How do modern CAPTCHAs work?

By letting Google examine your browsing history (among other things).

The more you know 🌠

https://piped.video/watch?v=tbvxFW4UJdU

#Captcha #Google #DataPrivacy #LetsDeGoogle

Piped

An alternative privacy-friendly YouTube frontend which is efficient by design.

@alice If I am able to avoid ads maybe they don't have enough information to know if I am human or bot?

Are we creating two Internets? The internet accessible to people without adblockers and the internet accessible to everyone, also to bots.

@labrador @alice Yes. I remember listening in a podcast a listener saying that they used pi-hole to block everything and got challenged with complex captchas much more often.

@eliocamp @labrador @alice The trick is not to stick with pi hole alone.

Use it as a last defence.

I still have my ad blockers in my regular browsers.
(blocking much nearer to the app layer has the benefit of the blocking being less crude, e.g. modern adblockers often also remove adblock detectors)

@labrador @alice I get the traffic lights thingy all the time. So I guess your assumptions are correct.

@alice super interesante, google ha creado una manera opaca de usar un robot que solo identifica humanos ¿qué puede salir mal? Y lo hemos hecho entre todos y no sabemos casi nada de como funciona pero evidentemente requiere in monton de cómputo y datos de cada persona para funcionar...

No para mi gracias!

@alice yeah, every time I click one of those and it doesn’t require me to identify motorcycles, I have failed to protect my privacy. ☹️

@alice with Cloudflare it's also about what kind of IP address you connect from and possibly location data they associate with IP addresses.

Sites that work without JavaScript enabled at all in some countries, can only be accessed by letting Cloudflare's proprietary JavaScript run in other countries.

@alice
@alice

Ah, so that's why I get 6 "find the traffic light" captchas. I block as much tracking as I can

@hellomiakoda @alice
Same here. Sometimes they don’t work at all.
@alice That explains why I fail reCAPTCHAs so much; I don't give access to my browser history & I usually use a touchscreen.

@alice This is a fun take on this: https://youtu.be/4VrLQXR7mKU?si=u1lkikN38ThJK4gG

"In Victoria Warmerdam's short film, a series of failed Captcha tests plunges a woman into a strange new reality."

“I’m Not a Robot” (2025 Academy Award Winner) | The New Yorker Screening Room

In Victoria Warmerdam’s short film, a series of failed Captcha tests plunges a woman into a strange new reality. Still haven’t subscribed to The New Yorker o...

YouTube
@dsh1705 @alice
The irony is strong with this one...
@alice i feel better about "failing" so many now! 🙃
@alice This is why I block ReCaptcha and everything "protected" behind it. Also one more confirmation that my choice to block all of Google on all sites except the Invidious 3ed party Youtube scraper is the correct choice.

@alice
So, Google has solved a problem they substantially helped create and their solution is to further invade everyone's privacy.

Great.

@alice If you have anti-tracking plugins you get shown the image grid again to perform free labor.
@alice 100%. For Google and Cloudflare, the definition of "bot" includes "humans we can't identify".
@alice there are more privacy-friendly alternatives tho...
@alice so, if a company (other than google) enforces me to use recaptcha, they make me giving google access to my browser hidyory, without having my consent? If I open a site with this recaptcha I wasn't told about it ... there was no link before
@alice interesting, thanks. My browser is configured to block all cookies, set "do not track" and disable JavaScript. reCAPTCHA is still working. I guess a lot of engineering effort was spent to solve all those limitations.

@alice
> How do modern CAPTCHAs work. By letting Google examine your browsing history (among other things)

Which is why anyone building ethical tech needs to refuse any "services" provided by DataFarmers, including CAPTCHAs. Doing without their functions until they can be replaced by other ethical tech creators.

@smallcircles

@alice so constantly having to click stupid pictures around the internet means google doesnt know what i am doing or who i am? hmm good. captchas kind of feel satisfying now. :)
@alice funny thing: whenever I see a captcha I purposly chnage my trajectory to the checkbox, instead of going direct to it I also go a bit over it and back. I get like wayyyy less image solving problems as before. Truly a great system

@alice yet more reasons why CAPTCHAs just shouldn't be used. Everything a CAPTCHA does can be performed better by other designs (e.g. an increasing time back off on failure) that don't wreck privacy, have good UX and can be used by vision impaired people.

CAPTCHAs should've died in the early 00s when they were first mooted.

@alice well....it kinda explains why when I'm o a private window I have to click 100s of images on captcha before it let's me continue
@alice good video! here’s another that recently came out. ever since then it’s more obvious why i need to check if i’m a robot more when using a vpn https://youtu.be/VTsBP21-XpI?si=UhGWYd44Vgjq0olr
Why reCAPTCHA is Spyware

YouTube
@alice
Captchas: the best way to know your adblockers are working!

@alice The thing about bots "going straight to check the box" in recapcha seem pretty inept to me. How could you not just randomize a little variation and invent some kind of random history ?

Feels pretty easy.

@alice
So maybe I missed it, but what to do about it? Privacy plugins? Choice of browser? Don't click the box? Nothing, it's too late?