I have noticed that some CAPTCHA pages, like Cloudflare's, simply ask you to check a box to proceed. There is no clicking on traffic lights or entering characters. How does clicking on a check box tell them I am not a robot?

you are viewing a single comment's thread
view the rest of the comments
[–] 45 points 2 years ago* (2 children)

You passed the test before you clicked the checkbox. Your mouse movement, momentary pause, IP address, browsing history, etc, gave away that you’re a human.

  • source
  • hideshow 4 child comments
  • [–] 8 points 2 years ago (1 child)

    Then why do we still need to click it, instead of just loading the page at once?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 26 points 2 years ago (1 child)

    Because it measures how your mouse moves to the checkbox. If there was nothing to move to, you wouldn’t move your mouse.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 13 points 2 years ago (2 children)

    I get the checkbox even on mobile sometimes, I imagine as long as you're not perfectly hitting the center pixel it knows you're human.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 2 years ago (1 child)

    I don't think random websites get access to my browser history without me explicitly giving them permission.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 2 years ago* (1 child)

    They pretty much do if they’re run through something like Cloudflare or they use Google Analytics. That probably covers about 80% of websites. Not the website, but the company that’s running the Captcha.

  • source
  • parent
  • hideshow 2 child comments