Earlier this year Google boasted its security AI has smartened up so much it no longer requires you to tick a box in its reCAPTCHA system to know you’re not a bot. But it appears the company might have celebrated a bit prematurely.A group of researchers from the University of Maryland have developed a new algorithm, called unCAPTCHA, that is capable of defeating the reCAPTCHA system with a mind-boggling success rate of 85 percent. The method exploits a vulnerability in the audio version of reCAPTCHA to accomplish such high consistency.The solution involves using browser automation software to parse out the necessary elements and identify spoken numbers. The next step is to pass these numbers programmatically with the view to fooling target sites into thinking their bot is a human.“Specifically, unCAPTCHA targets the popular site Reddit by going through the motions of creating a new user, although unCAPTCHA stops before creating the user to mitigate the impact on Reddit,” the researchers explain.
Source: Researchers built an AI that uses Google’s own tools to crack reCAPTCHA
absenteereality 