Published on July 21, 2014
CAPTCHAs Are Becoming Security Theater: CAPTCHAs Are Becoming Security Theater PowerPoint Presentation: Google doesn't even need us to prove our humanity anymore, which is a good thing, because they can simulate it now. PowerPoint Presentation: CAPTCHAs are a time-worn way for humans to tell computers that we are human. They are those little boxes filled with distorted text that we've been told humans can decipher, but computers—the bad guys' computers—cannot. So, Watson-be-damned, we enter the letters and gain access to whatever is behind the veil, leaving the bad bots steaming outside the pearly, CAPTCHA'd gates. As Google's ReCAPTCHA website puts it: "Tough on bots, easy on humans." PowerPoint Presentation: It is a satisfying display of human superiority built into the daily experience of the web. And, BONUS, you're often helping do optical character recognition on old books at the same time. Take that, Machines, you don't even have any books. But then along comes Google today noting, in a showily short and breezy blog post, that their machines can beat ReCAPTCHAs 99% of the time. PowerPoint Presentation: "Turns out that this new algorithm can also be used to read CAPTCHA puzzles—we found that it can decipher the hardest distorted text puzzles from reCAPTCHA with over 99 percent accuracy," writes Google product manager Vinay Shet. "This shows that the act of typing in the answer to a distorted image should not be the only factor when it comes to determining a human versus a machine." PowerPoint Presentation: But that's not even the most galling thing. That's reserved for the next paragraph. "Last year, we announced that we’ve significantly reduced our dependence on text distortions as the main differentiator between human and machine," Shet continues, "and instead perform advanced risk analysis." So, we've been proudly typing away the whole time, proving we were human, and Google knew that all along. PowerPoint Presentation: In an earlier post, Shet described their process in general terms: Google has begun "actively considering the user’s entire engagement with the CAPTCHA—before, during and after they interact with it. That means that today the distorted letters serve less as a test of humanity and more as a medium of engagement to elicit a broad range of cues that characterize humans and bots." Now, we go on typing into the box, but our evolved visual systems—some of the most sophisticated in the animal kingdom—are no longer all that necessary. PowerPoint Presentation: What we once did to assure Google that we were still human has become security theater. The only audience that we need to perform our humanity for is ourselves. Resources: http://deathbycaptcha.com http://www.theatlantic.com/technology/archive/2014/04/captchas-are-becoming-security-theater/360786/ PowerPoint Presentation: Thank you for reading!