Google announced No-CAPTCHA - a new system of protection against spammers

Good old reCaptcha

Captcha (captcha, CAPTCHA) is a bot protection system that, according to the plan, separates the wheat from the chaff, that is, good users from spammers. The system has several modifications, with most of the varieties already succumbed to spammers, also not sitting on the ground.

It is no secret that there are also services for manual hacking of captcha, where for a couple of cents (or even less) volunteers will crack any captcha that they can see. Whatever it was, but Google introduced a new system of protection against spammers and bots, which is different from what we have seen so far.
')
This technology is a two-factor (and if you understand, then a three-factor) assessment of the "quality" of the user. The first stage looks surprisingly simple:



The fact is that a special script evaluates the behavioral factor, and if a person puts a tick, then everything is ok. Robots act differently, so even if the spamming script tries to tick, No-CAPTCHA will understand that this is not a human being.

True, there will be no failure at once - Google understands that errors happen. Therefore, if the first stage is not passed, No-CAPTCHA will offer to complete the second stage of the test. Here, too, options are possible. The first one is the familiar captcha (yes, this is a captcha-necapcha). But Google is testing and updating the version, more user friendly.

In this case, it is proposed to choose an image of an animal from a series of photographs.



As for behavioral factors, it is already known that they will use information about the time spent on the page and the user's IP. Other evaluation criteria are not disclosed, as spammers will quickly create a robot that tricks No-CAPTCHA.



To work with the new system, a new API has been introduced. It is already used by Snapchat , WordPress , Humble Bundle . In order to use the system on your site, it is worth looking into the FAQ .