Re: [PEPr] Comment on Text::Text_CAPTCHA

From: Date: Fri, 23 Jul 2004 06:19:45 +0000
Subject: Re: [PEPr] Comment on Text::Text_CAPTCHA
References: 1  Groups: php.pear.dev 
Request: Send a blank email to pear-dev+get-32263@lists.php.net to get a copy of this message
Hi Daniel, thanks for the interesting link! PEPr wrote:
Very important points to keep in mind when designing CAPTCHAs that are hard to reverse-engineer: http://lists.nyphp.org/pipermail/talk/2004-July/010996.html
I think the main "problem" of the current Text_CAPTCHA_Driver_Image implementation in regard to that posting is that lines do start end end at an edge; I'll try to change this a bit. But apart from that it is clear that no CAPTCHA is unbreakable (the Yahoo! CAPTCHA has been broken, a new one failed in the user acceptance test, so they are still using the old one). Furthermore, you can use horny users to break a CAPTCHA -- promise them that they get to see the Paris Hilton video when they solve a CAPTCHA; of course you have screen-scraped the CAPTCHA from the site you would like to enter. But for many automated scripts that are used to spam weblogs and other pages on the web, a CAPTCHA is a hurdle that is not too easy to overcome IMVHO. Since there were no other objections about the structure and implementation, I'll start the CfV. Thanks for all your consideration :-) Regards Christian

« previous php.pear.dev (#32263) next »