They don’t seem to actually identify the cookies as tracking (as opposed to just identifying that the account can bypass further challenges), just assuming that any third party cookie has a monetary tracking value.
It also appears to be unreviewed and unpublished a few years later. Just being in paper format and up on arXiv doesn’t mean that the contents are reliable science.
we do so via a large-scale (over 3, 600 distinct users) 13-month real-world user study and post-study survey
results indicate that the website context directly influences
(with statistically significant differences) solving time between pass-
word recovery and account creation.
We explore the cost and security of reCAPTCHAv2 and conclude
that it has an immense cost and no security. Overall, we believe that
this study’s results prompt a natural conclusion: reCAPTCHAv2 and
similar reCAPTCHA technology should be deprecated.
The study that they reference: https://arxiv.org/abs/2311.10911 [PDF]
They don’t seem to actually identify the cookies as tracking (as opposed to just identifying that the account can bypass further challenges), just assuming that any third party cookie has a monetary tracking value.
It also appears to be unreviewed and unpublished a few years later. Just being in paper format and up on arXiv doesn’t mean that the contents are reliable science.