I saw a post on the GrapheneOS forum of someone who was accosted by Google with this requirement, so they are certainly using it.

It's interesting the parallels of Google's recaptcha and Cloudflare turnstile.

Cloudflare is free, no image selector, allows VPNs and Tor for the most part, just 0 click with a good ip reputation and 1 click with a bad one.

Recaptcha is paid, trains waymos, sucks millions of hours of human time, asks for camera access, asks for a phone attestation, blocks VPNs/Tor.

Thank god less sites are using ReCAPTCHA.

Looking forward to some other solutions gaining prominence eventually as well.

Like that Anime girl one.

With high resolution cameras, indefinite data retention and third party data leaks being a matter of when, not if, this seems like a perfect way to get your fingerprints stolen by organized crime syndicates worldwide. If not next year, then in 5-10 years. And when they get used for “something”, what happens when you go on vacation somewhere and you’re detained at that country’s border for a crime that happened N years before your very first entry into that country ever happened?

With as many Ph.D.s as there are at Google, you’d think they’d be smarter than to come up with this. Which is how you know the PMs are in charge, not the smart people.

What if you don't have a cam or a hand?

Doesn't surprise me at all and seems like a good solution to the problem of human verification. It won't take long for AI to catch up to that, but this captcha method might hold for a couple of months.

Not sure what problem everybody here is having with this. The alternative would be device certificate stuff (ala did Apple sign for this being a proper Apple device?). Having to shake your hand sounds a lot more privacy friendly. Are you guys seriously worried that Google is gonna steal your secret handshakes?

Imagine getting your hand wrongly blacklisted as a fake, and then someday down the road you make a wrong gesture during an online interview and now your real-name is also on the suspicion list.

I could see this being privacy friendly if the user could see exactly what Google was using.

For instance, terminalcam, gives just enough data to reveal liveness without necessarily giving enough information about identity.

https://gitlab.com/here_forawhile/terminalcam

The non-mandatory internet that requires any captcha at all is becoming non-existent to me.

can a unique fingerprint (no pun intended) be extracted from hand geometry

Is it weird that my reaction to all of this is that I am just going to drop these websites when they ask me for this?

My openclaw agent gonna find some way around it.

things are getting out of hand :D