<![CDATA[So many levels of wrong here.]]>RE: https://mstdn.social/@jschauma/116610268796045193

So many levels of wrong here. Google’s newest reCAPTCHA “experiment“ tells people to scan a QR code in order to verify that they are human. Yeah, like scanning a QR code displayed by some random website is a good idea in the first place.

But of course your ability to scan the code isn’t what verifies your human nature. That QR code merely tells you that you need the reCAPTCHA app (on iOS) or newest Google Play services (on Android). In other words, you have to verify that you own a mobile device and are providing data to Google. Which they promise not to share with the website, like that’s what I’m worried about.

This obviously excludes people who don’t have a smartphone, have a de-Googled smartphone or simply don’t want to feed their data to Google. And it again ties a large chunk of the web to Google services. If reCAPTCHA wasn’t evil before (a questionable statement), it definitely is now.

]]>https://board.circlewithadot.net/topic/2a28e177-8cac-419b-b7c9-c4287da6bbe3/so-many-levels-of-wrong-here.RSS for NodeMon, 25 May 2026 15:42:48 GMTThu, 21 May 2026 19:40:00 GMT60<![CDATA[Reply to So many levels of wrong here. on Fri, 22 May 2026 09:17:57 GMT]]>@acs No, you don’t understand correctly. I recommend reading the second paragraph.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/WPalant/statuses/116617476649659653https://board.circlewithadot.net/post/https://infosec.exchange/users/WPalant/statuses/116617476649659653Fri, 22 May 2026 09:17:57 GMT<![CDATA[Reply to So many levels of wrong here. on Fri, 22 May 2026 08:53:58 GMT]]>@WPalant Does this even stop spammers/bots when they have one of the mobile phone farms with racks full of phones?
It shouldn't be too hard to just use one of these phones for a quick scan and might even be less effort than solving a captcha?

]]>https://board.circlewithadot.net/post/https://bonn.social/users/zollak/statuses/116617382392373631https://board.circlewithadot.net/post/https://bonn.social/users/zollak/statuses/116617382392373631Fri, 22 May 2026 08:53:58 GMT<![CDATA[Reply to So many levels of wrong here. on Fri, 22 May 2026 08:31:26 GMT]]>@jaj @eestileib @dpnash @WPalant ASNBank has a "browser code" system that works well without a smartphone. But I concur, shit is Android-Powered to the max here in NL.

]]>https://board.circlewithadot.net/post/https://mas.to/users/cupz/statuses/116617293768167622https://board.circlewithadot.net/post/https://mas.to/users/cupz/statuses/116617293768167622Fri, 22 May 2026 08:31:26 GMT<![CDATA[Reply to So many levels of wrong here. on Fri, 22 May 2026 06:30:30 GMT]]>@SpaceLifeForm @WPalant
This is the correct thing to do.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/Naich/statuses/116616818258197492https://board.circlewithadot.net/post/https://fosstodon.org/users/Naich/statuses/116616818258197492Fri, 22 May 2026 06:30:30 GMT<![CDATA[Reply to So many levels of wrong here. on Fri, 22 May 2026 06:04:36 GMT]]>@WPalant its also not accessible for me anymore, because I have a hard time scanning QRCodes because I am blind. Wow, now I hate captchas even more.

]]>https://board.circlewithadot.net/post/https://mstdn.games/users/svenja/statuses/116616716371317981https://board.circlewithadot.net/post/https://mstdn.games/users/svenja/statuses/116616716371317981Fri, 22 May 2026 06:04:36 GMT<![CDATA[Reply to So many levels of wrong here. on Fri, 22 May 2026 04:35:01 GMT]]>@WPalant do they display that only on PC/Mac Web-Browsers? Or do you get that thing on mobile devices as well?

]]>https://board.circlewithadot.net/post/https://nrw.social/users/Reinald/statuses/116616364107631553https://board.circlewithadot.net/post/https://nrw.social/users/Reinald/statuses/116616364107631553Fri, 22 May 2026 04:35:01 GMT<![CDATA[Reply to So many levels of wrong here. on Fri, 22 May 2026 00:44:20 GMT]]>@WPalant something like “show we 10 fingers on your hands to prove you are human” 🤦‍♂️
Hint: I personally have only 9 🤷‍♂️ — ‘cos It’s live 🤷‍♂️

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/nosenkow/statuses/116615457058564696https://board.circlewithadot.net/post/https://mastodon.social/users/nosenkow/statuses/116615457058564696Fri, 22 May 2026 00:44:20 GMT<![CDATA[Reply to So many levels of wrong here. on Fri, 22 May 2026 00:18:59 GMT]]>@WPalant

Closes tab.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/SpaceLifeForm/statuses/116615357384982429https://board.circlewithadot.net/post/https://infosec.exchange/users/SpaceLifeForm/statuses/116615357384982429Fri, 22 May 2026 00:18:59 GMT<![CDATA[Reply to So many levels of wrong here. on Thu, 21 May 2026 23:34:26 GMT]]>@WPalant

As I frequently say, fuck Giggle. It's as rapacious as Donald Trump.

]]>https://board.circlewithadot.net/post/https://mstdn.social/users/huntingdon/statuses/116615182217169951https://board.circlewithadot.net/post/https://mstdn.social/users/huntingdon/statuses/116615182217169951Thu, 21 May 2026 23:34:26 GMT<![CDATA[Reply to So many levels of wrong here. on Thu, 21 May 2026 23:30:59 GMT]]>@WPalant yeah. The main issue regarding Google's recent actions is that they are doing everything to become a digitally gated community that everyone needs to do basic things. Once you're in, there's no getting out.

It's dystopian but it's what they're doing. Google, the everything app.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/odr_k4tana/statuses/116615168637814768https://board.circlewithadot.net/post/https://infosec.exchange/users/odr_k4tana/statuses/116615168637814768Thu, 21 May 2026 23:30:59 GMT<![CDATA[Reply to So many levels of wrong here. on Thu, 21 May 2026 23:13:40 GMT]]>@WPalant this is so easy to scam Google should be ashamed of even suggesting it.

]]>https://board.circlewithadot.net/post/https://mastodon.au/users/ihayes/statuses/116615100532532391https://board.circlewithadot.net/post/https://mastodon.au/users/ihayes/statuses/116615100532532391Thu, 21 May 2026 23:13:40 GMT<![CDATA[Reply to So many levels of wrong here. on Thu, 21 May 2026 22:52:10 GMT]]>@eestileib @dpnash @WPalant Unfortunately that did not work for me in the . I had to buy a dedicated GAFAM phone for the bank or choose not to have a account

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/jaj/statuses/116615016005002794https://board.circlewithadot.net/post/https://mastodon.social/users/jaj/statuses/116615016005002794Thu, 21 May 2026 22:52:10 GMT<![CDATA[Reply to So many levels of wrong here. on Thu, 21 May 2026 22:51:20 GMT]]>@WPalant

What's really scary to me is the number of sites that will use this simply because it's free. If web sites would say "no" to this like the users do, one would hope Giggle would have to bail on it.

]]>https://board.circlewithadot.net/post/https://oldbytes.space/users/c64whiz/statuses/116615012722175076https://board.circlewithadot.net/post/https://oldbytes.space/users/c64whiz/statuses/116615012722175076Thu, 21 May 2026 22:51:20 GMT<![CDATA[Reply to So many levels of wrong here. on Thu, 21 May 2026 22:49:09 GMT]]>@WPalant or are blind

]]>https://board.circlewithadot.net/post/https://mast.benstokman.me/users/benjistokman/statuses/116615004103486020https://board.circlewithadot.net/post/https://mast.benstokman.me/users/benjistokman/statuses/116615004103486020Thu, 21 May 2026 22:49:09 GMT<![CDATA[Reply to So many levels of wrong here. on Thu, 21 May 2026 22:38:05 GMT]]>@dpnash @WPalant

One thing I'm happy about is that they're running into the limits of their capability to have the customers they have deliberately dumbed down and disempowered successfully jump through their hoops.

My bank doubled down on needing their app on a device with either Apple or Google full surveillance os, and enough of their customers were unable to get it to work that they added the option to go back to text 2fa.

I told them I'm fine with 2FA, give me a token or let me verify with my member card and a smart reader like _how I vote in European elections_. But you don't get to tell me what OS I run.

]]>https://board.circlewithadot.net/post/https://tech.lgbt/users/eestileib/statuses/116614960625036516https://board.circlewithadot.net/post/https://tech.lgbt/users/eestileib/statuses/116614960625036516Thu, 21 May 2026 22:38:05 GMT<![CDATA[Reply to So many levels of wrong here. on Thu, 21 May 2026 20:07:04 GMT]]>@WPalant Just barely an hour ago, I got a phish simulation training email at work that *contained a QR code* with the usual urgent call to action to “do the thing”, in this case, scanning a booby-trapped QR code.

Jeezus, Google.

]]>https://board.circlewithadot.net/post/https://c.im/users/dpnash/statuses/116614366814826784https://board.circlewithadot.net/post/https://c.im/users/dpnash/statuses/116614366814826784Thu, 21 May 2026 20:07:04 GMT