Google is testing a new CAPTCHA that asks you to make hand gestures on camera

6 days ago by StopTech to c/privacy

Google's new hand-gesture verification system uses camera-based movements to distinguish humans from bots, prompting privacy concerns among some users despite assurances that videos are deleted after processing.
RandomDude 101 points 6 days ago

🖕 this is a hand gesture

path: 0 24298353, hotness: undefined, score: 101, children: 0
teyrnon 80 points 6 days ago

It will be a cold day in hell before I enable my camera to do anything for google or any of those fucking silicon valley parasites. I will quit the fucking internet first.

path: 0 24300131, hotness: undefined, score: 80, children: 6
racoon 22 points 6 days ago

Or it will just be another day at work because your employer created you a google profile with all the relevant information for you to log in

path: 0 24300131 24301280, hotness: undefined, score: 22, children: 5
teyrnon 19 points 6 days ago

My boss is a dick, but he hates those bastards as much as I do.

path: 0 24300131 24301280 24301302, hotness: undefined, score: 19, children: 4
racoon 13 points 5 days ago

my ultimate boss is a faceless entity composed of a myriad of bureaucrats and they have assigned me a profile on microsoft. I don't know what's worse

path: 0 24300131 24301280 24301302 24303504, hotness: undefined, score: 13, children: 1
Pieisawesome 3 points 5 days ago

I have a profile on Microsoft AND Google at my new job… I guess that’s worse. They don’t even have federated identity setup so it’s two different (cause different password rules) passwords

path: 0 24300131 24301280 24301302 24303504 24310703, hotness: undefined, score: 3, children: 0
FineCoatMummy 6 points 5 days ago

Mine's the exact opposite. Not a dick at all, good in most ways TBH. But doesn't hate google, and really should.

path: 0 24300131 24301280 24301302 24308464, hotness: undefined, score: 6, children: 0
Auli 3 points 5 days ago

Sure but doesn't mean corporate won't require it.

path: 0 24300131 24301280 24301302 24316429, hotness: undefined, score: 3, children: 0
MrSoup 36 points 6 days ago

Looks like they want free data to improve their image generation for hand gestures.

path: 0 24299692, hotness: undefined, score: 36, children: 0
orca 30 points 6 days ago

Another method to get facial recognition data. This goes hand in hand with the other ID submission crap. Fuck off, Google.

path: 0 24299046, hotness: undefined, score: 30, children: 0
dreadbeef 30 points 6 days ago

get your verification cans ready

path: 0 24301792, hotness: undefined, score: 30, children: 0
Whats_your_reasoning 27 points 5 days ago

I read the article for the information, but the thing I really want to comment on is this box on the page:

I have ads blocked, but this is in the middle of the article, so I don't know if it's affiliated with the site or if it's an ad that slipped through the cracks. Either way, wtf?

Yeah, sure anonymous box, I totally trust you! Here, take all my passwords!

path: 0 24310708, hotness: undefined, score: 27, children: 5
PolarKraken 8 points 5 days ago

YIKES

path: 0 24310708 24310992, hotness: undefined, score: 8, children: 0
mfed1122 5 points 4 days ago

Honestly suspicious and makes me think the whole site is a trap

picture of me entering fuck you as a password to their weird password checker

ah shit my password

path: 0 24310708 24328505, hotness: undefined, score: 5, children: 3
Mensh123 5 points 4 days ago

I mean, it does seem to do something. I generated a random one and it told me it was safe. For now! The box then told me to get a password manager with a link to its own password managers article and set up 2FA. The password manager list is just a collection of affiliate links with filler text btw.

If someone wants to figure out what the site sends to figure this stuff out and if it's more than just rockyou.txt, go ahead.

path: 0 24310708 24328505 24328727, hotness: undefined, score: 5, children: 2
bountygiver 4 points 4 days ago

F12 reports using that tool sends the password as a form body field to their site (which means their server can read the request in plain text), which responses a json with just a field of how many "matches".

There's no way to know whether they log the requests (so you should assume they do in uncertainty like this), but it certainly does the real thing of comparing it against a "leaked password" database in their servers. (If you want to check against these, there are real password dumps with list of leaked passwords you can ctrl+f yourself in your own PC, but even then they are likely not complete list as there still exist other database leaks of hashes where your password is not bruteforced yet to be put in plaintext but someone with more time might have gotten to it)

path: 0 24310708 24328505 24328727 24329283, hotness: undefined, score: 4, children: 1
Mensh123 1 point 3 days ago

Ah, OK. I was hoping it would maybe do something clever like hash it and send a byte so the server can give it a small list of passwords to check locally but I guess they didn't bother…

path: 0 24310708 24328505 24328727 24329283 24338189, hotness: undefined, score: 1, children: 0
FineCoatMummy 25 points 5 days ago

They're gonna have to have SOME alternative to comply with the ADA, right?

Coz believe it or not Google, you miserable fucks, there are ppl who don't even have hands. There are ppl who have 'em but are unable to move them b/c of paralysis. There are ppl with probs like cerebral palsy who can't make hand gestures on demand.

Stop pissing in everybody's cheerios, google. Stop making everybody's lives shittier.

path: 0 24303606, hotness: undefined, score: 25, children: 1
Mikelius 7 points 5 days ago

Alternatives for a11y, by Google? That's silly. They haven't brought accessibility to even their main products like Google drive, I highly doubt they care. Those of us with specific requirements for accessibility are the least of their concerns.

path: 0 24303606 24312569, hotness: undefined, score: 7, children: 0
doctor0710 19 points 6 days ago

If anything, that's even easier to defeat than the current captchas, no? Like with a VTuber thing, or something like that. This feels more like it's about collecting face data

path: 0 24298459, hotness: undefined, score: 19, children: 0
schroedingersKoala 18 points 5 days ago

Ahhh, we are finally in "make the peasants dance for our enjoyment" phase.
Yeah, they can fuck right off. Time to eat the rich, high time, or widely use that French invention to cut off arguments from rich fucks.

path: 0 24304107, hotness: undefined, score: 18, children: 1
ThunderQueen 2 points 5 days ago

Fr, do we need to schedule a date or something to mob through the country and eleminate these owning class twats?

path: 0 24304107 24310529, hotness: undefined, score: 2, children: 0
maegul 15 points 6 days ago

One my most embarrassing personal moments with tech is that I wasn’t immediately revolted when I learned that captcha was being used to farm training data. I just didn’t think it through, and didn’t think I needed to think it through. A hang over from the era of Google in the naughties I suppose.

Still … fool me once …

path: 0 24299910, hotness: undefined, score: 15, children: 2
otacon239 12 points 6 days ago

ReCaptcha was actually a positive effort with the goal being to help OCR tons of old books, so that’s worth something.

path: 0 24299910 24300318, hotness: undefined, score: 12, children: 0
Lemmchen 9 points 6 days ago

The original Google captcha was back in the Don't Be Evil time, if I'm not mistaken. No shame in believing them back then.

path: 0 24299910 24301399, hotness: undefined, score: 9, children: 0
lemonhead2 13 points 6 days ago

im not enabling my camera....

path: 0 24298439, hotness: undefined, score: 13, children: 0
W3dd1e 13 points 4 days ago

🖕

Am I doing it right?

path: 0 24329111, hotness: undefined, score: 13, children: 1
thermal_shock 8 points 4 days ago

path: 0 24329111 24329758, hotness: undefined, score: 8, children: 0
ButteredBread 12 points 5 days ago

my pc does not even have a camera lol

path: 0 24310483, hotness: undefined, score: 12, children: 1
spacegoat 2 points 4 days ago

Microsoft required all OEM laptops to have webcams though. That’s a significant amount of devices.

path: 0 24310483 24328449, hotness: undefined, score: 2, children: 0
tunetardis 11 points 6 days ago

Others questioned whether the technology will remain effective. X user Peter Austin (@PeterAusti61402) claimed he had bypassed the challenge using a virtual camera and AI-generated animations.

Damn, I've been reluctant so far to make sloppy AI animations like so many people are, but I may be forced to do so now to protect my privacy?

path: 0 24301645, hotness: undefined, score: 11, children: 0
Obituarykidney 10 points 6 days ago

If I get hit with one of these I'm pressing back on that website. I don't have a camera and I'm not giving them that much data for free.

It'll get to a point where using captcha will lose the website traffic and sales and it won't be worth it in the long run if people don't give in to this shit.

path: 0 24299698, hotness: undefined, score: 10, children: 1
fubbernuckin 3 points 5 days ago

I wish I could go up to everyone who complies and fine them $20 for the damage they've done to society.

path: 0 24299698 24306333, hotness: undefined, score: 3, children: 0
cerebralhawks 10 points 6 days ago

Cool. I don't have a camera hooked up to my Mac desktop. I specify Mac because Macs have a cool feature where you can use your iPhone (if you have one) as a camera. So basically I just prop my iPhone up against the monitor, screen away from me, and I now have the best webcam. Except, you have to manually do it, some website isn't just gonna initiate the connection. It's gonna ask the computer for camera permission. The computer handles all that on the back end. It's the same on Windows. If you're using Firefox, specifically, and you deny a website camera access, it doesn't see a computer with a camera. Then what? I guess it just falls back on the old one?

Same with my MacBook. It does have a camera, but I don't have to give any website permission to access it.

Just say no to this kind of shit. You might not be able to with Android, though I'm fairly certain you can. You might not be able to with Chrome, though I know now you can. But the way Chrome killed ad blocking for the most part? Yeah, they can do that with other privacy protections. Don't use Chrome.

path: 0 24298487, hotness: undefined, score: 10, children: 0
iByteABit 9 points 5 days ago

I've got a variety of fun and friendly hand gestures the AI can learn

path: 0 24309513, hotness: undefined, score: 9, children: 0
whatiswrongwithyou 8 points 5 days ago

Show verification can

path: 0 24310663, hotness: undefined, score: 8, children: 0
NigelFrobisher 8 points 5 days ago

path: 0 24310228, hotness: undefined, score: 8, children: 0
FineCoatMummy 8 points 5 days ago

Anyone know the % of web sites using google's captcha?

I found a site that might have the info, but ... wait for it... ... ... it blocked me for being a bot! Seriously!

path: 0 24302606, hotness: undefined, score: 8, children: 0
Marthirial 7 points 6 days ago

[ ] Are you a Crip?

[ ] Are you a Blood?

path: 0 24300118, hotness: undefined, score: 7, children: 1
voxel 3 points 6 days ago

You can go back to image or audio captcha via the buttons below, still sucks too.

path: 0 24300118 24300772, hotness: undefined, score: 3, children: 0
umbrella 6 points 4 days ago path: 0 24328886, hotness: undefined, score: 6, children: 2
Pure_Psykosis 2 points 4 days ago

I was JUST looking for something like this. This needs to be either backed up somewhere or moved off github

path: 0 24328886 24330960, hotness: undefined, score: 2, children: 1
umbrella 1 point 3 days ago

i thought the same thing. be the change you want to see!

path: 0 24328886 24330960 24337345, hotness: undefined, score: 1, children: 0
SuspiciousCarrot78 6 points 5 days ago path: 0 24314848, hotness: undefined, score: 6, children: 0
Bloomcole 4 points 4 days ago

what camera?

path: 0 24328946, hotness: undefined, score: 4, children: 0
privacy
privacy

@lemmy.ml

login for more options
49245
4904
6038

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
  • Don't promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...