• Google is making it mandatory to have Play Services for its next-generation reCAPTCHA system on Android.

  • Your phone will need to be running Play Services version 25.41.30 or greater when the system asks you to scan a QR code for verification.

  • This hurdle means that de-Googled phones will fail the verification test by default.

  • Blue@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    Then I’ll just not use the services that use it, very stupid, as this shouldn’t be necessary

    • NaibofTabr@infosec.pub
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      I mean, OK… Until every bank, government service, health care provider, etc implements this.

    • DFX4509B@lemmy.wtf
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      That’s gonna be really hard with the increasing amount of sites that push this.

  • thejml@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    Ignoring the de-Googled phones for a sec: I assume if you’re using a desktop, then the QR shows up and you have to drag out your phone to scan it in the camera app that then prompts to open the google play store. Dumb, but possible for people who have a phone with Android. What about those that don’t? Would you need a google account?

    Now if it’s all on phone (using Chrome or Firefox or whatever) and pops up a QR code, you can’t scan it… but the browser would have to open the play store directly and thats a huge security no-no. The browser shouldn’t even know I have the Play Store.

    I have a feeling the hundreds of us that are de-Googled ad just going to stop using these sites all together.

    • Dave@lemmy.nz
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      The browser shouldn’t even know I have the Play Store.

      Every app on your Android phone knows every other app you have installed. GrapheneOS are trying to solve this but it’s challenging.

    • timestatic@feddit.org
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      What about people who use iPhones? Even if I used a normal google android I wouldn’t want to be bothered to scan a qr code with my phone to verify myself every time

    • Phoenixz@lemmy.ca
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      Yeah, so the hundreds of us won’t be able to use the internet anymore if this passes

      Awesome

    • Cethin@lemmy.zip
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      I’m not even de-Googled (yet) and I wouldn’t bother with this shit. It’s an instant close in that tab, and if it’s something I need then I’ll find another service.

  • Zak@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    That means if Google’s verification system gets widely adopted, browsing the web could become a headache.

    Using a phone to scan a QR code in order to access a website on my desktop is a headache even if it has no dependencies in particular.

    • Kairos@lemmy.today
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      I have, multiple times, had to take a screenshot, send it to another device, and then display that QR code on that device so I can scan it. Nothing about using phones isn’t a headache.

        • systemglitch@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          10 days ago

          I spend most of my day without a phone near me. I hate phones, this won’t encourage me to do anything but pull further away.

          I suppose that is a win. Real life isn’t happening on a screen.

    • limonfiesta@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      Unless it was the website I needed inorder to receive an organ donation, I would just close it.

      I could claim that’s an act of righteous protest, but really I just know that absent my needing a new liver, there’s no website I would ever care enough about to get me to scan a QR code just to keep browsing.

  • Phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    Once this is implemented, Google will have finally succeeded in closing the entire fucking internet. That is, assuming this will become anywhere successful and smaller websites will be using it as well.

  • Ulrich@feddit.org
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    Uhhhh. What if I’m not using a Google device? Is just the entire internet going to be gated behind Android?

  • Phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    Monopoly, anybody?

    Naaaahhh, this is just good old fashioned American freedoms

  • 9tr6gyp3@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    If you’re a web dev, and you implement this, just know you won’t receive my web traffic. Ill go live with the other robots and we will start our own internet with blackjack and hookers.

  • PierceTheBubble@lemmy.ml
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    11 days ago

    It turns out reCAPCHA has been a privacy nightmare from the beginning: from silently monitoring user activity in the background, to sending payment information to Google; in order for an AI to assess the data, and return a risk-score to the website. But that apparently wasn’t bold enough, and now an effective 2FA is required, which provides additional telemetry to Google (but not to the website or app: which is obviously the privacy concern). So get ready to 2FA with Google upon registration, login, updating your cart, and payment; or to skip the hassle, you should just let an approved “shopping assistant” make purchases for you (“that drive a projected 25% increase in average order value”). I don’t even own an modern Android or iOS device, so how am I supposed to solve these?

    • cecilkorik@piefed.ca
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      I think I’ll just go to a local store and pay in cash instead. I’m starting to think the Amish have the right idea, anyone know where I can rent a horse and buggy?

      • PierceTheBubble@lemmy.ml
        link
        fedilink
        English
        arrow-up
        0
        ·
        11 days ago

        Yeah, on the rare occasion where I do order something online, and happen to trip up the convoluted system, I rather give the webshop a call, than giving into this dystopian nonsense. And I’ve long done away with any mainstream platforms, which I suspect will happily adopt the system (especially those who forced me to adopt 2FA: which was seemingly just in preparation of this…). I’ll happily function as an example, to illustrate just how morally unjust it is, to effectively force someone to purchase and use a device they explicitly chose not to use; I really want to hear someone justify that.

        I think there’s few people left, which do not believe we’ve gone too far with technology, so the Amish to some extend are definitely onto something.

  • datendefekt@feddit.org
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    So wait a moment. How can the browser even check if play services are installed? And scanning a QR code is just accessing the camera, what does that have to do with Play Services?