Unpacking Google’s Web Environment Integrity specification

Very controversial take but I think this benefits the vast majority of users by allowing them to bypass captchas. I’m assuming that people would use this API to avoid showing real users captchas, not completely prevent them from browsing the web.

Unfortunately people who have rooted phones, who use nonstandard browsers are not more than 1% of users. It’s important that they exist, but the web is a massive platform. We can not let a tyranny of 1% of users steer the ship. The vast majority of users would benefit from this, if it really works.

However i could see that this tool would be abused by certain websites and prevent users from logging in if on a non standard browser, especially banks. Unfortunate but overall beneficial to the masses.

Edit: Apparently 5% of the time it intentionally omits the result so it can’t be used to block clients. Very reasonable solution.

how often do normal users see CAPTCHAs these days? I seldom see one anymore.

I see them all the time. Firefox on Ubuntu.

but where? which websites? I haven't seen a CAPTCHA on the reg since I stopped posting to 4chan some years back.

Most websites have them, just browse in incognito and either override your user-agent to something funky or connect through a known VPN.