Ask HN: Google ReCAPTCHA doesn't stop SPAM. Why?
Dear HackerNews,<p>I&#x27;m wondering if anyone has a hint for me. We&#x27;ve been receiving a lot of SPAM in the past 2-3 days both on our signup form and on the contact us form.<p>The way things are implemented is that the client-side JavaScript will send the &quot;g-recaptcha-response&quot; to our server and then our server will post that to &quot;https:&#x2F;&#x2F;www.google.com&#x2F;recaptcha&#x2F;api&#x2F;siteverify&quot; to verify.<p>My logging tells me that we received &quot;success == true&quot; back from Google for each of the SPAM entries. That would suggest that someone has found a way to automatically &quot;solve&quot; ReCAPTCHA to obtain the &quot;g-recaptcha-response&quot; code in a way that Google declares them to be human.<p>Does anyone know more?