Say what was measured about Medium's reCAPTCHA, not what it is probably for - #2
Merged
Merged
Conversation
…ly for Five files described the reCAPTCHA Medium ships as being "for its own sign-in widget". Nothing measured supports the "sign-in" half: what the captures show is `recaptcha/enterprise.js?render=<sitekey>` — the v3 INVISIBLE pattern, which scores page views rather than gating a form — plus two more sitekeys in Medium's own page config, on every page the modern renderer serves. What Medium does with the score is not visible from outside, so the claim is narrowed to what the captures actually show: it is present, it is Enterprise v3 invisible, and it never rendered a challenge to an anonymous reader — 0 `api2/anchor` iframes across four pages known to be good. That is the part that matters here, because it is why `g-recaptcha` and `recaptcha` are kept out of the marker set (§18) and why no run ever treats it as a challenge. The legacy archive renderer carries only the two config keys and not the enterprise loader, which is a third answer from the same site. No behaviour changes. §13: a claim that was inferred rather than measured is the thing this family's documentation is supposed to be free of, and this one shipped in a public README. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Five files called the reCAPTCHA Medium ships "for its own sign-in widget". The captures do not support the "sign-in" half — what they show is
recaptcha/enterprise.js?render=<sitekey>, the v3 invisible pattern, plus two more sitekeys in Medium's page config, on every page the modern renderer serves.Narrowed to the measurement: present, Enterprise v3 invisible, and never rendered as a challenge to an anonymous reader (0
api2/anchoriframes across four known-good pages). That is the part that matters, because it is whyg-recaptchaandrecaptchastay out of the marker set (§18).No behaviour changes; 726 offline checks still green.
🤖 Generated with Claude Code