Google’s speech-to-text can be used to break its own reCAPTCHA

Google’s speech-to-text can be used to break its own reCAPTCHA.   | Photo Credit: Special Arrangement

(Subscribe to our Today's Cache newsletter for a quick snapshot of top 5 tech stories. Click here to subscribe for free.)

Google’s voice-to-text API can be used to bypass the audio version of its own CAPTCHA protections, according to technology researcher Nikolai Tschacher.

The researcher used an old trick with the latest version of reCAPTCHA and found that the method can be used to break the protection system with a 97% success rate.

Completely Automated Public Turing Test to Tell Computers and Humans Apart (CAPTCHA) is Google’s service that uses images, audio and text challenges to check whether a human is signing into an account.

It was introduced in 2014 and is available for free of cost except for large reCAPTCHA accounts.

Tschacher grabbed the mp3 file of the audio reCAPTCHA and submitted it to Google’s speech-to-text API to discover that Google returned the file with the correct answer in over 97% of all cases.

He also posted a video of the experiment and noted that the method also works on the latest version of reCAPTCHA, v3.

Our code of editorial values

This article is closed for comments.
Please Email the Editor

Printable version | Jun 13, 2021 6:03:18 AM |

Next Story