3 ms·
isnt it ultimately just a series of API calls to solve the captchas? whats to stop someone hooking the javascript, solving the images and then raising the right
by jb_s 6y ago
isnt it ultimately just a series of API calls to solve the captchas? whats to stop someone hooking the javascript, solving the images and then raising the right event ?
- milankragujevic 6y agoI would assume Google would send all mouse events to the server, then compare them with all other mouse events from all users who solve reCaptchas and then decide on a "humanness rating" of the data internally and use that alongside all other parameters to decide the probability the user is or is not a bot. You can't fake that, you can send fake events but you can't trick Google for long enough, sooner or later it would figure out a pattern and mark that pattern as a bot. Well, if it did track mouse movements, which it apparently does not. But it can start at any time.
- guru4consulting 6y agoprobably Google is already working on it. But what if the device is mobile or tablet (or touch screen laptop) where captchas are solved without mouse movement? I guess that could be the reason why Google has not implemented it yet.
- milankragujevic 6y agoPossibly. They could also track device information like motion sensors, which are available without a prompt by default on Chrome, and use the motion information from the device to decide on the randomness of the movement. In the worst case, they can just show you 5 walls of captchas and pass you.