Recently, Google has embarked on testing a novel feature aimed at bolstering reCAPTCHA security: gesture-based verification. This new system mandates users to perform specific actions, such as waving or displaying their open palms in front of the camera, as a means to authenticate their human identity. Leveraging advanced AI technology, the system extracts the coordinates of 21 distinct joints in the user's hand for verification purposes. Google assures users that the video data captured during this process will be automatically deleted post-verification and will not be associated with the user's identity in any way.

However, this innovative feature has inadvertently opened up security vulnerabilities. Users have discovered that they can effortlessly bypass the verification mechanism by simply presenting static images to the camera. This loophole undermines the intended security measures and raises concerns about the robustness of the system. Furthermore, privacy advocates have voiced apprehensions regarding the potential misuse and leakage risks associated with the collection of biometric data. At present, the feature remains in the testing phase, and Google has yet to announce a definitive launch date.