You must have come across the “I’m not a robot” task if you’ve been surfing the internet for more than a week.
They come in different forms, but they all have the same function, which is to demonstrate our humanity. However, this may not be its only function! The alarming reality behind this apparent “security” check is revealed in a 2020 video that recently resurfaced.
The video is taken from an episode of QI with Sandi Toksvig. Australian radio hosts Wippa and Fitzy just shared it on TikTok. The number of views immediately exceeded 3 million. So what was shown in the video?
“I’m not a robot” works strangely.
In the video, Holly Walsh, Maisie Adams, David Mitchell and Alan Davies are among Toksvig’s guests as he discusses the details of these “I’m not a robot” tests. It clarifies that adding a small circle or box next to the statement “I’m not a robot” is not the main goal. Instead, the test examines and evaluates our actions before we label them.
He admits that he is unable to divulge every detail because they are kept private to prevent test takers from cheating.
Generally speaking, checking the box will cause the website to search our browsing history.
The website then uses this to determine that we are, in fact, human.
Toksvig explains: “Let’s take the example of watching a few cat videos, liking a tweet about Greta Thunberg, and checking your Gmail account before starting work. All these actions lead them to believe you’re human.” Additionally, checking the box will cause it to analyze mouse movements across the screen. I think it’s a little worrying.”
By checking this box, we are essentially allowing the site to examine our personal information and judge our humanity. If this information is insufficient, the website will ask us to identify street lights, fire hydrants, etc.
Disbelieving comments were all over the TikTok video. One of them probed further and verified, “That’s the first I’ve heard. After a little investigation, unfortunately, it appears to be the case.” Another pointed out the absurdity of this circumstance, saying, “So the robot is checking to see if I’m a robot?” A third person made the disturbing observation: “Feels like an invasion of privacy tbh.”
What is the real purpose of these tests?
The formal name for these “I’m not a robot” tests is CAPTCHA. It stands for “Fully Automated Public Turing Test to Tell Computers and Humans Apart”. Their purpose is to prevent computers from cracking passwords.
To crack passwords, a computer program, sometimes known as a “bot,” quickly enters millions of possible password combinations until it finds one that works. But if you try the password every time, a CAPTCHA will appear, making the whole process difficult for almost every computer. After all, identifying a fire hydrant in a photo collage becomes a very complicated problem to combine image recognition, color processing, and more.
After the CAPTCHA is completed, “the API checks the user’s cookies, location, and cached browser data before sending the score back to the web application,” says John Lloyd, CTO of Casaba Security. A robot cannot perform the tasks for which it is usually created, nor can it behave like a human.
In addition, once the system detects a bot, it notifies all other sites of its identification and prevents it from any other activity.
What do you think about this trade-off between security and privacy?
In conclusion, the “I’m not a robot” CAPTCHA performs a vital function in differentiating between human users and automated robots, primarily to increase online security by preventing password cracking. These tests use various methods to evaluate user behavior, including analysis of browsing history, mouse movements, and responses to visual prompts. While these measures are effective in thwarting automated attacks and securing sensitive information, they also raise significant privacy concerns.
The trade-off between security and privacy is evident in how CAPTCHA systems collect and analyze personal data to confirm human identity. Although these practices are designed to protect users from malicious activity, individuals who value their privacy may find them intrusive and disturbing. The ongoing debate highlights the need for a balance between robust security measures and respect for personal information. As technology evolves, finding solutions that protect both security and privacy will be critical to maintaining trust and protecting users in the digital age.