleted 11y ago
[deleted]
Someone1234 11y ago
The judge's argument makes sense to me, and seems right. But I'd argue that the CAPTCHA itself is a greater benefit to the end user than the cost (not just Gmail or Google Maps). If Google had to stop using OCR CAPTCHA tomorrow, they would have to use an alternative, and frankly most of the alternatives are worse. Further still without the ability to hinder bots services like Gmail couldn't exist. Arguing that Gmail is a greater benefit than the CAPTCHA costs to complete is fine, but potentially leaves the gate open to sue later because someone finds a service which they claim doesn't benefit the end user (e.g. paying a bill). Arguing that the CAPTCHA method itself has more benefit than cost completely destroys any future lawsuits.
- DanBC 11y ago
  > Arguing that the CAPTCHA method itself has more benefit than cost completely destroys any future lawsuits. The judge said that. > > Moreover, users’ transcriptions increase the utility of other free Google services such as Google Maps or Google Books. Plaintiff has failed to allege how these numerous benefits outweigh the few seconds it takes to transcribe one word.
- aluhut 11y ago
  What a sad world. We have pretty reasonable judge with an reasonable verdict that seems obviously right but you can be sure there is automatically a bunch of lawyers looking for loopholes to crash it all and make money on it. Sometimes I have the feeling like the whole judicial apparatus has gone from solving real life problems to creating absurd problems that allow you to sue somebody.
  - rayiner 11y ago
    Like everything in life, there are two sides of the coin. When I was in law school, I worked with a small town in central Illinois that Big Chemical Co. had left polluted with heavy metals after a decades-long mining operation. Making headway in the lawsuit was extremely difficult because of all the legal barriers put in place to protect defendants. The legal system has become very unfriendly to plaintiffs over the last 20-30 years and it's affecting a lot of legitimate cases.
    - toomuchtodo 11y ago
      Why would the EPA not be taking that case? And extract a financial penalty for Superfund cleanup?
      - rayiner 11y ago
        EPA and state departments of environmental protection have limited resources to take on these cases, prove them up, and follow-through over the years it takes to do cleanup. In our case, Illinois EPA actually entered into a consent decree with defendants regarding the site, and defendants argued that the consent decree preempted our common law clams. But IEPA pretty much ignored enforcement for 15+ years. So we were stuck in a situation where enforcement power had been shifted from the courts to the agency, but the agency wasn't interested in acting.[1] What ultimately happened was that regime change happened at IEPA and they got serious about enforcing the consent decree. But that still doesn't compensate the townspeople. Good luck getting someone to buy your house in a former superfund site, even if the heavy metals on the school grounds have been cleaned up to a reasonable, cost-effective standard. [1] This problem is recurring. Agency enforcement is a lot more efficient than lawsuits. But agencies only have the resources to go after the biggest fish for the most egregious violations. And they're far more susceptible to political pressure ("you can't sue XYZ, they have 10,000 jobs in our state!")
        toomuchtodo 11y ago
        Thanks for taking the time to respond, I appreciate it.
ck2 11y ago
I wish people would stop feeding the class action lawyers. There are plenty of legit class actions and stuff like this diminishes them.
- kodis 11y ago
  It really does serve to make lawyers look like extortionist thugs. Had the lawsuit gone forward, it would have been funny if Google had proposed compensating everyone -- lawyers and "victims" alike -- with free Gmail accounts.
  - morgante 11y ago
    Even better, it should have offered exactly what the plaintiffs claim was stolen from them. It would tell the plaintiffs what word is in an image of their choice.
seanwilson 11y ago
What a bizarre lawsuit. Even if the CAPTCHA required 30 mins of work for a free gmail account and that work was used for significant gain for Google only, why would you be entitled to compensation?
- tyingq 11y ago
  Not that I agree with it, but the premise is this... - reCaptcha presents 2 words for the end user to solve - the purpose of the second word has nothing to do with security. The word itself is not known to Google. - the "fraud" is that Google is deceiving you into helping them decipher the second word for their own financial gain (paraphrasing from http://digitalcommons.law.scu.edu/cgi/viewcontent.cgi?article=1904&context=historical http://digitalcommons.law.scu.edu/cgi/viewcontent.cgi?articl...) Edit: Please note that I am not in agreement with the premise above...just trying to summarize it.
  - comex 11y ago
    Not mentioned is that it actually does have something to do with security, because once enough users have transcribed a word, in addition to it being returned to the digitization project, it can be used for future CAPTCHAs as a known word. According to Wikipedia, this was at least historically the case for reCAPTCHA.
  - cptskippy 11y ago
    What exactly constitutes fraud? The captcha interface (http://www.captcha.net/ http://www.captcha.net/) has a clickable tagline "stop spam. read books." that takes you to an explanation of what it is and how it works. Are we saying that fraud is not going out of your way to carefully explain exactly what you're doing as you're doing it? Saying that Captchas are in any way misleading or fraudulent calls into question "free" software paid for by ads, any app that has a ToS contract, pretty much every financial agreement on the planet, most repair shops, and just about anywhere else that you agree to something without 100% ELI5 in your face explanation before you pull the trigger.
  - pbnjay 11y ago
    Fraud generally requires that the victim rely on the "fradulent" statement to decide to move forward (e.g. solving the captcha). So even if you assume that the terms "free" and "security" were intentionally meant to deceive, you'd have to prove that the user would not have otherwise signed up for Gmail if those labels had been different.
hiby007 11y ago
So what is the future? Will all site who used google captcha be affected by the result of this case?
- ceejayoz 11y ago
  The "result of this case" is its being tossed out of court, leaving it with zero effects.
throwaway6845 11y ago
> As Google suggests, it strains credulity that Plaintiff or class members would forego access to a free Gmail account and higher quality Google Books or Google Maps because their brief transcription of a single word might, indirectly or directly, facilitate Google’s profit earning Call me a data point to the contrary. I don't use gmail or Google Books at all, and Google Maps rarely. I contribute to OpenStreetMap. It sticks in the craw that whenever I use any Google Captcha-enabled site (even if the site's not owned by Google) I'm helping to increase the quality divide between Google Maps and OSM.
- wvenable 11y ago
  It really sticks in your craw that you are improving the quality of data, just because that data belongs to Google? Seems petty.
  - _ZeD_ 11y ago
    can I sing you the little Blobby[0] song? [0] http://www.openbsd.org/lyrics.html#39 http://www.openbsd.org/lyrics.html#39
  - rm_-rf_slash 11y ago
    Same as wanting to put your money in a credit union that invests your deposits in the community instead of a bank that spends it on executive bonuses.
    - maxerickson 11y ago
      Credit Unions tend to merge with each other instead of just growing organically, I think at least in part because the administrative employees can use the increase in size to justify larger compensation.
      - rm_-rf_slash 11y ago
        Depends on where you are. I live in an isolated college town with many regional banks and one well-liked credit union. I can't speak for people who live in big cities.
Robadob 11y ago
Surely the spare word allows the dictionary of potential CAPTCHA words to add a new word for every CAPTCHA solved (sure they probably run them past many users for validation purposes). This effectively allows the CAPTCHA service's dictionary to scale/evolve continuously, preventing an anti-CAPTCHA service from 'learning' the whole dictionary. I thought this was the entire point of re-captcha, so regardless of the 'time necessary to complete' element, their case doesn't seem very well thought out.
- kuschku 11y ago
  The issue about this is that it is already being targeted in Antitrust suits, too. Why? because Google, through their almost-monopoly in some areas (including captchas) has gotten an unfair advantage in computer vision. I personally would prefer if Google would be forced to publish any training data and parameters for neural networks that were trained with data created by the public.
- user_0001 11y ago
  anti captcha (against recaptcha) works via captcha farms, the biggest being deathbycaptcha.com. $10 gets you about 10k solved captchas. They work quite well. I tend to get about a 1 out of 5 correct of the squiggly words, whereas the service is more like 4/5 I am not aware of any successful dictionary attack on recaptcha. And the only OCR techniques to bypass recaptcha was by xrumer[0] but that was a few years ago [0]xrumer: once popular forum spamming software waned in popularity / effectiveness in recent years
  - mchahn 11y ago
    deathbycaptcha.com is ... > A hybrid system composed of the most advanced OCR system on the market, along with a 24/7 team of CAPTCHA solvers. An average response time of 11 seconds,... My understanding is that this is mostly humans in third-world countries staring at a screen and working for peanuts (or maybe less than the value of a peanut). I don't see how any system for recognizing humans can succeed against real humans.
jonas21 11y ago
This bit from the judge's ruling underscores how ridiculous the lawsuit is: > In addition, at oral argument, Plaintiff did not represent that if given leave to amend she could allege that had she known the second reCAPTCHA word was used to assist Google with its other services she would not have completed the reCAPTCHA. To the contrary, counsel represented that he had not asked Plaintiff and he did not know what she would say. (Dkt. No. 60 at 20:23-25.) Such question, of course, should have been asked and answered before this lawsuit was filed and pursued in two states. Regardless, it defies common sense that the answer would be yes. [1] http://boothsweet.com/wp-content/uploads/2016/02/Google-Order-Granting-Dismissal.pdf http://boothsweet.com/wp-content/uploads/2016/02/Google-Orde...
- pbnjay 11y ago
  This. Fraud generally requires that the victim rely on the "fradulent" statement to decide to move forward (e.g. solving the captcha). So even if you assume that the terms "free" and "security" were intentionally meant to deceive, you'd have to prove that the user would not have otherwise signed up for Gmail if those labels had been different. The fact that they didn't cover this important point is ridiculous.
  - will_brown 11y ago
    Just playing devil's advocate, but look at the UI. The box I saw says "CAPTCHA" and "type these two words". So the argument for fraud would be that 50% of words Google solicited under the guise of CAPTCHA were actually used for the sole economic benefit of Google's other services. Maybe on a count for fraud the plaintiff's can't prove that they would not have created a Google account having known the 2nd word was not for CAPTCHA; however, the Plaintiffs could certainly prevail on a unjust enrichment claim. As the company who invented the anti-trust defense "competition is only a click away", Google should equally be capable of acknowledging there in absolutely no burden on Google to create 2 boxes for new users, one identified as CAPTCHA, and the other as a crowd-sourced word to be used for Google's other services.
MidoAssran 11y ago
Is it just me, or does it seem like Google is being the target of a large number of obscure law suits lately (especially in Europe)?
cbhl 11y ago
Distorted text isn't even used in reCAPTCHA all that much anymore -- Google used a Deep Convolutional Neural Network and got over 90% accuracy in reading street numbers in Street View, and 99.8% accuracy in solving distorted text reCAPTCHA (http://arxiv.org/abs/1312.6082 http://arxiv.org/abs/1312.6082). Most users will just check a "I'm not a robot" box now; and if you do get a test, it will likely be a computer vision / image labeling problem: https://googleonlinesecurity.blogspot.com/2014/12/are-you-robot-introducing-no-captcha.html https://googleonlinesecurity.blogspot.com/2014/12/are-you-ro...
- ultramancool 11y ago
  Really annoying too - I seem to always get the test and I hate the computer vision tests so much more than the old text based ones, they seem to always take way longer for me and I always miss an image or two the first time.
- mikeash 11y ago
  I wonder what will happen once there are no more problems left that 99.9% of humans can solve in a short time, but computers can't.
  - cyorir 11y ago
    Generally, the point of a CAPTCHA is to prevent automated use of a service. If we get to the point where CAPTCHA's no longer work in preventing automated access to services, we need to look for atypical use of services. For example, if a computer passes a CAPTCHA in order to use gmail to automate the sending of spam emails, look for users that mass-spam; typical users won't do that. On the other hand, the computer may try to approximate the usage of a typical user to avoid detection. But if you cant distinguish automated use of your service from typical use of your service, then at that point maybe it doesn't matter so much.
    - MuEta 11y ago
      The natural extension of that argument always reminds me of this: https://xkcd.com/810/ https://xkcd.com/810/
LoSboccacc 11y ago
Ot but arstechnica is now using the shitty mobsweet ad network making reading the article impossible on mobile - and they complain when the users fight back!
xixi77 11y ago
Quite a frivolous case, nice to see the legal system working for once. One interesting thing I've learned from the court rule though: apparently software delivered online and through downloads does not qualify as a good or service under the California's Consumer Legal Remedies Act, unlike boxed software delivered on physical media (pp.14-16)
gcb0 11y ago
At least captcha worked and helped digitalize books. After google bought them and moved to useless training for their image classification, which helps nobody, i was simply banned from contributing to all sites that demand captcha. Because it simply refuses to work with my phone.
hackuser 11y ago
What concerns me is the attitude that users can be used and manipulated without their permission or knowledge; they have no choice or right to be informed, in this or in tracking or in many other situations. They are just objects of commerce to the developers, not human beings. This leads to bad practices like widespread confidentiality violations, free-to-play user manipulations [1], and the sorts of manipulation of customers practiced in places like Wall Street. My feeling these days is that either you're on the inside or you're a sucker. (On the level of fairness and justice - I don't know enough to comment on legality - I don't think this particular incident rises to the level of damages. However, Google could just display, In return for our free service, please help our computers read this word! Even Google's computers can't do everything - read more about it <here>. - Why not disclose it if you are doing nothing wrong? If you don't disclose it, you're manipulating people.) [1] http://toucharcade.com/2015/09/16/we-own-you-confessions-of-a-free-to-play-producer/ http://toucharcade.com/2015/09/16/we-own-you-confessions-of-...
- dhimes 11y ago
  I have to agree here. What's wrong with disclosure? It seems to me that the judge ruled on the implementation and missed the concept- and may have set an unwitting precedent. Suppose Microsoft used a small bit of your unused processing power for some of their own work in order to increase their profits. It's likely few would ever know of this. Is that ok? Somehow I would feel...violated. Like somebody else just took rights to something I thought was under my control. Note: I don't use gmail, and I view ads on google. The reCaptcha I've seen has been on third-party sites. So their doing this seems to be outside of the 'contract' I have with them. I'm not doing this to pay for a service of theirs that I use- at least not directly.
- grkvlt 11y ago
  From the reCAPTCHA site itself: > reCAPTCHA offers more than just spam protection. Every time our CAPTCHAs are solved, that human effort helps digitize text, annotate images, and build machine learning datasets. This in turn helps preserve books, improve maps, and solve hard AI problems. That seems like disclosure to me?
ChuckMcM 11y ago
I have always found Google's way of getting data at the same time as some other activity pretty clever. Offering a free 4-1-1 (directory) service for phones so that you can collect millions of minutes of voice recognition code with various accents? Seemed pretty brilliant to me. Using a security technique to fix hard to fix otherwise OCR errors? also pretty clever. When you think like that, all sorts of interesting things come out. For example, something I don't think anyone has done but could be pretty amazing, put a camera in a store which tracks gazes, set up a set of mannequins with different looks and compare male and female gaze time. Sure it used to be you could change the window display and count sales, this is so much more informative than that. So are you using their interactions for your own benefit? Sure. Is this a new phenomena? No. I totally think the judge called it on this one.

90 points by pavornyoh 11y ago

deleted 11y ago

[deleted]

The judge's argument makes sense to me, and seems right. But I'd argue that the CAPTCHA itself is a greater benefit to the end user than the cost (not just Gmail or Google Maps). If Google had to stop using OCR CAPTCHA tomorrow, they would have to use an alternative, and frankly most of the alternatives are worse. Further still without the ability to hinder bots services like Gmail couldn't exist. Arguing that Gmail is a greater benefit than the CAPTCHA costs to complete is fine, but potentially leaves the gate open to sue later because someone finds a service which they claim doesn't benefit the end user (e.g. paying a bill). Arguing that the CAPTCHA method itself has more benefit than cost completely destroys any future lawsuits.

DanBC 11y ago
> Arguing that the CAPTCHA method itself has more benefit than cost completely destroys any future lawsuits. The judge said that. > > Moreover, users’ transcriptions increase the utility of other free Google services such as Google Maps or Google Books. Plaintiff has failed to allege how these numerous benefits outweigh the few seconds it takes to transcribe one word.
aluhut 11y ago
What a sad world. We have pretty reasonable judge with an reasonable verdict that seems obviously right but you can be sure there is automatically a bunch of lawyers looking for loopholes to crash it all and make money on it. Sometimes I have the feeling like the whole judicial apparatus has gone from solving real life problems to creating absurd problems that allow you to sue somebody.
- rayiner 11y ago
  Like everything in life, there are two sides of the coin. When I was in law school, I worked with a small town in central Illinois that Big Chemical Co. had left polluted with heavy metals after a decades-long mining operation. Making headway in the lawsuit was extremely difficult because of all the legal barriers put in place to protect defendants. The legal system has become very unfriendly to plaintiffs over the last 20-30 years and it's affecting a lot of legitimate cases.
  - toomuchtodo 11y ago
    Why would the EPA not be taking that case? And extract a financial penalty for Superfund cleanup?
    - rayiner 11y ago
      EPA and state departments of environmental protection have limited resources to take on these cases, prove them up, and follow-through over the years it takes to do cleanup. In our case, Illinois EPA actually entered into a consent decree with defendants regarding the site, and defendants argued that the consent decree preempted our common law clams. But IEPA pretty much ignored enforcement for 15+ years. So we were stuck in a situation where enforcement power had been shifted from the courts to the agency, but the agency wasn't interested in acting.[1] What ultimately happened was that regime change happened at IEPA and they got serious about enforcing the consent decree. But that still doesn't compensate the townspeople. Good luck getting someone to buy your house in a former superfund site, even if the heavy metals on the school grounds have been cleaned up to a reasonable, cost-effective standard. [1] This problem is recurring. Agency enforcement is a lot more efficient than lawsuits. But agencies only have the resources to go after the biggest fish for the most egregious violations. And they're far more susceptible to political pressure ("you can't sue XYZ, they have 10,000 jobs in our state!")
      - toomuchtodo 11y ago
        Thanks for taking the time to respond, I appreciate it.

ck2 11y ago

I wish people would stop feeding the class action lawyers. There are plenty of legit class actions and stuff like this diminishes them.

kodis 11y ago
It really does serve to make lawyers look like extortionist thugs. Had the lawsuit gone forward, it would have been funny if Google had proposed compensating everyone -- lawyers and "victims" alike -- with free Gmail accounts.
- morgante 11y ago
  Even better, it should have offered exactly what the plaintiffs claim was stolen from them. It would tell the plaintiffs what word is in an image of their choice.

seanwilson 11y ago

What a bizarre lawsuit. Even if the CAPTCHA required 30 mins of work for a free gmail account and that work was used for significant gain for Google only, why would you be entitled to compensation?

tyingq 11y ago
Not that I agree with it, but the premise is this... - reCaptcha presents 2 words for the end user to solve - the purpose of the second word has nothing to do with security. The word itself is not known to Google. - the "fraud" is that Google is deceiving you into helping them decipher the second word for their own financial gain (paraphrasing from http://digitalcommons.law.scu.edu/cgi/viewcontent.cgi?article=1904&context=historical http://digitalcommons.law.scu.edu/cgi/viewcontent.cgi?articl...) Edit: Please note that I am not in agreement with the premise above...just trying to summarize it.
- comex 11y ago
  Not mentioned is that it actually does have something to do with security, because once enough users have transcribed a word, in addition to it being returned to the digitization project, it can be used for future CAPTCHAs as a known word. According to Wikipedia, this was at least historically the case for reCAPTCHA.
- cptskippy 11y ago
  What exactly constitutes fraud? The captcha interface (http://www.captcha.net/ http://www.captcha.net/) has a clickable tagline "stop spam. read books." that takes you to an explanation of what it is and how it works. Are we saying that fraud is not going out of your way to carefully explain exactly what you're doing as you're doing it? Saying that Captchas are in any way misleading or fraudulent calls into question "free" software paid for by ads, any app that has a ToS contract, pretty much every financial agreement on the planet, most repair shops, and just about anywhere else that you agree to something without 100% ELI5 in your face explanation before you pull the trigger.
- pbnjay 11y ago
  Fraud generally requires that the victim rely on the "fradulent" statement to decide to move forward (e.g. solving the captcha). So even if you assume that the terms "free" and "security" were intentionally meant to deceive, you'd have to prove that the user would not have otherwise signed up for Gmail if those labels had been different.

hiby007 11y ago

So what is the future? Will all site who used google captcha be affected by the result of this case?

ceejayoz 11y ago
The "result of this case" is its being tossed out of court, leaving it with zero effects.

throwaway6845 11y ago

> As Google suggests, it strains credulity that Plaintiff or class members would forego access to a free Gmail account and higher quality Google Books or Google Maps because their brief transcription of a single word might, indirectly or directly, facilitate Google’s profit earning Call me a data point to the contrary. I don't use gmail or Google Books at all, and Google Maps rarely. I contribute to OpenStreetMap. It sticks in the craw that whenever I use any Google Captcha-enabled site (even if the site's not owned by Google) I'm helping to increase the quality divide between Google Maps and OSM.

wvenable 11y ago
It really sticks in your craw that you are improving the quality of data, just because that data belongs to Google? Seems petty.
- _ZeD_ 11y ago
  can I sing you the little Blobby[0] song? [0] http://www.openbsd.org/lyrics.html#39 http://www.openbsd.org/lyrics.html#39
- rm_-rf_slash 11y ago
  Same as wanting to put your money in a credit union that invests your deposits in the community instead of a bank that spends it on executive bonuses.
  - maxerickson 11y ago
    Credit Unions tend to merge with each other instead of just growing organically, I think at least in part because the administrative employees can use the increase in size to justify larger compensation.
    - rm_-rf_slash 11y ago
      Depends on where you are. I live in an isolated college town with many regional banks and one well-liked credit union. I can't speak for people who live in big cities.

Robadob 11y ago

Surely the spare word allows the dictionary of potential CAPTCHA words to add a new word for every CAPTCHA solved (sure they probably run them past many users for validation purposes). This effectively allows the CAPTCHA service's dictionary to scale/evolve continuously, preventing an anti-CAPTCHA service from 'learning' the whole dictionary. I thought this was the entire point of re-captcha, so regardless of the 'time necessary to complete' element, their case doesn't seem very well thought out.

kuschku 11y ago
The issue about this is that it is already being targeted in Antitrust suits, too. Why? because Google, through their almost-monopoly in some areas (including captchas) has gotten an unfair advantage in computer vision. I personally would prefer if Google would be forced to publish any training data and parameters for neural networks that were trained with data created by the public.
user_0001 11y ago
anti captcha (against recaptcha) works via captcha farms, the biggest being deathbycaptcha.com. $10 gets you about 10k solved captchas. They work quite well. I tend to get about a 1 out of 5 correct of the squiggly words, whereas the service is more like 4/5 I am not aware of any successful dictionary attack on recaptcha. And the only OCR techniques to bypass recaptcha was by xrumer[0] but that was a few years ago [0]xrumer: once popular forum spamming software waned in popularity / effectiveness in recent years
- mchahn 11y ago
  deathbycaptcha.com is ... > A hybrid system composed of the most advanced OCR system on the market, along with a 24/7 team of CAPTCHA solvers. An average response time of 11 seconds,... My understanding is that this is mostly humans in third-world countries staring at a screen and working for peanuts (or maybe less than the value of a peanut). I don't see how any system for recognizing humans can succeed against real humans.

jonas21 11y ago

This bit from the judge's ruling underscores how ridiculous the lawsuit is: > In addition, at oral argument, Plaintiff did not represent that if given leave to amend she could allege that had she known the second reCAPTCHA word was used to assist Google with its other services she would not have completed the reCAPTCHA. To the contrary, counsel represented that he had not asked Plaintiff and he did not know what she would say. (Dkt. No. 60 at 20:23-25.) Such question, of course, should have been asked and answered before this lawsuit was filed and pursued in two states. Regardless, it defies common sense that the answer would be yes. [1] http://boothsweet.com/wp-content/uploads/2016/02/Google-Order-Granting-Dismissal.pdf http://boothsweet.com/wp-content/uploads/2016/02/Google-Orde...

pbnjay 11y ago
This. Fraud generally requires that the victim rely on the "fradulent" statement to decide to move forward (e.g. solving the captcha). So even if you assume that the terms "free" and "security" were intentionally meant to deceive, you'd have to prove that the user would not have otherwise signed up for Gmail if those labels had been different. The fact that they didn't cover this important point is ridiculous.
- will_brown 11y ago
  Just playing devil's advocate, but look at the UI. The box I saw says "CAPTCHA" and "type these two words". So the argument for fraud would be that 50% of words Google solicited under the guise of CAPTCHA were actually used for the sole economic benefit of Google's other services. Maybe on a count for fraud the plaintiff's can't prove that they would not have created a Google account having known the 2nd word was not for CAPTCHA; however, the Plaintiffs could certainly prevail on a unjust enrichment claim. As the company who invented the anti-trust defense "competition is only a click away", Google should equally be capable of acknowledging there in absolutely no burden on Google to create 2 boxes for new users, one identified as CAPTCHA, and the other as a crowd-sourced word to be used for Google's other services.

MidoAssran 11y ago

Is it just me, or does it seem like Google is being the target of a large number of obscure law suits lately (especially in Europe)?

cbhl 11y ago

Distorted text isn't even used in reCAPTCHA all that much anymore -- Google used a Deep Convolutional Neural Network and got over 90% accuracy in reading street numbers in Street View, and 99.8% accuracy in solving distorted text reCAPTCHA (http://arxiv.org/abs/1312.6082 http://arxiv.org/abs/1312.6082). Most users will just check a "I'm not a robot" box now; and if you do get a test, it will likely be a computer vision / image labeling problem: https://googleonlinesecurity.blogspot.com/2014/12/are-you-robot-introducing-no-captcha.html https://googleonlinesecurity.blogspot.com/2014/12/are-you-ro...

ultramancool 11y ago
Really annoying too - I seem to always get the test and I hate the computer vision tests so much more than the old text based ones, they seem to always take way longer for me and I always miss an image or two the first time.
mikeash 11y ago
I wonder what will happen once there are no more problems left that 99.9% of humans can solve in a short time, but computers can't.
- cyorir 11y ago
  Generally, the point of a CAPTCHA is to prevent automated use of a service. If we get to the point where CAPTCHA's no longer work in preventing automated access to services, we need to look for atypical use of services. For example, if a computer passes a CAPTCHA in order to use gmail to automate the sending of spam emails, look for users that mass-spam; typical users won't do that. On the other hand, the computer may try to approximate the usage of a typical user to avoid detection. But if you cant distinguish automated use of your service from typical use of your service, then at that point maybe it doesn't matter so much.
  - MuEta 11y ago
    The natural extension of that argument always reminds me of this: https://xkcd.com/810/ https://xkcd.com/810/

LoSboccacc 11y ago

Ot but arstechnica is now using the shitty mobsweet ad network making reading the article impossible on mobile - and they complain when the users fight back!

xixi77 11y ago

Quite a frivolous case, nice to see the legal system working for once. One interesting thing I've learned from the court rule though: apparently software delivered online and through downloads does not qualify as a good or service under the California's Consumer Legal Remedies Act, unlike boxed software delivered on physical media (pp.14-16)

gcb0 11y ago

At least captcha worked and helped digitalize books. After google bought them and moved to useless training for their image classification, which helps nobody, i was simply banned from contributing to all sites that demand captcha. Because it simply refuses to work with my phone.

hackuser 11y ago

What concerns me is the attitude that users can be used and manipulated without their permission or knowledge; they have no choice or right to be informed, in this or in tracking or in many other situations. They are just objects of commerce to the developers, not human beings. This leads to bad practices like widespread confidentiality violations, free-to-play user manipulations [1], and the sorts of manipulation of customers practiced in places like Wall Street. My feeling these days is that either you're on the inside or you're a sucker. (On the level of fairness and justice - I don't know enough to comment on legality - I don't think this particular incident rises to the level of damages. However, Google could just display, In return for our free service, please help our computers read this word! Even Google's computers can't do everything - read more about it <here>. - Why not disclose it if you are doing nothing wrong? If you don't disclose it, you're manipulating people.) [1] http://toucharcade.com/2015/09/16/we-own-you-confessions-of-a-free-to-play-producer/ http://toucharcade.com/2015/09/16/we-own-you-confessions-of-...

dhimes 11y ago
I have to agree here. What's wrong with disclosure? It seems to me that the judge ruled on the implementation and missed the concept- and may have set an unwitting precedent. Suppose Microsoft used a small bit of your unused processing power for some of their own work in order to increase their profits. It's likely few would ever know of this. Is that ok? Somehow I would feel...violated. Like somebody else just took rights to something I thought was under my control. Note: I don't use gmail, and I view ads on google. The reCaptcha I've seen has been on third-party sites. So their doing this seems to be outside of the 'contract' I have with them. I'm not doing this to pay for a service of theirs that I use- at least not directly.
grkvlt 11y ago
From the reCAPTCHA site itself: > reCAPTCHA offers more than just spam protection. Every time our CAPTCHAs are solved, that human effort helps digitize text, annotate images, and build machine learning datasets. This in turn helps preserve books, improve maps, and solve hard AI problems. That seems like disclosure to me?

ChuckMcM 11y ago

I have always found Google's way of getting data at the same time as some other activity pretty clever. Offering a free 4-1-1 (directory) service for phones so that you can collect millions of minutes of voice recognition code with various accents? Seemed pretty brilliant to me. Using a security technique to fix hard to fix otherwise OCR errors? also pretty clever. When you think like that, all sorts of interesting things come out. For example, something I don't think anyone has done but could be pretty amazing, put a camera in a store which tracks gazes, set up a set of mannequins with different looks and compare male and female gaze time. Sure it used to be you could change the window display and count sales, this is so much more informative than that. So are you using their interactions for your own benefit? Sure. Is this a new phenomena? No. I totally think the judge called it on this one.