Recaptcha is a service offered by Google. It doesn’t matter on which site the user encountered the QR code verification request - the problem is with Google (the company.)
It does matter, because that Google integration didn’t happen by magic. Whatever the site is, they chose to do things that way.
The only way Google stops things like this is if they get actual pushback, and the only realistic way to achieve that is to make the people using their service reconsider.
The screenshot looks like it might be a cloudflare verification page, which would put another layer of separation between the site owner and the QR system.
and the only realistic way to achieve that is to make the people using their service reconsider.
So what exactly will naming the site achieve? If someone wants to boycott recaptcha (which I’m 100% onboard with, btw) they’ll just not comply with the captcha and leave the site when they encounter it. On the other hand, someone who would not otherwise visit the site cannot reduce traffic to the site by direct action. Telling their friends “don’t use that site, it uses recaptcha” is no more effective than telling them “don’t use any site that requires you to do QR recaptchas.”
Google. It’s their recaptcha service doing that. The QR code validation also gets rejected if you’re using a privacy oriented mobile OS like Graphene.
At the cost of conditioning people into following orders from random qr codes
you mean it was google.com? Or on which website was this recaptcha?
Recaptcha is a service offered by Google. It doesn’t matter on which site the user encountered the QR code verification request - the problem is with Google (the company.)
It does matter, because that Google integration didn’t happen by magic. Whatever the site is, they chose to do things that way.
The only way Google stops things like this is if they get actual pushback, and the only realistic way to achieve that is to make the people using their service reconsider.
The screenshot looks like it might be a cloudflare verification page, which would put another layer of separation between the site owner and the QR system.
Cloudflare don’t use reCaptcha, they use turnstile
Exactly this!
So what exactly will naming the site achieve? If someone wants to boycott recaptcha (which I’m 100% onboard with, btw) they’ll just not comply with the captcha and leave the site when they encounter it. On the other hand, someone who would not otherwise visit the site cannot reduce traffic to the site by direct action. Telling their friends “don’t use that site, it uses recaptcha” is no more effective than telling them “don’t use any site that requires you to do QR recaptchas.”