Websites have long been plagued by bots that scrape email addresses and content, post spam and, more recently, try to brute-force user passwords on a huge scale. They will log in as if there were no CAPTCHA at all bar the logo telling them it’s running.Īnything below a threshold chosen by the site owner, say 0.7, and the website can block or restrict access to certain parts of the site or ask for additional verification by implementing an “action” tag to pages. Google hasn’t explained how it arrives at the score (presumably to make it harder to game) but the implication is that once it has modelled each site’s visitor traffic, humans should score 1.0 or thereabouts and be allowed through without interruption.Īs far as the visitor is concerned, nothing will have happened. Instead, it will risk-score each visitor from 0.0 (bad) to 1.0 (good), passing that score back to the website owner to decide how to react. After 20 years of impertinently asking web users to prove they’re human beings, Google thinks it has finally worked out how to rid the web of CAPTCHAs (Completely Automated Public Turing test to tell Computers and Humans Apart) forever.Ĭalled reCAPTCHA v3, it’s an API that claims it can model a website’s interaction with users so well that it will never need to ask anyone to tick a box let alone drain their will to live by solving a tedious visual puzzle that keeps repeating itself.
