4 ms·

I have literally never been asked to solve one of those image recognition recaptchas in my main browser profile. (While it happens once a month in incognito win

by jsnell 8y ago

I have literally never been asked to solve one of those image recognition recaptchas in my main browser profile. (While it happens once a month in incognito windows.) So it's not at all obvious that known humans are being asked to solve captchas just for the purposes of training.

nolok 8y ago
For the record, the one I meant are the second solving: sometimes recaptcha ask you one (I believe it is genuine), and then after you succeed it ask again with another set of picture (sometimes another question), which I believe is for training. I have it semi-regularly (like once or twice a week); but I also have some automated tooling using my account AND I travel quite often so location testing probably flag we as weird. Remember that the original recaptcha also did that with text to help train OCR (it would send a known word and a unknown word, if you succeeded at the known word it would record the answer for the unknown one, and after enough people gave the same one train it as the proper OCR'ed text).
- jobigoud 8y ago
  "second solving"? I've sometimes been asked ten times in a row to click on the shop fronts or traffic light tiles.
  - saagarjha 8y ago
    I feel that this depends on how fingerprintable your browser is. Signed in to Chrome? You’ll likely see nothing. But logged out and using Safari’s Private Browsing? You will likely have to do it multiple times.
    - Izkata 8y ago
      I have the feeling this is also configurable somewhere. A few months ago, my bank added the image-clicking one to its login screen. I've always gotten past that one on the first attempt. But with the same profile on the same Firefox, all other sites always take multiple tries.
      - unilynx 8y ago
        The 'owner' of the recaptcha API key can set a slider on a scale from "Easiest for users (some security features turned off)" to "Most secure (all security features turned on)"
      - darkpuma 8y ago
        Google allows website operators to configure how sensitive they want v2 or v3 to be, but in practice it makes little difference. The only apparent effect on v2 is that the least sensitive setting permits the use of the noscript version. The least sensitive setting of v2 will still harshly hassle and punish users who aren't in compliance with google, unless they use the noscript version. Then and only then, it lets people through for correct answers every time.
  - dorgo 8y ago
    I keep selecting random tiles until the captures get easier and I can solve one without thinking. It takes about 10 to 20 iterations.
Semaphor 8y ago
It barely asks you if you use Chrome and/or are logged into a Google account. ReCaptcha is how you make Firefox and IE/Edge users without a google account hate you. Because believe me, if I get asked to click another 50 cars without good reason, (3 failed logins would be a good reason) I'll blame your site for being dumb and not google.
- hhjinks 8y ago
  And here's my anecdotal evidence: I have only been served image captchas since forever. I literally thought the warped text captchas had been phased out. I literally never see anything but image captchas.
  - rincebrain 8y ago
    I think the warped text ones have been phased out, but AFAIK it's in favor of the ones people mentioned above and some black magic for detecting humans without needing to click things. (I work for Google, on nothing related to browsers or recaptcha, this is purely my impression from encountering it logged in and out.)
  - darkpuma 8y ago
    > I literally thought the warped text captchas had been phased out. It has been since March. https://developers.google.com/recaptcha/docs/versions#v1 https://developers.google.com/recaptcha/docs/versions#v1

by jsnell 8y ago

nolok 8y ago

For the record, the one I meant are the second solving: sometimes recaptcha ask you one (I believe it is genuine), and then after you succeed it ask again with another set of picture (sometimes another question), which I believe is for training. I have it semi-regularly (like once or twice a week); but I also have some automated tooling using my account AND I travel quite often so location testing probably flag we as weird. Remember that the original recaptcha also did that with text to help train OCR (it would send a known word and a unknown word, if you succeeded at the known word it would record the answer for the unknown one, and after enough people gave the same one train it as the proper OCR'ed text).

jobigoud 8y ago
"second solving"? I've sometimes been asked ten times in a row to click on the shop fronts or traffic light tiles.
- saagarjha 8y ago
  I feel that this depends on how fingerprintable your browser is. Signed in to Chrome? You’ll likely see nothing. But logged out and using Safari’s Private Browsing? You will likely have to do it multiple times.
  - Izkata 8y ago
    I have the feeling this is also configurable somewhere. A few months ago, my bank added the image-clicking one to its login screen. I've always gotten past that one on the first attempt. But with the same profile on the same Firefox, all other sites always take multiple tries.
    - unilynx 8y ago
      The 'owner' of the recaptcha API key can set a slider on a scale from "Easiest for users (some security features turned off)" to "Most secure (all security features turned on)"
    - darkpuma 8y ago
      Google allows website operators to configure how sensitive they want v2 or v3 to be, but in practice it makes little difference. The only apparent effect on v2 is that the least sensitive setting permits the use of the noscript version. The least sensitive setting of v2 will still harshly hassle and punish users who aren't in compliance with google, unless they use the noscript version. Then and only then, it lets people through for correct answers every time.
- dorgo 8y ago
  I keep selecting random tiles until the captures get easier and I can solve one without thinking. It takes about 10 to 20 iterations.

Semaphor 8y ago

It barely asks you if you use Chrome and/or are logged into a Google account. ReCaptcha is how you make Firefox and IE/Edge users without a google account hate you. Because believe me, if I get asked to click another 50 cars without good reason, (3 failed logins would be a good reason) I'll blame your site for being dumb and not google.

hhjinks 8y ago
And here's my anecdotal evidence: I have only been served image captchas since forever. I literally thought the warped text captchas had been phased out. I literally never see anything but image captchas.
- rincebrain 8y ago
  I think the warped text ones have been phased out, but AFAIK it's in favor of the ones people mentioned above and some black magic for detecting humans without needing to click things. (I work for Google, on nothing related to browsers or recaptcha, this is purely my impression from encountering it logged in and out.)
- darkpuma 8y ago
  > I literally thought the warped text captchas had been phased out. It has been since March. https://developers.google.com/recaptcha/docs/versions#v1 https://developers.google.com/recaptcha/docs/versions#v1