“Some of you may notice that instead of an audio challenge, sometimes you get a text challenge,” the researcher writes. That’s not too difficult because every challenge includes a link, in the form of a tiny pair of headphones, that indicates an audio challenge request is available, according to the author. To pull this off, first East-Ee Security devised a way to only access audio reCaptcha challenges. Then it uses speech-to-text technology to convert audio into text answers that are then inputted as text-based solutions to audio-based challenges used in reCaptcha V2. ReCaptcha is Google’s name for its own technology and service that today uses image, audio or text challenges to verify a human is signing into an account.Įast-Ee Security’s ReBreakCaptcha method is able to defeat reCaptcha V2 security via a script that uses Google’s own APIs to capture audio challenges as sound files. CAPTCHA stands for Completely Automated Public Turing test to tell Computers and Humans Apart. Google rolled out reCaptcha in 2014 to most of its public services in an effort defeat bots and scripts that can speedily register hundreds of free web-service accounts at a time. The tool dubbed ReBreakCaptcha “lets you easily bypass Google’s reCaptcha v2 anywhere on the web,” according to the author of the tool that is only identified as East-Ee Security. A proof of concept bypass of Google’s reCaptcha V2 verification system, posted online Tuesday, uses Google’s own web-based tools to pull off the skirting of the system.
0 kommentar(er)
