Just got this popup whilst trying to open a website using archive.is

342 points · 116 comments · view on lemmy.world

116 Comments

Godort@lemmy.ca · 177 pts · 89d (5 replies)

I would assume this was trying to deliver malware if I ever saw it

Serinus@lemmy.world · 65 pts · 89d (1 reply)

Probably still is. Scan it and let us know if you get malware.

Serinus@lemmy.world · 22 pts · 89d

It's goes to recapt cha.net/qr/mMs9S9g8

(Space addes to break the link.)

sic_semper_tyrannis@lemmy.today · 23 pts · 89d (1 reply)

It'll certainly cause more people to get malware by normalizing people to scan QR codes on a whim without thinking

Axolotl_cpp@feddit.it · 1 pts · 88d

And then google will sya "we think about the users security!!! That's why i will not let you install apps outside the playstore" Fuck Shitoogle

Cethin@lemmy.zip · 13 pts · 88d

It arguably is malware.

melfie@lemmy.zip · 125 pts · 89d (16 replies)

reCAPTCHA protects. your privacy and does not share your details with this website or app.

We foxes promise not to let any predators into the henhouse.

purplemonkeymad@programming.dev · 31 pts · 89d (2 replies)

They said it wasn't shared with the website. They didn't say it wasn't shared with anyone at all.

FineCoatMummy@sh.itjust.works · 24 pts · 89d

Reminds me of those privacy policies. "We don't sell your data!" in the big type. When you dig more into the fine print... they don't! But they do "share it within their partner family of companies". And then THOSE companies sell it. Or sometimes, sell inferences made from it, even if not sell the data.

Whats_your_reasoning@lemmy.world · 12 pts · 89d

Yeah, they're just sharing your info with their 1000+ "legitimate interest" partners. Nothing sketchy about that, no sir.

hopesdead@startrek.website · 9 pts · 89d (10 replies)

A some recently website someone shared showed, there are some bits of data you automatically share with websites without them asking.

mic_check_one_two@lemmy.dbzer0.com · 10 pts · 89d (9 replies)

Did I just have a stroke, or is this comment incomprehensible to everyone else too?

hopesdead@startrek.website · 9 pts · 89d (7 replies)

Sorry, I was like half asleep. I can’t find it, there was a website I saw shared somewhere on Lemmy that showed you all the info you automatically shared when visiting a website and it pointed out stuff that they collected without even asking for it. The implication is that your device gives websites data involuntarily; the website wasn’t asking for it.

Goodlucksil@lemmy.dbzer0.com · 10 pts · 89d (3 replies)

Coveryourtracks.eff.org

Griffus@lemmy.zip · 3 pts · 89d (2 replies)

Funny that it just doesn't work with JS disabled.

Goodlucksil@lemmy.dbzer0.com · 3 pts · 89d (1 reply)

Disabling js disables breaks fingerprinting, but also breaks a lot of websites

Griffus@lemmy.zip · 2 pts · 89d

So funny that a site about tracking needs more tracking to work.

DanWolfstone@leminal.space · 1 pts · 89d (1 reply)

https://sinceyouarrived.world/taken

Is the link that got posted recently, I'm unsure by who though, if someone finds the link please post it here!

hopesdead@startrek.website · 2 pts · 89d

Yes, this is the one!

Axolotl_cpp@feddit.it · 1 pts · 88d
[ removed ]
ironycanal@lemmy.dbzer0.com · -1 pts · 89d

Yope iourem squeegee squeegee squeegee Tuesday, May 19th at

unwarlikeExtortion@lemmy.ml · 2 pts · 88d (1 reply)

reCAPTCHA protects. your privacy

I love how they used that period. Seems way better than that lawyer guy from the Simpsons.

melfie@lemmy.zip · 2 pts · 88d

Sorry, typo. 😬

taiyang@lemmy.world · 92 pts · 89d (1 reply)

Ah yes, my very real human ability of scanning QR codes. Truly an inherent characteristic of humanity.

Sxan@piefed.zip · -8 pts · 89d

Þe stated reason is a lie. Þis isn't about verifying anyone is human.

But you knew þat.

JohnDarlen@lemmy.today · 81 pts · 89d (4 replies)

Any service implementing this shit will be on my list of never using it again. Even if my bank do such shit I'll be moving to another one. Zero tolerancy. This is beyond the limits.

shortwavesurfer@lemmy.zip · 10 pts · 89d (1 reply)

I agree, and this is strictly because Google wants to kill forks like Graphene OS. Anybody who implements this is going to get their tab immediately closed on my browser and I'm never going back. I will have zero tolerance for this.

ScoffingLizard@lemmy.dbzer0.com · 2 pts · 88d

And also their domain will be in my deny filters. Fuck this.

freijon@lemmy.zip · 8 pts · 89d (1 reply)

It's easy to say this now. But what if, in a few years, 90% of websites and service providers use this?

regedit@lemmy.zip · 5 pts · 88d

I'll be done using the internet!

melsaskca@lemmy.ca · 60 pts · 88d (26 replies)

I don't have a smartphone and I keep running into more and more of these QR codes. If I, as a citizen, am required to get a smartphone for these QR codes, to do citizen-like things, then it should be a utility and prices for hardware and services should come way down.

teyrnon@sh.itjust.works · 9 pts · 88d (15 replies)

You get by without a smartphone? I was really late to get one but you just can't function in today's society without one where I'm at. In the Heart of Darkness here.

kevinsky@feddit.nl · 17 pts · 88d (14 replies)

You can function in today's society just fine, it's just less convenient.

But the problem here is not only that you need a smartphone to begin with, but also one specifically from either Google or Apple. Having something else (like a phone with Sailfish or GrapheneOS or any other custom rom) also doesn't work.

teyrnon@sh.itjust.works · 15 pts · 88d (13 replies)

I am switching to graphene OS first chance I get, it should be this summer, damn the consequences.

I lived most of my life without any type of cell phone let alone a smart one. I'm going back to our roots, to reject this techno fascist bullshit it's only downhill from here on their gear.

kevinsky@feddit.nl · 9 pts · 88d (9 replies)

Yes, please. The more users we have on Graphene the harder we are to ignore as a user base.

eldavi@lemmy.ml · 5 pts · 88d (8 replies)

The general crowd doesn't seem to care about the trends that make graphene common sense and I suspect that Google would take measures if it ever did like they're currently doing to fdroid.

teyrnon@sh.itjust.works · 5 pts · 88d

In at least some sectors, even this enshitified EU should be forced to stop Google from being anti-competitive towards graphene to some extent.

The US is fucked but I don't know about the rest of the world necessarily, kind of a free-for-all right now.

kevinsky@feddit.nl · 4 pts · 88d (6 replies)

They are working on their "own" phone which should alleviate a fair number of concerns with what Google might be doing to sabotage them.

farfalla@jlai.lu · 3 pts · 88d

Yet, will they be able to develop their own OS when google stop sharing the code with them ? I do hope so...

eldavi@lemmy.ml · 2 pts · 88d

i'm glad to know this!!! do you have any more info?

FG_3479@lemmy.world · 5 pts · 88d

Switch to GrapheneOS anyway. If a website forces verification with a phone that passes strict Play Integrity with no other options, then don't use it, or use a $30 Walmart phone if you must.

eldavi@lemmy.ml · 3 pts · 88d

Same here. I'm waiting for Motorola to join in.

StopTech@lemmy.today · 2 pts · 87d

Welcome to the resistance

yermaw@sh.itjust.works · 6 pts · 88d

Not even way down, actually provided. You dont pay for wheelchair accessibility or braille on the signs.

I mean we all pay for it with taxes and increased prices, but the wheelchair user isnt forking out personally.

mik3dd0@lemmy.ml · 4 pts · 88d

That's actually a really good point! 🤔

AntiOutsideAktion@lemmy.ml · 3 pts · 88d

Just like they did with automobiles!

procapra@lemmy.ml · 3 pts · 88d (1 reply)

My entry level job requires that I use 3 separate apps. How do you get around that?

NannerBanner@literature.cafe · 1 pts · 87d

Probably by not having an entry level job. The companies love to make money off people any way they can, but potentially losing a highly skilled, long term trained employee would be worse than losing the income from the apps' data they can sell.

thermal_shock@lemmy.world · 2 pts · 88d (4 replies)

In china it's the norm. And I was feeling the same way, until I realized china takes way better care of its citizens vs USA. Everything is convenient, healthcare, etc.

https://youtu.be/nRW_wh5mIek

This YouTuber goes into pretty good daily life of avg Chinese users.

ScoffingLizard@lemmy.dbzer0.com · 7 pts · 88d (3 replies)

In rural areas, don't many Chinese not have running water? That doesn't sound like they are taken care of.

thermal_shock@lemmy.world · 3 pts · 88d

I don't know the answer to that, I've only been to Beijing.

But overall, id argue with healthcare, public transit, building a new hospital when covid hit specifically for it, it seems like they're doing better than nickel and diming them to death like USA. It costs money to breath here. Their EV setup is off the charts too. Even Ford CEO complimented it and drives a Chinese EV.

https://www.businessinsider.com/ford-ceo-jim-farley-xiaomi-tesla-chinese-ev-2026-4

Chinese new chargers - https://youtube.com/shorts/KhoRJQUA6dA

https://youtu.be/TKMWZ5c1PMQ

Landless2029@lemmy.world · 2 pts · 88d

I know a few people that live in rural USA and tap the ground for free water. Waste water from shower goes on random land and brown water into septic and get emptied when full.

Super cheap compared to my city water.

On the flip side they have complete shit internet access while I got fiber.

They have to drive a ways (1 hr) for groceries and I got like 5 within 10in drive. Hell I could walk 20min to a convenience store or two.

SaneMartigan@lemmy.world · 1 pts · 87d

The great Chinese achievement last century was lifting hundreds millions out of people poverty. That wont be everyone and some will still be living rough.

LovableSidekick@lemmy.world · 59 pts · 89d

Prove I'm human? Sure... [closes tab]

eager_eagle@lemmy.world · 54 pts · 89d

crosspost it to c/actually_infuriating

Damage@feddit.it · 54 pts · 89d (2 replies)

Btw I suggest URLCheck on F-Droid, it registers as a browser and allows you to check, clean, un-shorten links and so on before opening them

ScoffingLizard@lemmy.dbzer0.com · 1 pts · 88d (1 reply)

Does it actually correct the links for you? Like use invideous rather than YouTube or correct the useless parameters automatically?

Damage@feddit.it · 1 pts · 88d

you should be able to use the pattern module for that

yogthos@lemmy.ml · 52 pts · 89d (4 replies)

That's what google's been using to lockout non official Android forks like GrapheneOS. You can click on the eye icon at the bottom to get the regular captcha though... for now.

Squizzy@lemmy.world · 1 pts · 89d (3 replies)

How does it stop those from scanning it?

LostCarcosan@lemmy.today · 15 pts · 89d

Requires Google Play Services, from what I've heard, meaning it will only allow people who have phones pre approved by Google. I assume they also made some Apple service also acceptable. Can't cut out their friends

yogthos@lemmy.ml · 7 pts · 89d (1 reply)

Oh you can scan it, but as I recall they then force you to put your phone number in to finish the process.

Squizzy@lemmy.world · 4 pts · 89d

Ffs

pineapple@lemmy.ml · 41 pts · 89d (1 reply)

If you click the eye icon at the bottom you can go back the original captcha. For now at least.

Also I have no idea why archive.is uses reCAPTCHA from google! You've set up monaro as your only donation system so clearly you care about privacy but you haven't implemented an open source captcha?

LadyMeow@lemmy.blahaj.zone · 23 pts · 89d

Yeah, their privacy, not yours, evidently

recklessengagement@lemmy.world · 40 pts · 89d (2 replies)

Isn't scanning random QR codes super risky? This is just begging to be abused....

kalpol@lemmy.ca · 4 pts · 88d

Absolutely

teyrnon@sh.itjust.works · 4 pts · 88d

I never trusted it, I've never in my life scanned a QR code with my phone. But I never learned about it so whatever I just naturally do not trust anything computer.

comfy@lemmy.ml · 36 pts · 89d (2 replies)

Send an email to their webmaster if you haven't already. The more of us, the better.

wooferTwo@thelemmy.club · 2 pts · 88d (1 reply)

Really only way to fight back... There are alternatives to this shit

eldavi@lemmy.ml · 2 pts · 88d

it feels like an updated version of "strongly worded letter"

Solumbran@lemmy.world · 30 pts · 89d

Good thing that everyone has a smartphone as a secondary device. God forbid you would not be able to scan a QR code, what are we, the middle ages?!?! (and I'm not even starting on the absurdity of why you would want to do it, that's another point)

_lunar@lemmy.ml · 25 pts · 89d (4 replies)
[ removed ]
FineCoatMummy@sh.itjust.works · 26 pts · 89d (1 reply)

Ugh, yeah. Cloudflare too. I hate it. It's like 2/3 of sites I try,

Blah blah needs to review the security of your connection before proceeding.

Then it goes to an enedless reload loop. Or gets stuck.

I went to a site last week that belonged to a human rights organization. It's a ranking of countries by different aspects like economic freedom or w/e, and some articles about their methodolgy. Couldn't load it due to fucking Cloudflare. Cloudflare does not deem me worthy to read about human rights.

Why? Because I try to protect my right to privacy. The irony.

eldavi@lemmy.ml · 9 pts · 89d

chances are it was FOIA-confirmed slop anyways so cloudfare likely did you a favor. lol

texture@lemmy.world · 6 pts · 89d (1 reply)

captchas hate vpns

jjlinux@lemmy.zip · 2 pts · 88d

Fact!

umbrella@lemmy.ml · 24 pts · 89d (2 replies)

and what if i don't have a mobile device?

underisk@lemmy.ml · 24 pts · 89d

Well, the bots do. Like 90% of viewbotting, click farming, follower buying etc is sold by people running phone farms.

ironycanal@lemmy.dbzer0.com · 5 pts · 89d

Just scan the qr code on your screen with your mobile device, we can get it sorted out.

drmoose@lemmy.world · 22 pts · 88d

Yeah I'm not picking up my phone to use your website. Bye.

Zerush@lemmy.ml · 20 pts · 88d (5 replies)

Yes, I "like" the surprises scanning a unknown QR code. I hate this crap, same as this short URLs, it's not different from clicking on shady ad banners. A trustworth website don't need this shit, hiding its domain.

https://www.expandurl.net/

The QR code point to https://recaptcha.net/qr/mMs9S9g8

dev_null@lemmy.ml · 0 pts · 87d (4 replies)

Your QR code scanner showns you the URL before you choose to open it, right? So I don't really get the comparison to short URLs. As with any normal link, you get to see the link before you choose to "click" the QR code after you scan it.

NannerBanner@literature.cafe · 1 pts · 87d (3 replies)

Ah, yes, dark patterns are okay because they can be worked around. Got it.

dev_null@lemmy.ml · 1 pts · 87d (2 replies)

I don't understand, why is a QR code a dark pattern?

Edit: I have now read the entire Wikipedia page on dark patterns, I didn't find one that would match.

NannerBanner@literature.cafe · 1 pts · 87d (1 reply)

Because a qr code is not a url. You might get one flashed, but it's just like a 40 page eula: the amount of people who are going to pay attention is an order of several magnitudes smaller.

dev_null@lemmy.ml · 1 pts · 87d

We start here: You see an URL -> if it's a shortened URL, that's problematic, if it's a normal URL, it's ok you can click it

Now we add a QR code to the equation: You scan a QR code -> You see an URL -> if it's a shortened URL, that's problematic, if it's a normal URL, it's ok you can click it

But you don't agree.

Why is adding the "You scan a QR code" step making a difference? You compare looking at an URL to reading a 40 page EULA, I don't think 1 line of text is comparable to 40 pages of text, but let's go with it. Some people won't read it, I definitely agree with that. If they click links without reading then, then they click links without reading them. Again, why is adding the step of scanning a QR code before the link shows up, making anything different? You can read and choose to click it or not all the same, whether the link appeared due to scanning a QR code, or whether it was on web page.

monovergent@lemmy.ml · 14 pts · 89d (2 replies)

That really stinks. Does the audio version do anything different?

IndustryStandard@lemmy.world · 22 pts · 89d (1 reply)

I did not try it and have closed the window after the popup because it was too ridiculous. I was able to find an article about this, looks like the rollout started a week ago https://cybernews.com/privacy/google-qr-code-recaptcha-requires-approved-phone/

jjlinux@lemmy.zip · 2 pts · 88d

This is beyond insane. 'An approved device'. So, my device has to be approved by a fucking company. This is where all this bullshit has led. Companies now get to dictate the life of every person in the world. I'm going to be spending a lot of time away from the internet moving forward. Thank God we have Lemmy.

RememberTheApollo_@lemmy.world · 13 pts · 88d

These are so useless. A barrier that is likely already broken by bots.

Hoodoir@lemmy.world · 12 pts · 88d (1 reply)

I just scanned it and now the entire nation of Bangladesh has my phone number

PhoenixDog@lemmy.world · 1 pts · 87d

Congrats on your million dollars though!

voxel@feddit.uk · 8 pts · 89d (2 replies)
ScoffingLizard@lemmy.dbzer0.com · 1 pts · 88d (1 reply)

Is it legit that Anubis needs cookies?

smh@slrpnk.net · 1 pts · 88d

IIRC Anubis uses cookies so that the website doesn't test you again for X amount of time.

edit From the Anubis docs: https://anubis.techaro.lol/docs/admin/configuration/redirect-domains (behind Anubis)

GreenCrunch@piefed.blahaj.zone · 8 pts · 89d (4 replies)

this must be a rickroll, right?

warmaster@lemmy.world · 25 pts · 89d

Scan this QR code with your moble device to verify if you have been rickrolled. reCAPTCHA protects you from rickrolling and will not give you up and share your details with rickrollers nor it will let you down and desert you.

unexposedhazard@discuss.tchncs.de · 14 pts · 89d

How are people surprised by this??? This change has been constantly in the news for weeks now. How are people missing this? Its basically googles way to bypass all the backlash to age verification, because most phones are linked to peoples identity, phone number, etc.

https://cybernews.com/privacy/google-qr-code-recaptcha-requires-approved-phone/

eager_eagle@lemmy.world · 11 pts · 89d

tbh I'd rather have a 5% chance of being rickrolled for each link I click for the rest of my life than having this stupid invasive captcha everywhere

IndustryStandard@lemmy.world · 2 pts · 89d

In hindsight I should have edited the QR code to redirect to that.

overcast@lemmy.zip · 8 pts · 89d

oh no, it’s already happening… I must be ready

Axolotl_cpp@feddit.it · 6 pts · 88d

It must be illegal

MonkderVierte@lemmy.zip · 6 pts · 89d

Someone wants to create an addon that hijacks recaptcha, for privacy? They only want a hash, no?

brokenwing@discuss.tchncs.de · 5 pts · 89d (1 reply)

What does the headphone and eye symbol do?

umbrella@lemmy.ml · -1 pts · 89d
[ removed ]
Abyssian@lemmy.world · 5 pts · 88d (2 replies)

I think I read on a lemmy post the other day that archive.is... kills babies? I don't remember what it was, but that they're bad and shouldn't be used because of the badness.

CAVOK@lemmy.world · 4 pts · 88d

Apparenly DDOSing a blog iirc. You're not allowed to use it over at the Europe community because of it.

markz@suppo.fi · 2 pts · 87d

They use your pc for a ddos attack every time you visit. Actual malware.

CosmicTurtle0@lemmy.dbzer0.com · 5 pts · 89d (1 reply)
HiddenLayer555@lemmy.ml · 21 pts · 89d

TL;DR:

Supported Environments for reCAPTCHA Mobile Verification:

  • Android Devices:
    • Google Play Services version 25.41.30 or greater.
    • To verify Google Play Services version on an Android device, open Settings > Apps > All Apps > Google Play Services
  • iOS/iPadOS devices for QR Code Scan:
    • Version 15.0 or greater.
  • iOS/iPadOS devices for "Click to Verify" Button:
    • Version 16.4 or greater.
    • Version 15.0-16.4 with the reCAPTCHA app installed.

Fuck Google

mik3dd0@lemmy.ml · 3 pts · 88d

So it begins.

leadore@lemmy.world · 2 pts · 89d

How does that even work?

zeroConnection@programming.dev · 2 pts · 88d

The first time I encounter this in any government, utilities or banking website, I am making a big noisy complaint about how I do not have a smartphone and they cannot force me to buy one just to be able to do citizen things, like check my taxes or pay my bills. I'll just stop paying my bills and see how they like that.

rumba@lemmy.zip · 1 pts · 89d

better than me, they just blocked my IP outright.

warmaster@lemmy.world · 1 pts · 89d
[ removed ]