• Google is making it mandatory to have Play Services for its next-generation reCAPTCHA system on Android.

  • Your phone will need to be running Play Services version 25.41.30 or greater when the system asks you to scan a QR code for verification.

  • This hurdle means that de-Googled phones will fail the verification test by default.

  • x00z@lemmy.world
    link
    fedilink
    English
    arrow-up
    33
    ·
    23 hours ago

    A lot of Android bot devices simulate (or even ARE) a full phone with a legit Play Store and other Google services.

    This requirement is enforced vendor lock in. Nothing more.

  • MuteDog@lemmy.world
    link
    fedilink
    English
    arrow-up
    17
    ·
    1 day ago

    This requirement will kick in the moment the system suspects suspicious activity. At that point, reCAPTCHA will forgo the old image puzzles and require you to scan a QR code with your smartphone to prove you’re human.

    How is this going to work if you’re browsing the internet on your phone??

    • Wispy2891@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      12 hours ago

      How is this going to work if you’re browsing the internet on your phone??

      Easy, they force you to install an app, just click the link and agree to all the permissions and cookies and stuff. It might be malware, it might be legit, who knows?

      official Google screenshot

      Google copying UI workflows from literal malware developers…

  • skisnow@lemmy.ca
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    2
    ·
    24 hours ago

    if legit users fail Google’s captcha, then site owners will stop using Google for captcha

  • systemglitch@lemmy.world
    link
    fedilink
    English
    arrow-up
    12
    ·
    1 day ago

    I’ve scanned 4 QR codes in my life. 2 were not what I was told they would be.

    I will never scan a QR code again.

  • Wispy2891@lemmy.world
    link
    fedilink
    English
    arrow-up
    46
    ·
    2 days ago

    This is awesome news for scammers:

    1. Fake page will say “you need to scan this qr code to verify you’re human”
    2. Users normally dismisses this shit, but it has become normal nowadays, take out the phone to scan it
    3. Qr code opens a page on totallynotascam.com that say “you need to install this totally safe APK on your device for verification 😉”
    4. APK passes the new useless developer “verification” as the scammer either used a hacked dev account or just paid $25 with a stolen id + stolen credit card
    5. User see the message “APK verified by Google play protect” and would totally believe the bullshit, giving all the possible permissions to the app
  • 9tr6gyp3@lemmy.world
    link
    fedilink
    English
    arrow-up
    118
    ·
    2 days ago

    If you’re a web dev, and you implement this, just know you won’t receive my web traffic. Ill go live with the other robots and we will start our own internet with blackjack and hookers.

  • Joanie Parker@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    1 day ago

    Honestly. It’s terrible, but i might actually have to give Apple money for my next phone.

    I’m just done with Android at this point.

    We had a good run, but it’s over.

      • Joanie Parker@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        18 hours ago

        “They are building walls around my open garden. If I’m going to jail might as well be club fed”

        There I fixed it for you.

        Fuck apple and fuck Google.

        Give me an actual Linux alternative.

  • Zak@lemmy.world
    link
    fedilink
    English
    arrow-up
    78
    arrow-down
    1
    ·
    2 days ago

    That means if Google’s verification system gets widely adopted, browsing the web could become a headache.

    Using a phone to scan a QR code in order to access a website on my desktop is a headache even if it has no dependencies in particular.

    • limonfiesta@lemmy.world
      link
      fedilink
      English
      arrow-up
      18
      ·
      2 days ago

      Unless it was the website I needed inorder to receive an organ donation, I would just close it.

      I could claim that’s an act of righteous protest, but really I just know that absent my needing a new liver, there’s no website I would ever care enough about to get me to scan a QR code just to keep browsing.

  • wabafee@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    edit-2
    16 hours ago

    Captcha in general are annoying to customers there is no point having them today too be fair. I would consider bot visits these days as potential costumers seeing how they can buy stuff online now. If your blocking your sites because your afraid they are scraping and using it for training. Then you are just blocking the small timers likely those people who wants to democratized AI like Deepseek. While the biggest culprit like Google’s web crawlers have free rain to train on your data. Those who are determined will would just pass that to captcha farm.

    • wabafee@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      12 hours ago

      Even worst there is a huge privacy concern here. Google would associate who’s browsing anonymously in desktop with their phones which Google has more access on your information. It is already a privacy concern before but at that time they go in a roundabout way, today we just give them the platter.

  • ennof@feddit.org
    link
    fedilink
    English
    arrow-up
    25
    ·
    2 days ago

    “Google’s next-gen reCAPTCHA system could spell trouble for any website that implements it as no de-Googled phone user will care to use it”