Google is testing a new CAPTCHA that asks you to make hand gestures on camera (cybernews.com)
from StopTech@lemmy.today to privacy@lemmy.ml on 17 Jun 09:51
https://lemmy.today/post/54940710

#privacy

threaded - newest

RandomDude@lemmy.ca on 17 Jun 10:04 next collapse

đź–• this is a hand gesture

lemonhead2@lemmy.world on 17 Jun 10:14 next collapse

im not enabling my camera…

doctor0710@lemmy.zip on 17 Jun 10:16 next collapse

If anything, that’s even easier to defeat than the current captchas, no? Like with a VTuber thing, or something like that. This feels more like it’s about collecting face data

gary_host_laptop@lemmy.ml on 17 Jun 12:25 collapse

i remember reading that the first captcha with the weird letters was used to train OCR, the second one with the click cars thing was to train self driving cars, so maybe this is to train ai to have a better understanding of hand gestures

comrade_twisty@feddit.org on 17 Jun 12:35 collapse

You’re not thinking far enough, it’s probably for humanoid AI robots of the future so they can mimick human movements.

cerebralhawks@lemmy.dbzer0.com on 17 Jun 10:19 next collapse

Cool. I don’t have a camera hooked up to my Mac desktop. I specify Mac because Macs have a cool feature where you can use your iPhone (if you have one) as a camera. So basically I just prop my iPhone up against the monitor, screen away from me, and I now have the best webcam. Except, you have to manually do it, some website isn’t just gonna initiate the connection. It’s gonna ask the computer for camera permission. The computer handles all that on the back end. It’s the same on Windows. If you’re using Firefox, specifically, and you deny a website camera access, it doesn’t see a computer with a camera. Then what? I guess it just falls back on the old one?

Same with my MacBook. It does have a camera, but I don’t have to give any website permission to access it.

Just say no to this kind of shit. You might not be able to with Android, though I’m fairly certain you can. You might not be able to with Chrome, though I know now you can. But the way Chrome killed ad blocking for the most part? Yeah, they can do that with other privacy protections. Don’t use Chrome.

orca@orcas.enjoying.yachts on 17 Jun 11:07 next collapse

Another method to get facial recognition data. This goes hand in hand with the other ID submission crap. Fuck off, Google.

MrSoup@lemmy.zip on 17 Jun 11:59 next collapse

Looks like they want free data to improve their image generation for hand gestures.

Obituarykidney@lemmy.world on 17 Jun 12:00 next collapse

If I get hit with one of these I’m pressing back on that website. I don’t have a camera and I’m not giving them that much data for free.

It’ll get to a point where using captcha will lose the website traffic and sales and it won’t be worth it in the long run if people don’t give in to this shit.

fubbernuckin@lemmy.dbzer0.com on 17 Jun 19:52 collapse

I wish I could go up to everyone who complies and fine them $20 for the damage they’ve done to society.

Chapo_is_Red@hexbear.net on 17 Jun 12:12 next collapse

Good luck. My camera is busted

maegul@lemmy.ml on 17 Jun 12:17 next collapse

One my most embarrassing personal moments with tech is that I wasn’t immediately revolted when I learned that captcha was being used to farm training data. I just didn’t think it through, and didn’t think I needed to think it through. A hang over from the era of Google in the naughties I suppose.

Still … fool me once …

otacon239@lemmy.world on 17 Jun 12:45 next collapse

ReCaptcha was actually a positive effort with the goal being to help OCR tons of old books, so that’s worth something.

Lemmchen@feddit.org on 17 Jun 14:06 collapse

The original Google captcha was back in the Don’t Be Evil time, if I’m not mistaken. No shame in believing them back then.

Marthirial@lemmy.world on 17 Jun 12:31 next collapse

[ ] Are you a Crip?

[ ] Are you a Blood?

voxel@feddit.uk on 17 Jun 13:19 collapse

You can go back to image or audio captcha via the buttons below, still sucks too.

teyrnon@sh.itjust.works on 17 Jun 12:32 next collapse

It will be a cold day in hell before I enable my camera to do anything for google or any of those fucking silicon valley parasites. I will quit the fucking internet first.

racoon@lemmy.ml on 17 Jun 13:56 collapse

Or it will just be another day at work because your employer created you a google profile with all the relevant information for you to log in

teyrnon@sh.itjust.works on 17 Jun 13:57 collapse

My boss is a dick, but he hates those bastards as much as I do.

racoon@lemmy.ml on 17 Jun 16:27 next collapse

my ultimate boss is a faceless entity composed of a myriad of bureaucrats and they have assigned me a profile on microsoft. I don’t know what’s worse

Pieisawesome@lemmy.dbzer0.com on 18 Jun 01:50 collapse

I have a profile on Microsoft AND Google at my new job… I guess that’s worse. They don’t even have federated identity setup so it’s two different (cause different password rules) passwords

FineCoatMummy@sh.itjust.works on 17 Jun 22:25 next collapse

Mine’s the exact opposite. Not a dick at all, good in most ways TBH. But doesn’t hate google, and really should.

Auli@lemmy.ca on 18 Jun 12:23 collapse

Sure but doesn’t mean corporate won’t require it.

tunetardis@piefed.ca on 17 Jun 14:25 next collapse

Others questioned whether the technology will remain effective. X user Peter Austin (@PeterAusti61402) claimed he had bypassed the challenge using a virtual camera and AI-generated animations.

Damn, I’ve been reluctant so far to make sloppy AI animations like so many people are, but I may be forced to do so now to protect my privacy?

dreadbeef@lemmy.dbzer0.com on 17 Jun 14:35 next collapse

get your verification cans ready

FineCoatMummy@sh.itjust.works on 17 Jun 15:29 next collapse

Anyone know the % of web sites using google’s captcha?

I found a site that might have the info, but … wait for it… … … it blocked me for being a bot! Seriously!

FineCoatMummy@sh.itjust.works on 17 Jun 16:34 next collapse

They’re gonna have to have SOME alternative to comply with the ADA, right?

Coz believe it or not Google, you miserable fucks, there are ppl who don’t even have hands. There are ppl who have 'em but are unable to move them b/c of paralysis. There are ppl with probs like cerebral palsy who can’t make hand gestures on demand.

Stop pissing in everybody’s cheerios, google. Stop making everybody’s lives shittier.

Mikelius@lemmy.ml on 18 Jun 05:25 collapse

Alternatives for a11y, by Google? That’s silly. They haven’t brought accessibility to even their main products like Google drive, I highly doubt they care. Those of us with specific requirements for accessibility are the least of their concerns.

schroedingersKoala@piefed.ca on 17 Jun 17:12 next collapse

Ahhh, we are finally in “make the peasants dance for our enjoyment” phase. Yeah, they can fuck right off. Time to eat the rich, high time, or widely use that French invention to cut off arguments from rich fucks.

ThunderQueen@lemmy.world on 18 Jun 01:30 collapse

Fr, do we need to schedule a date or something to mob through the country and eleminate these owning class twats?

iByteABit@lemmy.ml on 17 Jun 23:52 next collapse

I’ve got a variety of fun and friendly hand gestures the AI can learn

kittenzrulz123@lemmy.dbzer0.com on 18 Jun 00:23 next collapse

I have a hand gesture for you Google, here’s the New York bird 🖕

NigelFrobisher@aussie.zone on 18 Jun 00:54 next collapse

<img alt="" src="https://aussie.zone/pictrs/image/bf8571bb-9f69-41b6-a93c-70366d103db2.jpeg">

ButteredBread@sh.itjust.works on 18 Jun 01:25 next collapse

my pc does not even have a camera lol

spacegoat@lemmy.world on 19 Jun 04:49 collapse

Microsoft required all OEM laptops to have webcams though. That’s a significant amount of devices.

whatiswrongwithyou@lemmy.ml on 18 Jun 01:45 next collapse

Show verification can

Whats_your_reasoning@lemmy.world on 18 Jun 01:51 next collapse

I read the article for the information, but the thing I really want to comment on is this box on the page:

<img alt="" src="https://lemmy.world/pictrs/image/a404fe39-696a-4af2-b4ad-bb82ea4f4bd8.png">

I have ads blocked, but this is in the middle of the article, so I don’t know if it’s affiliated with the site or if it’s an ad that slipped through the cracks. Either way, wtf?

Yeah, sure anonymous box, I totally trust you! Here, take all my passwords!

PolarKraken@lemmy.dbzer0.com on 18 Jun 02:23 next collapse

YIKES

mfed1122@discuss.tchncs.de on 19 Jun 04:56 collapse

Honestly suspicious and makes me think the whole site is a trap

<img alt="picture of me entering fuck you as a password to their weird password checker" src="https://discuss.tchncs.de/pictrs/image/c2eb5117-ccd3-4cf6-9dee-67bbb766f8d9.png"> ah shit my password

Mensh123@lemmy.world on 19 Jun 05:25 collapse

I mean, it does seem to do something. I generated a random one and it told me it was safe. For now! The box then told me to get a password manager with a link to its own password managers article and set up 2FA. The password manager list is just a collection of affiliate links with filler text btw.

If someone wants to figure out what the site sends to figure this stuff out and if it’s more than just rockyou.txt, go ahead.

bountygiver@lemmy.ml on 19 Jun 06:22 collapse

F12 reports using that tool sends the password as a form body field to their site (which means their server can read the request in plain text), which responses a json with just a field of how many “matches”.

There’s no way to know whether they log the requests (so you should assume they do in uncertainty like this), but it certainly does the real thing of comparing it against a “leaked password” database in their servers. (If you want to check against these, there are real password dumps with list of leaked passwords you can ctrl+f yourself in your own PC, but even then they are likely not complete list as there still exist other database leaks of hashes where your password is not bruteforced yet to be put in plaintext but someone with more time might have gotten to it)

Mensh123@lemmy.world on 19 Jun 18:45 collapse

Ah, OK. I was hoping it would maybe do something clever like hash it and send a byte so the server can give it a small list of passwords to check locally but I guess they didn’t bother…

umbrella@lemmy.ml on 19 Jun 05:41 next collapse

github.com/hacksider/deep-live-cam

Pure_Psykosis@lemmy.ca on 19 Jun 09:43 collapse

I was JUST looking for something like this. This needs to be either backed up somewhere or moved off github

umbrella@lemmy.ml on 19 Jun 17:38 collapse

i thought the same thing. be the change you want to see!

Bloomcole@lemmy.world on 19 Jun 05:48 next collapse

what camera?

W3dd1e@lemmy.zip on 19 Jun 06:05 collapse

đź–•

Am I doing it right?