Editing 2415: Allow Captcha

Captcha is designed to prevent spambots from being able to post on websites by posing challenges that humans can easily solve but that spambots and other automated programs cannot solve. The original version (used in [[632: Suspicion]]) asked users to identify text that was rotated, warped, or otherwise modified in order to make it more difficult for automated programs to solve. Once automated programs got good at that, new captchas were put out that exploited the fact that computers tend to be bad at image recognition, e.g. asking the user to select only images that contain cats from a grid of images of cats, dogs, and other objects (used in [[1897: Self Driving]]). This captcha appears to combine the two methods—with the additional hurdle that in order to pass the captcha, users must be able to not only read but also understand (i.e. know the definitions of words). However, if the goal is to allow humans but not computers to pass (although, as the next paragraph will describe, it is not the goal), this is not a good method of differentiating between the two. Any computer program that can accurately read text (and there are now many programs that can do so) would know which words start with 'A' and would be able to look up the definitions (including parts of speech) online, so this would not be effective as a captcha. Humans on the other hand, would often get confused between "ale" and "ail" or between "allot" and "a lot". The English language has no distinction between nouns and verbs by spelling, only grammatical usage, and many words in English are both nouns and verbs, depending on context and placement.

In reality, however, the window is merely disguised as a captcha in order to trick human visitors into allowing the website to install "a helper tool", which may be malware, on their computer. The top of the window uses a similar shade of blue to the current version of {{w|reCAPTCHA}} (currently the most common brand of captcha), the prompt includes the phrase "to prove you're human", and the grid is similar to the grid used by reCAPTCHA. However, positioned to appear to humans as two reCAPTCHA boxes is a window asking viewers whether they want to allow or deny the website's request to install the supposed "helper tool". The idea is that because "allow" is a verb beginning with the letter A, human visitors would click on what they think is the box with the word allow in it but actually allow the website to install potential malware on their computer. The window attempts to disguise this by formatting many of the words in boxes as buttons and including other text in smaller font on other boxes. In addition, the captcha may be intentionally difficult so that users will be too distracted by wondering whether ale is a verb to process the meaning of the request.

It should be noted that simply tricking humans would not necessarily be enough to install malware on their computer. First of all, while a person can select any part of a grid box in order to select that box, only clicking on the actual button that says allow will allow malware unto the computer. If a person clicks on another part of the supposed box, nothing will happen, so the person will likely take a closer look in order to see why the window is not being selected and then possibly realize that this is a trick as a result. Further, the website would likely not be able to specify where the permission window appears, so would not be able to fit it into the fake reCAPTCHA. In addition, the user's computer may have an anti-virus software that will prevent the computer from executing malicious code downloaded by the website. Or in order for the user to install software, a second window may pop up requiring the user to type in an administrator password, which will likely startle the user.  

Shady websites often use similar tactics to trick you into allowing notifications, including saying "[https://www.bleepstatic.com/swr-guides/c/click-allow-to-verify-that-your-are-not-a-robot/notification-subscription-page.jpg Please allow notifications to confirm you are not a robot]". This comic combines that with a traditional reCAPTCHA to try and trick savvier users too.  

The title text is another trick reCAPTCHA which is trying to make you give out your {{w|social security number}} by clicking the pairs of numbers that appear in your Social Security number. A social security number is a form of identification used in the United States, originally used for the Social Security Administration. Over time, this number has become a type of national identification number, so stealing these numbers would allow a scammer to commit identity fraud. Of course, it would use a different grid, as the grid pictured in the comic has words, not pairs of digits. If you can find all of the pairs then they would be able to guess your real number and thus this would be a weird kind of phishing attempt. If the grid is 4×4 (and some reCAPTCHA grids are only 3×3), then it can only show 16 of the possible 100 pairs of two digits, so any people who are successfully tricked likely would not reveal their entire Social Security numbers because some digit pairs in their Social Security numbers would not appear. However, it should be noted that this trick likely will not be as successful as the captcha-based trick because the phrase "Social Security number" will likely raise alarm bells concerning identity theft, and people who are not citizens or permanent or temporary residents of the United States will not have Social Security numbers, so they will not be able to be tricked into revealing personal information this way even if they are especially gullible.

 

 

 

 

 

 

 

 

 

 

[Below the header, a series of panels in a 4x4 grid. Each panel has a word in capitals. Most of the words appear to be in buttons, and several have illegible text above or below. Some are tilted or off-center]