3 ms·

The optimist in me thinks that if browsers started to disallow third party cookies, ReCaptcha might have to adapt to the change and make it easier to solve if t

by ldjb 8y ago

The optimist in me thinks that if browsers started to disallow third party cookies, ReCaptcha might have to adapt to the change and make it easier to solve if third party cookies are blocked. After all, if they didn't, they'd risk website owners moving away from ReCaptcha because visitors could no longer interact with the site. The pessimist in me thinks that if a browser were to disallow third party cookies, users might simply switch to a different browser that does allow them.

mjburgess 8y ago
Users tend to blame websites rather than browsers when the websites don't work. So by using bad CAPTCHAs, i'd guess, users would more liekly blame those sites using them.
rqs 8y ago
> The optimist in me thinks that if browsers started to disallow third party cookies, ReCaptcha might have to adapt to the change and make it easier to solve if third party cookies are blocked. That needs to bring everybody to the same table, Firefox will not do that alone and Google Chrome is not there for nothing. Basically, Google must accept the proposal of disabling third-party cookies by default which will effect their income negatively, so they may just refuse to implement that feature for Chrome and even may prevent that feature from become a standard. Sad.
- eugeniub 8y ago
  Chrome already has a "Block third-party cookies" feature in Privacy and security > Content settings > Cookies. Kinda hard to find though.
eugeniub 8y ago
I don't think it has so much to do with reCAPTCHA as much as it has to do with Cloudflare and website owners themselves. Most reCAPTCHA challenges come in the form of Cloudflare challenge passage pages. Website owners have 5 options to choose from regarding challenges:[1] — Essentially off: Challenges only the most grievous offenders — Low: Challenges only the most threatening visitors — Medium: Challenges both moderate threat visitors and the most threatening visitors — High: Challenges all visitors that have exhibited threatening behavior within the last 14 days — I’m Under Attack!: Should only be used if your website is under a DDoS attack (Visitors will receive an interstitial page while we analyze their traffic and behavior to make sure they are a legitimate human visitor trying to access your website) I think a lot of companies set it to "High" and forget about it, not realizing that it's ruining the experience for a lot of users. [1]: https://www.cloudflare.com/a/firewall/ebelinski.com#security_level https://www.cloudflare.com/a/firewall/ebelinski.com#security...
- user5994461 8y ago
  It doesn't ruin the experience of anyone except a couple of overly technical users and customers in the wrong locations. It's very good at blocking malicious traffic though and it's totally worth losing a pair of users for that.
  - eugeniub 8y ago
    Yes, it's the users that are wrong!

by ldjb 8y ago

mjburgess 8y ago

Users tend to blame websites rather than browsers when the websites don't work. So by using bad CAPTCHAs, i'd guess, users would more liekly blame those sites using them.

rqs 8y ago

> The optimist in me thinks that if browsers started to disallow third party cookies, ReCaptcha might have to adapt to the change and make it easier to solve if third party cookies are blocked. That needs to bring everybody to the same table, Firefox will not do that alone and Google Chrome is not there for nothing. Basically, Google must accept the proposal of disabling third-party cookies by default which will effect their income negatively, so they may just refuse to implement that feature for Chrome and even may prevent that feature from become a standard. Sad.

eugeniub 8y ago
Chrome already has a "Block third-party cookies" feature in Privacy and security > Content settings > Cookies. Kinda hard to find though.

eugeniub 8y ago

I don't think it has so much to do with reCAPTCHA as much as it has to do with Cloudflare and website owners themselves. Most reCAPTCHA challenges come in the form of Cloudflare challenge passage pages. Website owners have 5 options to choose from regarding challenges:[1] — Essentially off: Challenges only the most grievous offenders — Low: Challenges only the most threatening visitors — Medium: Challenges both moderate threat visitors and the most threatening visitors — High: Challenges all visitors that have exhibited threatening behavior within the last 14 days — I’m Under Attack!: Should only be used if your website is under a DDoS attack (Visitors will receive an interstitial page while we analyze their traffic and behavior to make sure they are a legitimate human visitor trying to access your website) I think a lot of companies set it to "High" and forget about it, not realizing that it's ruining the experience for a lot of users. [1]: https://www.cloudflare.com/a/firewall/ebelinski.com#security_level https://www.cloudflare.com/a/firewall/ebelinski.com#security...

user5994461 8y ago
It doesn't ruin the experience of anyone except a couple of overly technical users and customers in the wrong locations. It's very good at blocking malicious traffic though and it's totally worth losing a pair of users for that.
- eugeniub 8y ago
  Yes, it's the users that are wrong!