Re: [PEPr] Comment on Text::Text_CAPTCHA
| From: | Christian Wenz | Date: | Fri, 23 Jul 2004 06:19:45 +0000 |
| Subject: | Re: [PEPr] Comment on Text::Text_CAPTCHA | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-32263@lists.php.net to get a copy of this message | ||
Hi Daniel,
thanks for the interesting link!
PEPr wrote:
Very important points to keep in mind when designing CAPTCHAs that are hard to reverse-engineer: http://lists.nyphp.org/pipermail/talk/2004-July/010996.htmlI think the main "problem" of the current Text_CAPTCHA_Driver_Image implementation in regard to that posting is that lines do start end end at an edge; I'll try to change this a bit. But apart from that it is clear that no CAPTCHA is unbreakable (the Yahoo! CAPTCHA has been broken, a new one failed in the user acceptance test, so they are still using the old one). Furthermore, you can use horny users to break a CAPTCHA -- promise them that they get to see the Paris Hilton video when they solve a CAPTCHA; of course you have screen-scraped the CAPTCHA from the site you would like to enter. But for many automated scripts that are used to spam weblogs and other pages on the web, a CAPTCHA is a hurdle that is not too easy to overcome IMVHO. Since there were no other objections about the structure and implementation, I'll start the CfV. Thanks for all your consideration :-) Regards Christian