Google reCAPTCHA Introducing Hand Gesture Verification, Future of Online Security

Forget traffic lights, Google’s reCAPTCHA may ask for hand gestures

Hand Gesture Verification Process

Google has implemented a new hand gesture-based verification system within reCAPTCHA, a component of Google Cloud Fraud Defense designed to combat fraudulent activity and abuse. This technology is integrated into platforms such as login interfaces, registration forms, password recovery pages, and e-commerce checkout systems, where it can approve transactions, request supplementary checks, or deny access based on risk assessments.

Data Handling and Privacy

Google emphasizes that these videos are not linked to user identities, audio is not recorded, and the footage is permanently deleted after verification. The system requires camera access and prompts users to execute designated gestures. Users retain the ability to revoke camera permissions at any time, and no data is shared with external parties.

Accessibility Considerations

For individuals unable to use hand gesture verification due to accessibility requirements, alternative options include traditional visual and audio challenges. Google has stated that additional accessibility-focused verification methods are under development.

Other Cybersecurity Developments

Law Enforcement Actions

Other developments in cybersecurity include law enforcement actions targeting the SocGholish threat group, which resulted in the shutdown of 106 servers and the cleanup of 15,000 compromised websites.

FortiBleed Vulnerability

A separate incident involved the exposure of 74,000 Fortinet firewall credentials through a vulnerability known as FortiBleed.

Malware Campaigns

Meanwhile, a malware campaign named GentleKiller has been linked to attacks on over 400 security processes across 48 products. Security researchers are also examining methods to protect digital keys when smartphones are used to unlock vehicles.

About Author

Anuj

See author's posts