# How do "click here if you're not a robot" buttons from ReCaptcha work?
**URL:** https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770
**Category:** Factual Questions
**Created:** [September 2, 2022, 12:29am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770 "2022-09-02T00:29:26Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@ekedolphin](https://boards.straightdope.com/u/ekedolphin)
#### Post date: [September 2, 2022, 12:29am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/1 "2022-09-02T00:29:26Z")
We’ve all seen them. “Click here if you’re not a robot”. How do they work, exactly? We really can’t train a computer to click a button that says they’re not a robot?
---
### Author:  [@Thudlow\_Boink](https://boards.straightdope.com/u/Thudlow_Boink)
#### Post date: [September 2, 2022, 12:39am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/2 "2022-09-02T00:39:53Z")
It’s Asimov’s Fourth Law: A robot may not click a Captcha box that says “I am not a robot” unless not doing so would violate one of the first three laws.
Actually, I suspect that it’s not that a bot _can’t_ be trained to click such a button, but that the simplest ones just aren’t. Kind of like having an easily pickable lock vs. none at all.
---
### Author:  [@Dewey\_Finn](https://boards.straightdope.com/u/Dewey_Finn)
#### Post date: [September 2, 2022, 12:43am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/3 "2022-09-02T00:43:07Z")
At least those are better than the “click on every photo with a bus in it” checks. Half the time, I can’t even make out what’s in the tiny photos.
---
### Author:  [@Thudlow\_Boink](https://boards.straightdope.com/u/Thudlow_Boink)
#### Post date: [September 2, 2022, 12:44am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/4 "2022-09-02T00:44:13Z")
Now I’m feeling guilty for joking in the first answer to an FQ question, so here’s a serious cite:
> **[Are you a robot? Introducing "No CAPTCHA reCAPTCHA" | Google...](https://developers.google.com/search/blog/2014/12/are-you-robot-introducing-no-captcha)**
> [@](#):
>
> last year we [developed](http://googleonlinesecurity.blogspot.com/2013/10/recaptcha-just-got-easier-but-only-if.html) an Advanced Risk Analysis backend for reCAPTCHA that actively considers a user’s entire engagement with the CAPTCHA—before, during, and after—to determine whether that user is a human. This enables us to rely less on typing distorted text and, in turn, offer a better experience for users.
They don’t go into detail about how it works—maybe on purpose, to help preserve their effectiveness.
---
### Author:  [@kanicbird](https://boards.straightdope.com/u/kanicbird)
#### Post date: [September 2, 2022, 12:48am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/5 "2022-09-02T00:48:52Z")
I got one of those click here ones, but cut/paste and opened that page on a different browser and it came up with one of the normal Captcha ones to solve. So I assume so does monitor page behaviors.
---
### Author:  [@ekedolphin](https://boards.straightdope.com/u/ekedolphin)
#### Post date: [September 2, 2022, 12:49am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/6 "2022-09-02T00:49:32Z")
Okay. Related question.
If captchas work so well, how come we’re still competing with bots for expensive PlayStations whenever they come in stock?
---
### Author:  [@dtilque](https://boards.straightdope.com/u/dtilque)
#### Post date: [September 2, 2022, 12:57am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/7 "2022-09-02T00:57:56Z")
> [@Dewey\_Finn](#):
>
> At least those are better than the “click on every photo with a bus in it” checks. Half the time, I can’t even make out what’s in the tiny photos.
Those I’ve seen recently usually pop up a box where you have to select the three (it’s virtually always three) pictures with bicycles or chimneys or something.
I wonder how easy it is for bots to detect that there is actually a captcha on the screen. AIUI, they won’t be able to just look at an image of the screen, but perhaps I’m wrong here.
---
### Author:  [@TroutMan](https://boards.straightdope.com/u/TroutMan)
#### Post date: [September 2, 2022, 1:32am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/8 "2022-09-02T01:32:33Z")
The “check this box” captchas work by measuring things like the path the cursor takes to get to the box or how your finger presses it on a mobile screen. Bots have trouble with the random movements of humans.
---
### Author:  [@jnglmassiv](https://boards.straightdope.com/u/jnglmassiv)
#### Post date: [September 2, 2022, 1:40am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/9 "2022-09-02T01:40:09Z")
> [@Dewey\_Finn](#):
>
> At least those are better than the “click on every photo with a bus in it” checks.
I had one the other day that was ‘Click all the photos of lions that have manes.’ I wonder what they’re using this data for.
---
### Author:  [@BigT](https://boards.straightdope.com/u/BigT)
#### Post date: [September 2, 2022, 1:44am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/10 "2022-09-02T01:44:03Z")
They’re not checking if you can click the button. They’re checking whether or not your browser fingerprint looks like a real person. Google’s ReCaptcha is probably the most common, and it can look at all of your Google cookies to see if you seem like a real person. It can also just use what data it can scrape to identify you, so that it will know if you suddenly start clicking 500 times on stuff.
If this preliminary check fails, that’s when you get the more complicated CAPTCHAS that ask you to find a particular object in an image, identify which images contain an object, insert a puzzle piece, etc. Those work just like the older ones that had you type words: they give you a task that a computer can’t complete quickly.
As for what happens with buying consoles and other stuff? Many if not most aren’t really relying on bots. Scalpers make enough money to essentially hire people to solve CAPTCHAS for them (or use a service that provides such). Combine that with the number of people compulsively clicking, and stuff sells out fast. If it was just letting bots through, the compulsive clickers would never get through.
---
### Author:  [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)
#### Post date: [September 2, 2022, 1:49am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/11 "2022-09-02T01:49:26Z")
> [@jnglmassiv](#):
>
> I had one the other day that was ‘Click all the photos of lions that have manes.’ I wonder what they’re using this data for.
Sexing lions, of course. 😉
---
### Author:  [@abcdefghij](https://boards.straightdope.com/u/abcdefghij)
#### Post date: [September 2, 2022, 2:18am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/12 "2022-09-02T02:18:10Z")
[ ](https://www.youtube.com/watch?v=LButXcZ57pc)
---
### Author:  [@jnglmassiv](https://boards.straightdope.com/u/jnglmassiv)
#### Post date: [September 2, 2022, 2:23am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/13 "2022-09-02T02:23:14Z")
> [@LSLGuy](#):
>
> Sexing lions, of course.
Of course! It’s for the next gen, self driving safari buses.
---
### Author:  [@abcdefghij](https://boards.straightdope.com/u/abcdefghij)
#### Post date: [September 2, 2022, 2:23am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/14 "2022-09-02T02:23:48Z")
> [@ekedolphin](#):
>
> If captchas work so well, how come we’re still competing with bots for expensive PlayStations whenever they come in stock?
The original developer of Captcha spoke at my lab a number of years ago and said they were in a constant arms race with both bots and cheap labor.
At the time many of the text prompts (and I assume many of the traffic light photos now) were in fact being used to train _their_ AIs to be better at recognizing ambiguous images. They figured that as long as their adversaries were going to throw that many resources at defeating captcha that they might as well get some work out of them.
---
### Author:  [@beowulff](https://boards.straightdope.com/u/beowulff)
#### Post date: [September 2, 2022, 2:28am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/15 "2022-09-02T02:28:25Z")
Although this is a common explanation, I’m dubious.
If it’s possible for an algorithm to tell the difference between a human moving a mouse, and a computer, then it should be trivial to invert the algorithm and generate mouse movements which appear human.
---
### Author:  [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)
#### Post date: [September 2, 2022, 2:34am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/16 "2022-09-02T02:34:57Z")
Trivial enough. But for the basics of filling in web forms, creating a crappy bot that doesn’t do that fancy stuff is a lot easier. Remember all this low level cyber-vandalism is a very low margin business where cheap and half-assed is the order of the day.
Over time the websites’ defenses have gotten better. So the bad guys have gotten better too. But often it’s easier for them to simply move on to other less defended websites.
---
### Author:  [@BigT](https://boards.straightdope.com/u/BigT)
#### Post date: [September 2, 2022, 2:46am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/17 "2022-09-02T02:46:30Z")
I still say, like a lot of people, that the mouse tracking thing was never actually part of it. That was just a bit of misdirection to hide how it actually worked.
---
### Author:  [@Schnitte](https://boards.straightdope.com/u/Schnitte)
#### Post date: [September 2, 2022, 10:31am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/18 "2022-09-02T10:31:47Z")
> [@BigT](#):
>
> They’re not checking if you can click the button. They’re checking whether or not your browser fingerprint looks like a real person. Google’s ReCaptcha is probably the most common, and it can look at all of your Google cookies to see if you seem like a real person.
Then why do they make the user click anything at all?
---
### Author:  [@md-2000](https://boards.straightdope.com/u/md-2000)
#### Post date: [September 2, 2022, 11:50am UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/19 "2022-09-02T11:50:24Z")
Is this my one new thing to learn for today - that when I go click on “I am not a robot” box, the website can see/track my mouse movement details?
---
### Author:  [@RitterSport](https://boards.straightdope.com/u/RitterSport)
#### Post date: [September 2, 2022, 12:36pm UTC](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770/20 "2022-09-02T12:36:26Z")
Yes, and other behaviors that Google uses to determine you’re not a robot. If you go to one of those sites that has ReCaptcha using an incognito window, you’ll get a the pictures to pick out. At least, that has been my experience.
[Next page](https://boards.straightdope.com/t/how-do-click-here-if-youre-not-a-robot-buttons-from-recaptcha-work/970770.md?page=2)