Wait, so reCaptcha can now require that you have an iPhone or an Android phone with Google Play Services?
This is really really bad.
And, what's worse, is it seems nobody is talking about it.
For anyone unfamiliar, Apple's App Attest and Google Play Integrity are "hardware attestation" which uses a hardware lockout to verify that you device is 'valid' and not tampered with. It sounds like good security in theory, until you think about it for more than two seconds. It effectively means that, in order to have a 'valid' device, you need to be approved by either Apple or Google. As such, it doesn't work with non-Google Android ROMs like GrapheneOS, /e/, LineageOS, etc. Once your device isn't considered valid by Play Integrity it locks you out of hundreds of apps, effectively giving Google complete monopolistic control over Android.
This change to reCaptcha brings that same monopolistic control to the web. If you thought you could be above the Apple/Google duopoly in some way, congratulations, it's officially impossible. You have to own a Google Play-certified phone or iPhone in order to use the internet in 2026.
For anyone hoping the European Union will step in, I wouldn't hold your breath.
#Google #reCaptcha #GooglePlay #PlayIntegrity