Research Findings:

  • reCAPTCHA v2 is not effective in preventing bots and fraud, despite its intended purpose
  • reCAPTCHA v2 can be defeated by bots 70-100% of the time
  • reCAPTCHA v3, the latest version, is also vulnerable to attacks and has been beaten 97% of the time
  • reCAPTCHA interactions impose a significant cost on users, with an estimated 819 million hours of human time spent on reCAPTCHA over 13 years, which corresponds to at least $6.1 billion USD in wages
  • Google has potentially profited $888 billion from cookies [created by reCAPTCHA sessions] and $8.75–32.3 billion per each sale of their total labeled data set
  • Google should bear the cost of detecting bots, rather than shifting it to users

“The conclusion can be extended that the true purpose of reCAPTCHA v2 is a free image-labeling labor and tracking cookie farm for advertising and data profit masquerading as a security service,” the paper declares.

In a statement provided to The Register after this story was filed, a Google spokesperson said: “reCAPTCHA user data is not used for any other purpose than to improve the reCAPTCHA service, which the terms of service make clear. Further, a majority of our user base have moved to reCAPTCHA v3, which improves fraud detection with invisible scoring. Even if a site were still on the previous generation of the product, reCAPTCHA v2 visual challenge images are all pre-labeled and user input plays no role in image labeling.”

  • BarqsHasBite@lemmy.world
    link
    fedilink
    English
    arrow-up
    216
    ·
    edit-2
    2 个月前

    I kinda figured. It was annoying to do one, but then they wanted you to do two or three and that’s absurd. Whenever it comes up now, I usually just close out.

    • Bezier@suppo.fi
      link
      fedilink
      English
      arrow-up
      66
      arrow-down
      1
      ·
      2 个月前

      they wanted you to do two or three and that’s absurd

      Yea how about 20

      • LucidNightmare@lemm.ee
        link
        fedilink
        English
        arrow-up
        36
        ·
        2 个月前

        VPN? Google will just go in a loop with these things, so I just stopped using Google completely.

        • Bezier@suppo.fi
          link
          fedilink
          English
          arrow-up
          11
          ·
          edit-2
          2 个月前

          No. But it’s also not like I get 20 constantly, it was just the worst I’ve seen. Usually it’s 2 to 5, I think.

          I assume they’re just collecting data on how many are users willing to do.

          • LucidNightmare@lemm.ee
            link
            fedilink
            English
            arrow-up
            13
            ·
            2 个月前

            One time I did five in a row, because I use VPNs for everything, and realized after the 5th time that it would have been easier to just use bing so I do that first now. Google has turned into my last last resort, which is quite funny, because that’s where Bing used to be. Lmao

        • I Cast Fist@programming.dev
          link
          fedilink
          English
          arrow-up
          8
          ·
          2 个月前

          Whenever I’m on a private window the captchas just keep on coming. Trying to reset your Steam password via the program will also trigger an infinite loop of captchas, you HAVE to use a browser.

      • Dudewitbow@lemmy.zip
        link
        fedilink
        English
        arrow-up
        9
        arrow-down
        1
        ·
        2 个月前

        if you have to do that many, you either have some privacy setting on or on a flagged ip given from a VPN

          • catloaf@lemm.ee
            link
            fedilink
            English
            arrow-up
            6
            ·
            2 个月前

            Most people don’t, most bots do. You look more like a bot, so you get extra challenges.

          • Dudewitbow@lemmy.zip
            link
            fedilink
            English
            arrow-up
            6
            ·
            2 个月前

            its abnormal to them because vpns are often also used by bad actors. your use is not abnormal but its a there are other people misusing it making it worse for everyone else.

            • Landsharkgun@midwest.social
              link
              fedilink
              English
              arrow-up
              0
              arrow-down
              1
              ·
              2 个月前

              Wow, way to blame individuals who take basic precautions instead of the corporations who are blantly invading your privacy. Good job making the world a better place, bud.

      • sramder@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        2 个月前

        I tried to order some components on Digikey a few months ago and I’m still mentally scarred. Probably did a few hundred of those things over the course of 2 weeks.

    • Fisch@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      20
      ·
      2 个月前

      Some captchas have also just gotten obvious AI training. “Click on the living being in this image”, “Select every image of the same object as in this example image”. And the images you have to select look obviously AI generated.

    • dinckel@lemmy.world
      link
      fedilink
      English
      arrow-up
      11
      ·
      2 个月前

      At a certain point I did like 10 of them, and then ended up closing the page, cause it never let me in, all because I was on a vpn

    • CosmoNova@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 个月前

      Funny thing is they stop asking if you do them really slowly. Almost as if to tell you, you‘re too inefficient to even be an unpaid intern or something. Anyway, if they annoy you, take your time.