With high resolution cameras, indefinite data retention and third party data leaks being a matter of when, not if, this seems like a perfect way to get your fingerprints stolen by organized crime syndicates worldwide. If not next year, then in 5-10 years. And when they get used for “something”, what happens when you go on vacation somewhere and you’re detained at that country’s border for a crime that happened N years before your very first entry into that country ever happened?<p>With as many Ph.D.s as there are at Google, you’d think they’d be smarter than to come up with this. Which is how you know the PMs are in charge, not the smart people.
I saw a post on the GrapheneOS forum of someone who was accosted by Google with this requirement, so they are certainly using it.<p>It's interesting the parallels of Google's recaptcha and Cloudflare turnstile.<p>Cloudflare is free, no image selector, allows VPNs and Tor for the most part, just 0 click with a good ip reputation and 1 click with a bad one.<p>Recaptcha is paid, trains waymos, sucks millions of hours of human time, asks for camera access, asks for a phone attestation, blocks VPNs/Tor.<p>Thank god less sites are using ReCAPTCHA.<p>Looking forward to some other solutions gaining prominence eventually as well.<p>Like that Anime girl one.
Not gonna happen. Ever.<p>If a web requires me to do this to access it, I simply refuse.<p>The last time I needed some web was my electricity company - sent them a ticket with a complaint. They replied with some bs like "your browser is simply not supported" so I kept sending them the same ticket over and over again until I got a real response and it seems they decided to change the system.<p>To use my favorite quote: That's all it takes really, pressure, and time... :)
Companies do and will simply label customers who repeatedly "protest" in such a manner as "vexatious" and use that as a justification to deny service. Utilities will probably be last due to regulations around providing utilities but other important companies will do it.
Yeah I’ve already warned my discord friends that the moment I have to show my ID I’m out of there without a goodbye. It sucks, but I just can’t compromise further. Personal ID’s are an absolute red line.
We have to have ability to stream video instead of accepting browsers webcam request. I propose Firefox to go first with the implantation. I would like to automate it with AI to stream every time a different video with different person
What if you don't have a cam or a hand?
What if you have all that, but waving is problematic due to non-functional motor control?
You are then our of the normal probability distribution and out of luck, it's not profitable to cater for you for the company.
can't even do onlyfans
There will be an Accessibility options? hear a phrase and repeat it or similar
SYNTAX ERROR
Imagine getting your hand wrongly blacklisted as a fake, and then someday down the road you make a wrong gesture during an online interview and now your real-name is also on the suspicion list.
Is it weird that my reaction to all of this is that I am just going to drop these websites when they ask me for this?
I've already dropped sites/services where annoyance-invasion/usefulness ratio is above 50% but I'm afraid it will be unavoidable in some cases.<p>At least I know what kind of hand gesture they will get first :)
No, but what would you do if it's a government required service?
The IRS wanted a full 3d scan of my face to prove identity AFTER I already had a working account used every year for the past 3+ years.<p>They asked for feedback after I canceled the login, I gave very candid feedback in a form.<p>Then they asked if I would give an interview.<p>You know why I wanted to log in? To claim a $7 refund.<p>They ended up mailing it.
Then you sign in using your eID which is both highly secure and tied to your personal identity. Government services don't need 3rd party are-you-a-human verification, not when your account is tied to your identity.<p>(this is from the Netherlands where you can use digID [0] to sign into government services and ID-bound 3rd parties like insurance, mortgages, pensions etc)<p>[0] <a href="https://en.wikipedia.org/wiki/DigiD" rel="nofollow">https://en.wikipedia.org/wiki/DigiD</a>
Then I would opt not to use the computer for this task, and instead call, visit, mail, or fax the government agency.
Oh I wish! Had to solve one in order to pay a bill.<p>The internet is dead.
Just as with paywalls, it's just easier to close the page if prompted with this. Many things are not that interesting if an effort is required.
Doesn't surprise me at all and seems like a good solution to the problem of human verification. It won't take long for AI to catch up to that, but this captcha method might hold for a couple of months.<p>Not sure what problem everybody here is having with this. The alternative would be device certificate stuff (ala did Apple sign for this being a proper Apple device?). Having to shake your hand sounds a lot more privacy friendly.
Are you guys seriously worried that Google is gonna steal your secret handshakes?
Finding additional ways to waste more of people’s time on the web isn’t a good solution to anything. Doing so in a privacy invading way from a company that has a vested interest in collecting as much data as possible, exhausting all utility from it and butters its bread in an industry which specifically is built around disrespecting the time of other people is just never going to fly.<p>Like seriously, if I have to turn on a camera to get through a recaptcha then the website doing it can fuck right the hell off with extreme prejudice. My web browser is not allowed to access my cameras for any reason, no exceptions.
>this captcha method might hold for a couple of months<p>So stripping away user privacy even more is justified for implementing an already obsolete verification method?
Well, actually I am worried about it. It needs to happen just once. Or for google to have a different kind of CEO (as companies are wont to).
> Not sure what problem everybody here is having with this.<p>For starters, it's extremely invasive (camera on to pay a bill - wtf?), has unclear privacy implications and questionable accessibility (to put it mildly).
I could see this being privacy friendly if the user could see exactly what Google was using.<p>For instance, terminalcam, gives just enough data to reveal liveness without necessarily giving enough information about identity.<p><a href="https://gitlab.com/here_forawhile/terminalcam" rel="nofollow">https://gitlab.com/here_forawhile/terminalcam</a>
What camera?
The non-mandatory internet that requires any captcha at all is becoming non-existent to me.
can a unique fingerprint (no pun intended) be extracted from hand geometry
I'm also now seeing a 'scan this QR code' captcha when using Archive.org links.<p>Can't be bothered... so instead using the accessibility option of listening to a phrase instead.
My openclaw agent gonna find some way around it.
It is extremely disappointing to see Reclaim’s reporting whiff so badly on this. Yeah, they got the gist of the outrage, but they missed the real grift underneath. They slipped a massive loophole under the radar here and Reclaim misses it entirely: Google promised to delete the <i>footage</i>, but not the data derived <i>from</i> the footage. To use 23andme as an analogy, the company tended to dispose of old genetic sample kits after a while, but retained the derived data from those kits identifiably associated with specific people. Google is only promising to dispose of the costly data to store, the raw biometric material that takes up precious terabytes, but unlike 23andme will never <i>voluntarily</i> permit you to review and remove the results of their biometric analysis if you. Reclaim, if you’re reading this, here’s what you missed:
<a href="https://docs.cloud.google.com/recaptcha/docs/hand-gesture-verification" rel="nofollow">https://docs.cloud.google.com/recaptcha/docs/hand-gesture-ve...</a><p>> <i>Google does not retain any images or videos of a user's hand gestures</i><p>This is the sole statement of data deletion provided, and nowhere does Google state any other retention policy for derivations whatsoever, whether anonymized or associated, from that hand data; referring instead to the generic terms of service privacy policy:<p>> <i>Other data is deleted or anonymized automatically</i><p>The privacy policy does not have a specific callout for biometric derivations, and so they may choose to anonymize rather than delete your biometric data.<p>> <i>some data we retain for longer periods of time when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention</i><p>Recaptcha exists for the exlclusice purpose of security, fraud and abuse prevention, and so by this clause they may retain your <i>identified</i> hand scan biometrics for as long as they see fit.<p>> <i>We will share personal information outside of Google if we have a good-faith belief that disclosure of the information is reasonabl[e]</i><p>They will give your identified hand biometrics upon request to anyone who can make a convincing case to them.<p>> <i>We may share non-personally identifiable information publicly and with our partners</i><p>And they grant themselves the right to start selling their dataset of humanity’s hand biometrics for personal profit with none shared back to those whose biometrics are now a commodity to be bought and sold.<p>(Note that Google is not alone in this; see also <i>gestures at much of tech</i>. But that’s no excuse for the grift going unreported by a journalistic entity that’s been around long enough to know better how these reassurance-by-omission scams work. I was already upset with Google but I still expect better of those trying to stop them.)
things are getting out of hand :D