Google reCaptcha, one of the most used captcha in the world. This captcha is used by websites to distinguish between the operation made by either Real user or a Bot. It was last year when google announced a new reCaptcha that doesn’t need tick the checkbox from user. However, this was too early to celebrate.
The tech news website The Next Web reported — researchers from University of Maryland have developed a new algorithm, that is called UnCaptcha which is able to defeat reCaptcha. The most important part is the success rate of this program and that is 85%. The method exploits a vulnerability in the audio version of reCAPTCHA to accomplish such high consistency.
“Specifically, unCAPTCHA targets the popular site Reddit by going through the motions of creating a new user, although unCAPTCHA stops before creating the user to mitigate the impact on Reddit,” the researchers explain.
The solution uses browser automation software to parse necessary elements and to get the spoken numbers. The Bot identifies the number and use them to fool the reCaptcha to recognize the bot as Human.
Researchers released Proof of Concept in their research paper.
“For instance, Google has also improved their browser automation detection,” the documentation reads. “This may lead to Google sending odd audio segments back to the end user. Additionally, we have observed that some audio challenges include not only digits, but small snippets of spoken text.”
