I've known about v3 for a while, but does it work with spoofed data? On second thought, through inadvertent experimentation with my JS filter, I think they compare your data/thumbprint of your browser profile and compare it with data gathered from preexisting canvas thumbprinting/analytics.js into your shadow profile to see if the details match up. Meaning that if you know about data privacy but have never used web 2.0/3.0 in your life you may be walled out of services that use the captcha. [It pretty much doesn't allow me past it despite selectively allowing the gstatic and google scripts.] I hope the whistleblower's revelations actually result in shit happening.