Google Cloud fraud defense

“except instead of a google owning your identity”

“if Google doesn't hate a bot, it'll be able to pass”

“What Google has done is incredibly clunky and only serves its own interests.”

“GCFD just means I have to keep a Google-approved phone around to scan a QR code every once in a while.”

“This is at least as much about locking people into their infra as it is cracking down on fraud”

“you can't use this system without a phone if your browser isn't Google enough”

“their current approach can be worked around because it's only targeting things like stores now”

“Attestation is about controlling what software you are and aren't allowed to run.”

“expecting everyone to have two devices with battery and internet at all times”

“not trying to push spyware onto my device and punish me for daring to remove it”

“This is truly disturbing, and trying to sneak it in like this without public discussion is disingenous.”

“catering to the duopoly makes it less obvious how much it excludes people and builds a reliance on proprietary systems”

“they're trying to extinguish the open web with nonsense like Cloud Fraud Defense”

“fewer services and infinite fraud is substantially better to me than the web being controlled by Google even more than it already is”

“Google's made a real proposal to avoid the web becoming bottomless AI slop”

“Easy for everyday users to deal with, and effective for verifying humans vs bots.”

“this initiative from Google is a concrete example that the homeless/too-poor-for-phone do not matter”

“It will and nobody at Google will care because they don't make money by caring about each individual user.”

“Feels like we accidentally built a web where proving you’re human now requires approval from 3 different corporations.”

“Now regular people will start getting banned from the internet because of bot activity.”

“all a bot needs to do to access a website is send a screenshot to an Android device”

“Google are now using that as an opportunity to end the open internet and competition in operating systems”

“Make their identities known so displeasure about these systems can be delivered directly to those who most deserve it.”

“This is more of an invitation for threat actors than it is something that holds them back.”

“This is just Google competing with Cloudflare in laying the foundation for erecting their toll booths on the internet.”

“The efforts by Googles, Meta, TikTok, X and AWS etc. to fight fraud and other financial crimes are probably largely deficient.”

“if I can leverage google's signal and cut 95% of my malicious botting users”

“This will block and inconvenience legitimate users while fraudsters have no problem buying more phones.”

“make the customers of their corporate clients pull out a phone and do some bullshit just to visit a website”

“it feels irresponsible to publish a feature announcement without covering basic information like this for site administrators”

“Whats to stop malicious actors (bad extensions, compromised cdn, etc.) from painting over the qr code or injecting their own?”

“So you will need a mobile device in future to browse the web, and Google will use mobile device identifier to de-anonymize you.”

“Not about attesting to Google that you have a proper smartphone as a proxy for your humanity”

“I can't believe promoting the QR code-based challenge as the agentic way of fraud defense.”

“They're selling part of the problem (inference via Gemini) and now they're selling a solution.”

“could be spoofed to become a Pegasus deployment method once people get used to them”

“It has downsides of course, but what's the alternative at this point?”

“How wild to force users through an official google identification for web browsing.”

“No mention of device integrity verification yet, but the writing is on the wall.”

“mobile devices are now mandatory to prove "humanness" means that Google no longer trusts desktop/open platforms”