this post was submitted on 28 May 2026
411 points (99.0% liked)

Privacy

48829 readers
661 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS
 

cross-posted from: https://lemmy.ml/post/47972724

i encountered this for the first time today while attempting to read something on archive.today.

i confirmed that decoding the qrcode using a computer and following the URL it contains is insufficient; the error it gave directed me here which is what the linked screenshot is of.

the old type of captcha remains available too, for now:

screenshot of text: Important: Mobile verification for Google Cloud Fraud Defense is an experimental challenge type in Preview. Visual and audio challenges are available as alternatives for users who can't complete mobile verification. To use them, click the Visual  or Audio  buttons.

you are viewing a single comment's thread
view the rest of the comments
[–] SnotFlickerman@lemmy.blahaj.zone 182 points 1 day ago (7 children)
  1. People without a mobile device are fucked out of being able to pass a captcha

  2. As if this isn't a way for them to associate multiple sessions on multiple specific devices with one another, this is just another avenue for data collection, period. Hidden under the guise of "more secure."

[–] MrKoyun@lemmy.world 7 points 23 hours ago (1 children)

It really should be illegal to build systems that require a user's access to any unrelated technology. You shouldn't be forced to have a phone to pay a parking fee or to get on the bus. You shouldn't need an app to charge your car. You shouldn't need to use proprietary software from one spesific company to pass a captcha on a random site.

[–] Thorned_Rose@sh.itjust.works 1 points 22 hours ago

I mostly use my phone (Pixel with GrapheneOS) as a dumb phone + calendar. But by far the biggest number of apps I have to have on it are the fucking car charger apps.

[–] Chulk@lemmy.ml 63 points 1 day ago

I imagine scammers are already thinking of ways to use this for phishing too

[–] Prove_your_argument@piefed.social 47 points 1 day ago (2 children)

Captcha has been one of the greatest google acquisitions ever.

They acquired it under the guise of improving OCR and have since morphed it into an AI data farm (how else is google lens gonna know what objects are what?) and now total insight into a users every single action from desktop to mobile, tying it all together into a surveillance nightmare.

I can guess the permissions that the recaptcha app needs now. Probably something akin to root access with all datapoints and considerations you could think of.

[–] Lumidaub@feddit.org 1 points 15 hours ago (1 children)

How would that teach Lens to recognise anything other than motorcycles and traffic lights really well?

[–] Prove_your_argument@piefed.social 2 points 15 hours ago (1 children)

I've had many, many not traffic light and motorcycle/bicycle recaptchas. They're probably leaning a bit into self driving learning the past few years.

Lens has a lot more data points nowadays after everyone's google photos was used for training for what, 10+ years at this point?

Google harvested all human typed words 15 years ago with the google library project. They've been hoarding and processing data for models forever.

[–] Lumidaub@feddit.org 1 points 13 hours ago

I was being at least partly facetious because I rarely get anything but motorcycles and traffic lights and even then it'll most likely ask me about buses or bridges. Not disagreeing that they're hoarding data :)

[–] No1@aussie.zone 16 points 1 day ago* (last edited 1 day ago)

I used to always add one incorrect tile and skip one correct tile.(It would still pass)

I thiught I was such a rebel lol

Then I figured, they'd be stupid if they didn't show the same image to multiple people...

[–] umbrella@lemmy.ml 28 points 1 day ago (1 children)

notably, this kills any alternative to android.

[–] traceur402@lemmy.blahaj.zone 14 points 1 day ago (2 children)
[–] umbrella@lemmy.ml 9 points 1 day ago

🟩 🧑‍🔧 🪠

[–] Corngood@lemmy.ml 22 points 1 day ago

You don't have to drink a verification can, but you do need to buy a verification phone.

[–] HeHoXa@lemmy.zip 11 points 1 day ago (1 children)
[–] MrKoyun@lemmy.world 2 points 23 hours ago (1 children)

The point with captchas is not really that bots can't pass them, more that its too expensive to pass them consistently with a hurtfully large enough volume of bots.

[–] HeHoXa@lemmy.zip 1 points 21 hours ago* (last edited 20 hours ago) (2 children)

I'd heard of this strategy, like making it perform some kind of costly encryption that's irrelevant to a human user but restrictively expensive for a bot army.

But does decoding a QR code apply? I never really thought about it. I guess it's an image, it's at least a little bif by comparison... but it's also in a restricted, easy to capture exclusivity, spot and maybe could be minimized to a fairly small pixel set? Idk how many key pixels you need to parse a QR code... I guess I could Google

*typo bit --> bot

[–] Axolotl_cpp@feddit.it 1 points 17 hours ago

Since a QR code is just made of squares, it can be very, very tiny

1 square = 1 pixel

[–] MrKoyun@lemmy.world 1 points 17 hours ago

I don't know much about this new captcha system, but I feel like the challenge wouldn't really be in the scanning of the qr code itself but more so on making the device you're scanning with seem legitimate. They could check usage patterns, what apps are installed, how many accounts are added and are they actively used, location and sensor data, are the hardware specifications really unusual, are they constantly trying to complete random captchas... Stuff like that to tell apart a real user's device from a bot or sandbox. The QR Code is probably just a random ID for which captcha instance the user is trying to pass.

Also I just realised this but this is probably inconvenient as hell. Like I do NOT want to constantly be picking up my phone to scan QR codes when I'm trying to go around the Internet. What if my phone is on the other side of the house? I don't want to get up and walk all the way over there! If this gets fully rolled out there may actually be a small dip on the amount of desktop users of websites because they just leave when they are hit wth this captcha instead of bothering to scan a code.

[–] adarza@lemmy.ca 11 points 1 day ago (2 children)

i have one. but it isn't android, or ios, or 'smart' in any way. it doesn't even text. it's just a telephone that fits in my pocket and connects to the cellular networks. it's all i want. it's all i use. it's all i've needed ever since i got my first one about 25 years ago.

[–] explodicle@sh.itjust.works 1 points 20 hours ago

Don't worry you're included. Simply visit one of our Accessibility Centers between 8am-9am on odd Wednesdays, with a valid birth certificate, filled-out form from here, and a notarized Charizard.

[–] leadore@lemmy.world 5 points 1 day ago* (last edited 1 day ago)

Same! Except mine does do SMS text and has the other flip phone stuff like alarms, timer, calendar.