They explained that reCAPTCHA was designed to block Selenium browser automation engines, while, “unCAPTCHA2 uses a screen clicker to move to certain pixels on the screen and move around the page like a human,” the researchers continued. The code now only needs to make a single request to a free, publicly available speech to text API to achieve around 90 percent accuracy over all CAPTCHAs,” according to the GitHub findings from the University of Maryland team. “Thanks to the changes to the audio challenge, passing reCAPTCHA is easier than ever before. But by June 2018 researchers found the latest reCAPTCHA was easier to trick that its predecessor. Google responded with improved browser automation detection and the use of spoken phrases instead of numbers, according to the researchers’ GitHub reports. The idea of using speech-to-text against CAPTCHA protections was first introduced in 2017 by researchers at the University of Maryland, who then reported they “achieved 85 percent accuracy” with the tech they dubbed “UnCAPTCHA.” Interaction events such as mouse movements and key presses and IP-address metadata.” CAPTCHA, ReCAPTCHA, UnCAPTCHA The decision will be based on browsing fingerprint, JavaScript user “CAPTCHAs will be replaced by passive AI that collects all kinds of data to constantly determine of the browsing signal appears to be human or not. “But still, we are approaching a point in time were the Turing Test can be solved by advanced AI, thus making CAPTCHAs harder and harder to implement,” Tschacher told Threatpost.

Tschacher pointed out that his bot wouldn’t be easy to exploit at scale for three specific reasons: Google rate-limits audio CAPTCHA access Google is likely tracking bot metrics and, it creates a fingerprint of each browsing device to stop bots. Google did not immediately respond to Threatpost’s request for comment on the report. He added that this attack method works on even the latest version, reCAPTCHA v3.

The report includes a video showing how Tschacher’s bot works.

Recaptcha bypass api