● Covered by 1 source · 1 reportMedium impact
Google tests webcam-based reCAPTCHA that can be bypassed with stock photos
Key points
- Google's new reCAPTCHA requires hand gestures for verification.
- Testers bypassed it using a static image through OBS.
- Concerns arise about the effectiveness against automated attacks.
Overview of the New reCAPTCHA
Google is testing a new method for its reCAPTCHA system that requires users to use their webcam to perform hand gestures. This experimental feature is part of Google Cloud Fraud Defense and aims to enhance security against threats like automated account creation.
How the Hand Gesture Check Works
When the reCAPTCHA is triggered, the browser requests camera access to capture a user's hand movement. The system maps 21 points on the hand to ensure a real person is present. Google claims to delete the footage post-verification and assures users that data is not tied to their identities.
Challenges with Efficacy
Despite Google's intentions, the new system was quickly bypassed using a stock image of a hand fed through a virtual camera. Testers managed to pass the verification without any live interaction, raising questions about the effectiveness of the hand gesture check.
Implications for User Experience and Security
The gesture recognition method adds an additional layer to the existing CAPTCHA challenges but may lead to frustrations for genuine users. The test results suggest that the new method could introduce more complexity without significantly improving security from automated attacks.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Google is trialing a webcam-based reCAPTCHA that requires users to show hand gestures. However, testers quickly circumvented it using stock photos, highlighting potential weaknesses in its implementation.