Google Trials Innovative reCAPTCHA System Utilizing Hand Data

Recently, Google updated its reCAPTCHA protocols, mandating that Android devices must have Google Play Services version 25.41.30 or above. This change poses challenges particularly for users of GrapheneOS and similar systems that minimize Google services. In relation to reCAPTCHA, the company is now testing a different form of verification focused on hand gestures.

According to Google’s documentation, this new method will require users to perform hand gestures for identity verification. The tech giant analyzes videos showing one or more gestures, such as waving, to determine the authenticity of the user through “hand landmark data” captured from the footage.

To initiate this challenge, the system will ask for access to the user’s webcam, guiding them to perform a series of gestures. Google’s machine learning model will process this data, mapping out 21 key landmarks on the hand. If a user fails to meet the gesture requirements, the reCAPTCHA will automatically switch back to conventional visual and auditory challenges.

Google assures that the videos recorded during this process are “not linked to a user’s identity.” Moreover, no audio is captured, and all videos are reportedly deleted post-verification. However, the company notes that collected information may be stored following Google’s Privacy Policy, leaving some ambiguity regarding data retention.

Reports suggest that individuals testing this system have discovered methods to circumvent the hand gesture verification. For instance, using a simple stock video of someone waving into a virtual camera was sufficient to deceive the system. This raises concerns about the effectiveness of the hand gesture verification approach at its current stage.