Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
much thanks to @gary_host_laptop for the logo design :)
cross-posted from: https://lemmy.ml/post/47972724
i encountered this for the first time today while attempting to read something on archive.today.
i confirmed that decoding the qrcode using a computer and following the URL it contains is insufficient; the error it gave directed me here which is what the linked screenshot is of.
the old type of captcha remains available too, for now:
This is step one.
Step two is id verification via play services before you're even allowed to scan the QR code.
This is going to erode privacy as we know it on the internet and I can't see any feasible escape.
People without a mobile device are fucked out of being able to pass a captcha
As if this isn't a way for them to associate multiple sessions on multiple specific devices with one another, this is just another avenue for data collection, period. Hidden under the guise of "more secure."
I imagine scammers are already thinking of ways to use this for phishing too
Captcha has been one of the greatest google acquisitions ever.
They acquired it under the guise of improving OCR and have since morphed it into an AI data farm (how else is google lens gonna know what objects are what?) and now total insight into a users every single action from desktop to mobile, tying it all together into a surveillance nightmare.
I can guess the permissions that the recaptcha app needs now. Probably something akin to root access with all datapoints and considerations you could think of.
You don't have to drink a verification can, but you do need to buy a verification phone.
Looks like a very good way to shoo actual humans off of your website.
Sorry, my faith in users is basically zero. These dummies will go to websites that tell them to copy code and run it with win+r. They're morons and will do anything if a website promises them something.
Unfortunately true for a lot of people, but what's the solution?
At work? Crowdstrike is kind of the training wheels for people who don't want to use application whitelisting or group policy that disables users running various terminals.
Training isn't the answer, because training is basically an industry propped up by knowbe4 from convincing cybersecurity insurance that it's the right thing. We do training where I work and everyone falls for the same old shit, raise information, pay information, promotion information and performance review content. Doesn't matter how many indicators of compromise are hidden in the message, but they'll gladly just keep clicking along or running code that is prompted because the desire sensor overrides the training.
Anywho, nowadays not giving users admin rights is simply not enough. The script creating people often know how to use privilege escalation exploits without issue to gain control even when a user can't. Really need a tool that can detect behavior and block it, or lock the system down somehow.
Nice captcha. Would be a shame if someone intentionally injected malicious code that had users scan a QR code under the guise of security.
There's no way this is ADA compliant.
With the way the Trump admin is going I'm surprised they haven't totally dismantled the ADA already.
Clicking the headphone icon to hear the audio option is the way to bypass this if you get one.
I once saw fake captcha scam that reuired scaning QR code to infect device. It looks exactly like that.
I know it has been said already but how stupid is it to teach users the pattern of randomly scanning QR codes. So ironic given that reCaptcha is for security in some sense.
It's the same with ID verification. For your safety you need to start giving random websites your drivers license or passport..
It’s not for your security :(((
Hype up AI.
Everyone starts scraping the internet to obtain training data for their AI.
To block the scrapers, countless sites implement stricter bot detection tools.
The owners of the bot detection tools now effectively hold all of the internet by its throat, deciding who can access what and extorting more and more data from you to verify you're human.
Fucking genius.
Without a google account there will be many sites I can't visit. I'll look at such sites the same way as I look at paywalled sites.
No malicious site would ever fake this kind of flow in order to get someone to scan a dangerous QR code. Nope, that would never happen.
That's it. JavaScript was a mistake. Time to go back to HTML only pages
Any website that chooses to use this service will simply not get my traffic. If enough people feel the same, those websites will lose clicks and eventually tell Google to pound sand.
Imagine the utter hubris on these fuckers to think that people will get a google device just to access a website.
Or to think that an average user sitting at home would run to another room to grab their phone so they can verify themselves on the desktop just to visit blackcougar.com
They're using the fact that everyone else both already owns a Google or iOS device, and does everything on those devices, to punish desktop and alt mobile OS users.
The fact that this is going on right as AluminumOS is down the pipes, and right as rigged parts prices threaten to kill desktops as an option to begin with makes this especially sus.
The way things are going right now, I won't be surprised if we see a computing future where you're either on a Google or Apple-controlled device, or you're on a thin client tied to a cloud subscription, and you won't own your tech anymore.
Bezos' 'Give up your PC and rent from our cloud' threat is sounding less and less like a threat and more and more likely to become reality.
One more reason to not use google anything
This will be used on sites like Experian, Chase, IRS, DMV, etc. It's a way to track and deanonymize everyone.
If you haven’t already divested from Google and its related services then now is the time.
Oh boy! Another way to fingerprint your devices! Scammer are sleeping good tonight with these new verifications
We are making side loading harder because scammers are using "these" tactics to install malware on your devices.
It's totally fine when we use the same tactics to install malware on your device.
Fuck absolutely everything about this.
LOL, fuck off. How about instead I move on to somewhere less hostile toward the user instead?
How soon before you can't access reCAPTCHA-encumbered sites on desktops at all beyond AluminumOS?
Is an android emulator able to bypass this? Just curious - I haven't started the degoogle process.
I would guess not, given the other recent news about degoogled Android devices also being unable to pass reCAPTCHA.
Yeah, it requires a phone that Google can positively identify and connect to a real name / google account somehow.
Graphene OS won't work, so this is a non starter for me. Any website using this will simply cease to exist in my eyes.
No.
Can I just drink the Verification Can, or do I need to stand up and shout, "MCDONALD'S®!"
Just another reason to not use Google.
A good way to force the user to use by Google controlled devices and to download Google services for more control by Google. Also a good way that the user show the middle finger to Google, using alternatives.
