Google testing controversial webcam-based reCAPTCHA that asks for a hand scan (www.tomshardware.com)

Google is currently testing a new webcam-based reCAPTCHA that requires users to wave or hold up their hand to verify their identity. This experimental approach, part of Google Cloud Fraud Defense, captures and analyzes the hand's movements by mapping 21 key coordinates of the user's gestures, using the same technology behind its MediaPipe hand-tracking tools. While intended to enhance security against automated threats like credential stuffing, the system faced immediate backlash as testers successfully bypassed the challenge just days into the rollout, using static images and virtual cameras. The introduction of this biometric gesture check ignites significant discussions within the AI/ML community regarding the effectiveness of CAPTCHA systems amid evolving AI capabilities. Despite Google’s assurances that the video footage is deleted post-verification and not linked to user identities, concerns about privacy and data collection linger. This development comes as alternatives, such as the cryptographic Private Access Control Tokens (PACT) proposed by major tech companies, seek to replace traditional CAPTCHAs with methods that prioritize user privacy and reduce friction. Whether this hand-scan method will be widely adopted remains uncertain as it currently offers minimal resistance to attackers while complicating the user experience.