Introducing a feature that allows iOS 16 to pass through the 'I'm not a robot' CAPTCHA



In order to distinguish between computers and humans and prevent bots from doing bad things, the login screen of the website is implemented to select a picture of a specific object such as a car or a signal, or to read distorted characters. It is '

CAPTCHA ' to enter. It has been revealed that the function to automatically bypass this CAPTCHA will be added to ' iOS 16 ' which is an OS for iPhone and is scheduled to appear in the fall of 2022.

iOS 16 Will Let iPhone Users Bypass CAPTCHAs in Supported Apps and Websites --MacRumors
https://www.macrumors.com/2022/06/20/ios-16-bypass-captchas/

iOS 16 will let you bypass CAPTCHAs on some apps and websites --The Verge
https://www.theverge.com/2022/6/20/23175765/apple-ios-16-captcha-private-access-tokens

iOS 16 brings new feature for bypassing CAPTCHAs-9to5Mac
https://9to5mac.com/2022/06/20/ios-16-bypass-captchas/

CAPTCHA is a function to determine whether it is a human or a bot, which is displayed on the login screen of an application or website. With iOS 16, it is possible to pass through this CAPTCHA.



Apple has worked with leading content delivery networks (CDNs)

Fastly and Cloudflare to develop CAPTCHA thru capabilities. The CAPTCHA thru feature is available not only on iOS 16 but also on macOS Ventura, and if enabled, the CAPTCHA display will automatically disappear on websites that implement CAPTCHA.

The CAPTCHA thru feature is implemented as 'Automatic Verification' in 'Apple ID'-> 'Passwords and Security' in the 'Settings' app.



With this feature enabled, iCloud will automatically and privately validate your device and Apple ID account in the background, eliminating the need for apps and websites to display CAPTCHAs. Specifically, it proves that the Apple device is 'not a computer' by sending a private access token to the CDN's server.



Apple claims that using private access tokens will improve user privacy and accessibility compared to CAPTCHAs, and will enable them to provide a better user experience for account sign-in and account creation tasks.

According to Fastly, which is working with Apple to develop the CAPTCHA through function, Google is also supporting the development of similar functions. About two years ago, Google has implemented a system called ' trust token ' in Chrome, which is similar to Apple's private access token.

in Mobile,   Software,   Security, Posted by logu_ii