Usual disclaimers: I'm not a doctor, legal professional or financial advisor. This article is for information/education only and reflects my own opinions. It should not be taken as financial, legal or medical advice. Do your own research and never invest anything you cannot afford to lose (including your time).

16 April 2021

Why reCaptcha might bring down the mighty Google

Let me point out one thing straight away. I like Google. I'm not just saying that because DeepMind may be scanning everything I put out into the world (and I mean the world, not just the Google ecosphere). I like Google because I generally get something worthwhile from using it. Be  that this free blogging space, free email, storage, basic office apps, sat-nav with traffic alerts; generally Google does good things for the average person even if the price is no doubt some US group with a three-letter acronym being able to discover anything they like about me.


Compared to Facebook which tries to track my every move over the web by installing tracking cookies on every site possible without giving me anything useful in return, Google is an every day essential. Recently however I have been critical of YouTube - a service which gives nothing back to the everyday viewer and encourages content makers to buy into their everyone-is-a-potential-buyer mentality. I recently wrote an article about how Theta.tv is attempting to bypass the central-controlling service model and encouraging viewers by paying them (radical, I know!).


Since then, I have become increasingly aware of how frequently I am now being hit by Google's reCaptcha system. You see a while back the big G told us all that our data could be spied on over the networks we used and so they insisted that everyone should sign-in first so their data could be encrypted using the https protocol. Yes it's true that data was generally unencrypted although anything transactional would have end-to-end encryption (remember the little gold SSL padlock on the URL bar?). So in fact, all this reasonably unimportant stuff like news articles or forum posts could be viewed by anyone scanning what was going on across their network. Did I really care if a network techie could see I was reading an article in the local online rag? To be fair, anyone with those skills is generally too busy to care more about the 99% of detritus floating along networks.


The big G's quest to have us all identified down to the tiniest data point is however a reason they should be worried. As a NASA spokeswoman mentioned on their theta-stream yesterday, 'crypto' means hidden. Crypto is all about the right for privacy to do whatever you like so long as nobody gets hurt in the process. So what happens when a service like reCaptcha actually causes financial harm. Let me give an example of how this happens.


An artist decides to jump on the NFT bandwagon and release their latest project not knowing whether or not anyone will buy their work. Informed speculators see what is being released and wait patiently for the sale to begin. At the absolute second of the art going on-sale, they click buy. The reason is to get the lowest possible mint number; the equivalent of the first newspaper off the press or the first manuscript of a book. Up pops a reCaptcha box, delaying the completion of the deal and now instead of the first mint, our buyer has number 137 or 214 or any other number which isn't 1. So this is how we have proof that Google's supposed 'frictionless' system leads to... well friction, resentment and probably a good amount of justified anger too.




It seems to be only the genuine people who are disadvantaged by this system. Google's own video service (YouTube) contains a plethora of videos about how to circumvent the system using an api-key (used by developers to build this system into their projects). There's also plenty of articles online talking about how this shoddy, grainy-image monstrosity has affected their business projects and lost them customers. So why is it still used?


Maybe because it's free to website owners? So maybe people who would use a free bot to fight off unwanted bots rather than paying a moderator to check their comments/reviews are exactly the sort of people who deserve to be losing customers. In an era when jobs are increasingly under attack from these digital misfits, it reminds me of how a previous employer showed they cared about their employees by giving everyone a contact number to an outsourced care and advice service. I think you can guess what everyone thought about that.


The Fixes
========

So what can you do if reCaptcha decides to block you from validating these spot-bot-checks? Well there's the commando approach of finding an extension or service to do away with them completely or if this seems a bit radical, you can just turn everything off and go do something else for a while. You should also check your browser is up-to-date and you could also try these temporary fixes


To be quite honest, I'm sure the big G could actually be a lot more helpful when it comes to fixing this issue. They could at least attempt to identify which device on your network appears to be generating this supposedly high number of searches. Occam's razor would suggest that all things being normal, the device I'm currently using is the one at fault. Of course this might not be the case if another networked device was hacked, but when my PC is being punished and my network stats clearly show an absence of heavy network usage, never mind search requests... well all I'm saying is something just doesn't add up. Draw your own conclusions.