Google's reCAPTCHA hand gesture test bypassed with static photos

Google is expanding its reCAPTCHA human verification system with hand gesture tests. Users need to wave or open their palms in front of a camera, and the system extracts 21 hand joint coordinates to confirm identity. Google says the video is processed only temporarily and won't be saved or linked to users.

But some users found they can bypass this test with static images. By feeding a hand photo into an OBS virtual camera, they passed the challenge. Tech site Neowin replicated this by adjusting a waving hand image to trick Google's system into thinking it was a real gesture.