cross-posted from: https://lemmy.ml/post/47972724

i encountered this for the first time today while attempting to read something on archive.today.

i confirmed that decoding the qrcode using a computer and following the URL it contains is insufficient; the error it gave directed me here which is what the linked screenshot is of.

the old type of captcha remains available too, for now:

screenshot of text: Important: Mobile verification for Google Cloud Fraud Defense is an experimental challenge type in Preview. Visual and audio challenges are available as alternatives for users who can't complete mobile verification. To use them, click the Visual  or Audio  buttons.

screenshot of google support webpage with text: To complete the mobile verification, you must use a compatible mobile device. If verifying on iOS/iPadOS device with version 15.0-16.4, download the reCAPTCHA app in the App Store. After installation, return to the challenge to try again. If verifying on Android device with Google Play Services version older than 25.41.30, upgrade to the latest Google Play Services version. After upgrading, return to the challenge to try again. Scan to Verify You're Human. Use your phone's camera app to scan this QR code. This securely links your device. Mobile Verification. Verification will initialize the reCAPTCHA app on your device.
you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 5 months ago (5 children)

Android emulators exist and are usable by bots.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 5 months ago (3 children)

    So they SS the QR code, scan it and continue?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 5 months ago

    May have to stream a video of the screen into a scanner app, but shouldn't be difficult anyway.

    One of the forms of digital ID in use in my country now has a new way to use it, which the government websites use now. You always needed a mobile device for this one anyway (phone holds the private keys and you have to enter the PIN 1 or PIN 2 depending on whether you're authenticating or authorizing something), but it used to be that you could enter your ID code and get prompted for the PIN (with a verification number to make sure you're responding to the prompt you think you're responding to), now it's either on-device from the default browser to the app, OR on desktop you have to scan a QR code that's a moving target, it changes a couple of times a second so you couldn't send a screenshot to someone else to scan. This is meant to prevent scams where someone gets you to just enter your PIN over a phone call.

    I don't know if the google thing is similar though or if it's a static QR there.

  • source
  • parent