Introducing reCAPTCHA v3: the new way to stop bots

Yup. Otherwise you'll have recaptcha on every page you want to access. They want to own our lives on the Internet and it seems they are going to get away with it. Google is turning more and more evil by the hour.

You can try it now, use firefox with a clean profile, never log to any Google account on it and see how already unlivable the net will look.

What stood out to me is the part where they said something to the effect of: "Since this works in the background, you should add the recaptcha script to as many of your pages as possible".

Knowing that this script is very probably collecting actions, keystrokes, who knows what else, and it gets embedded on a huge number sites because of its usefulness, coupled with Google's recent "We totally don't track your phone when your location settings are turned off, except when we do" policy coming to light, this doesn't sound good to me.

Suppose that v3 then scores the user low. Would this tor user then have no option to access the website? This makes me uncomfortable.

Is this going to make using Tor or other means of anonymisation even more painful than it needs to be?

At a minimum they'll probably grab every bit of data they can regarding how every unique user interacts with the various actions tagged and use it for their own ends, but that might extend to literally everything a user does while browsing the site, a complete picture of what you're doing and typing at all times (with the exception perhaps of passwords or other super sensitive info). I'm not sure. But on principle I know that if something Google gives you can track data they're going to use it and this seems to be a much more pervasive way to track your behavior across multiple unrelated sites. There are already commonly employed methods of tracking every action you make with your mouse, keyboard, or touchscreen. Facebook does that afaik.

It would seem that if they're letting you define Actions that you want to watch, this reCAPTCHA would want to track everything else done in relation to that action as well, to check for suspicious typing speeds and mouse movement, for automatically generated text ... so it seems really feasible for me that if you're browsing a website with reCAPTCHA v3, you're submitting the totality of your browsing behavior and data (excepting sensitive data like passwords, probably) to google so they can at minimum use it to improve their machine learning algorithms. But once they have it, who knows. Maybe they'll use it to train their new virtual assistant or create an AI overlord to produce the singularity.

If it successfully improves the UX to the point where challenges aren't necessary, then it could be used to validate more passive things like ads. Wonder if the long term plan is to make it a requirement for AdSense?

also, since this recaptcha v3 only gives a "score" wouldn't the website have to do any kind of thing to prevent spam(captchas, blocking the user, etc)? If so it would be a little bit useless, no?

I think if the score is over a threshold, then you need to do extra steps, but it doesn't interrupt human users as much.

I have a suspicion recaptchas is those buttons as an opportunity to gather data that is sold for use in image recognition algorithms, particularly any of the self-driving car systems that require some sort of computer vision.

No, now for passing the captcha you'll have to film yourself live doing 30 jumping jacks.
Jokes aside, it is starting to get ridiculous: you can spend minutes trying to pass the captcha v2 if it decides it doesn't like you. It's a lot of fun clicking blurry pictures for more than 10 seconds. To be honest even 10 seconds are too much sometimes.

That's just how Google+ comments work. It's people re-sharing it to their circles while also posting publicly. So every comment is basically just rehashing the title in different words.