3 ms·
ReCaptcha is already a man-in-the-middle for any non-Google property. This is just switching to another “man” that is less annoying.
by oefrha 4y ago
ReCaptcha is already a man-in-the-middle for any non-Google property. This is just switching to another “man” that is less annoying.
- iLoveOncall 4y agoIt's adding rather than switching. I doubt Apple has services present on most website, but Google definitely does even without ReCaptcha, such as Analytics, Adsence, etc.
- chaosbolt 4y ago>It's adding rather than switching. I doubt Google has a device present in most peoples' pockets, but Apple definitely does even without iCaptcha, such as the iPhone 13, iPad Air 5th gen, etc.
- iLoveOncall 4y agoHum, Android has a 71.45% market share for mobile devices, versus only 27.83% for iOS...
- deleted 4y ago[deleted]
- stjohnswarts 4y ago"only"
- iLoveOncall 4y agoIn the context of the argument that chaosbolt was making.
- marmarama 4y agoNo, it is fundamentally different, because firstly, it requires the client device to be locked down enough - and to monitor your activity enough - that it can provide attestation that the user is human, and secondly, it ties that attestation to an Apple ID so Apple knows exactly which Apple ID accessed which website at what time. ReCaptcha requires neither of these privacy-invading or gatekeeping things. If this becomes standard, this is the end of the open web as we know it, because you will only be able to access many websites if you are using an approved, locked-down browser in a locked-down computing environment, backed by a tech giant who can provide the attestation and ID service. If you care at all about the open web, this must be resisted at all costs.
- matthias509 4y agoIt is not true that Apple will know what web sites were visited. The article states “the device manufacturer or attester only knows the minimum amount of device data required for attestation. It doesn't know the destination URL or the user's IP address.”
- nybble41 4y agoThat's assuming that the issuer, mediator, and destination are all distinct entities who don't communicate with each other except as described in the protocol. If they are the same entity, or they collaborate, all those nice privacy guarantees disappear. And the destination—not the user—decides which issuers & mediators they accept.