Wait, now you have me wondering: If this is just javascript from another domain,... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Izkata on June 28, 2019 \| parent \| context \| favorite \| on: Google’s new reCAPTCHA has a dark side Wait, now you have me wondering: If this is just javascript from another domain, what's preventing bots from proxying requests, intercepting this one, and replacing it with a dummy function that returns a "no threat" score?

tg180 on June 28, 2019 [–]

https://developers.google.com/recaptcha/docs/verify

Izkata on June 28, 2019 | [–]

So... the answer is, nothing prevents it?

tg180 on June 28, 2019 | | [–]

When the API reports a failed verification, the webmaster knows that the response has been tampered with?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact