3 ms·

ReCAPTCHA (A Google Service) Privacy Concerns

12 points by AutoDisorder 5y ago

jgrahamc 5y ago
The actual title of this two year old blog is "Moving from reCAPTCHA to hCaptcha"
sschueller 5y ago
Funny title as I have privacy concerns when it comes to cloudflare/hCaptcha as well. What do people use these days as an open source (self hosted) alternative to recaptcha/hCaptcha that is accessible for people with disabilities?
- harabat 5y ago
  Seems like FriendlyCaptcha [0] might tick the boxes. Here's the author talking about it [1]. [0]: https://friendlycaptcha.com/ https://friendlycaptcha.com/ [1]: https://news.ycombinator.com/item?id=24921288 https://news.ycombinator.com/item?id=24921288
  - charcircuit 5y ago
    FriendlyCaptcha is not even a captcha. It's just a client side rate limiter.
- eatbots 5y ago
  hCaptcha really doesn't care who you are, and has no incentive to do so. Pretty different economic model than an ad seller like Google. People who build their own generally end up switching to a service like hCaptcha once they start getting attacked. Not a simple problem, as any solution you put in place needs to constantly evolve if you are protecting anything of value. (disclosure: work there)
charcircuit 5y ago
>and hopefully eventually eliminate altogether the number of CAPTCHAs we issue This suggests that Cloudflare wants to eventually transition to banning "people" with no way to actually access the site in case of a false positive. I don't see the elimination of CAPTCHAs as being a good thing.
izacus 5y ago
Heh, hCaptcha is the only thing I dread and hate more than ReCAPTCHA. It pretty much always triggers and it always wants me to find something very american, like US school busses on images where it's not really clear what they actually expect of me. These services that use us as free workforce need to go away.
- lurtbancaster 5y ago
  Every captcha I've encountered thus far has been pretty Americentric, and almost by definition, discriminatory against non-Americans[1]. Doubly so against non-Americans with disabilities. Captcha makers really need to A/B test their product across a wider global sample of people, before they deploy. On hcaptcha being worse, for those of us using Tor Browser, hcaptcha is significantly less painful than recaptcha - https://news.ycombinator.com/context?id=25227431 https://news.ycombinator.com/context?id=25227431 [1] - https://shkspr.mobi/blog/2017/11/captchas-dont-prove-youre-human-they-prove-youre-american/ https://shkspr.mobi/blog/2017/11/captchas-dont-prove-youre-h...
  - eatbots 5y ago
    hCaptcha is in fact tested this way, and has pretty consistent accuracy across hundreds of countries: https://www.hcaptcha.com/post/do-captchas-really-discriminate-against-non-americans https://www.hcaptcha.com/post/do-captchas-really-discriminat... (disclosure: work there)
AutoDisorder 5y ago
People make good points about hCaptcha being as bad as ReCAPTCHA. Are there any alternatives to captchas? Because captchas seem to be discrimating against people outside of the western world, discriminate against people with disabilities, have lots of privacy concerns, are being used to train google AIs, etc.
- harabat 5y ago
  I commented about FriendlyCaptcha [0] elsethread. [0]: https://news.ycombinator.com/item?id=30345606 https://news.ycombinator.com/item?id=30345606

12 points by AutoDisorder 5y ago

The actual title of this two year old blog is "Moving from reCAPTCHA to hCaptcha"

Funny title as I have privacy concerns when it comes to cloudflare/hCaptcha as well. What do people use these days as an open source (self hosted) alternative to recaptcha/hCaptcha that is accessible for people with disabilities?

harabat 5y ago
Seems like FriendlyCaptcha [0] might tick the boxes. Here's the author talking about it [1]. [0]: https://friendlycaptcha.com/ https://friendlycaptcha.com/ [1]: https://news.ycombinator.com/item?id=24921288 https://news.ycombinator.com/item?id=24921288
- charcircuit 5y ago
  FriendlyCaptcha is not even a captcha. It's just a client side rate limiter.
eatbots 5y ago
hCaptcha really doesn't care who you are, and has no incentive to do so. Pretty different economic model than an ad seller like Google. People who build their own generally end up switching to a service like hCaptcha once they start getting attacked. Not a simple problem, as any solution you put in place needs to constantly evolve if you are protecting anything of value. (disclosure: work there)

charcircuit 5y ago

>and hopefully eventually eliminate altogether the number of CAPTCHAs we issue This suggests that Cloudflare wants to eventually transition to banning "people" with no way to actually access the site in case of a false positive. I don't see the elimination of CAPTCHAs as being a good thing.

izacus 5y ago

Heh, hCaptcha is the only thing I dread and hate more than ReCAPTCHA. It pretty much always triggers and it always wants me to find something very american, like US school busses on images where it's not really clear what they actually expect of me. These services that use us as free workforce need to go away.

lurtbancaster 5y ago
Every captcha I've encountered thus far has been pretty Americentric, and almost by definition, discriminatory against non-Americans[1]. Doubly so against non-Americans with disabilities. Captcha makers really need to A/B test their product across a wider global sample of people, before they deploy. On hcaptcha being worse, for those of us using Tor Browser, hcaptcha is significantly less painful than recaptcha - https://news.ycombinator.com/context?id=25227431 https://news.ycombinator.com/context?id=25227431 [1] - https://shkspr.mobi/blog/2017/11/captchas-dont-prove-youre-human-they-prove-youre-american/ https://shkspr.mobi/blog/2017/11/captchas-dont-prove-youre-h...
- eatbots 5y ago
  hCaptcha is in fact tested this way, and has pretty consistent accuracy across hundreds of countries: https://www.hcaptcha.com/post/do-captchas-really-discriminate-against-non-americans https://www.hcaptcha.com/post/do-captchas-really-discriminat... (disclosure: work there)

AutoDisorder 5y ago

People make good points about hCaptcha being as bad as ReCAPTCHA. Are there any alternatives to captchas? Because captchas seem to be discrimating against people outside of the western world, discriminate against people with disabilities, have lots of privacy concerns, are being used to train google AIs, etc.

harabat 5y ago
I commented about FriendlyCaptcha [0] elsethread. [0]: https://news.ycombinator.com/item?id=30345606 https://news.ycombinator.com/item?id=30345606