Live data from Hacker News

Chess CAPTCHA

en.lichess.org

1–10 of 171 posts

Re: Chess CAPTCHA

#2
It really isn't that secure since a bot could be used to calculate the checkmate and it takes more time than a normal CAPTCHA.

Re: Chess CAPTCHA

#3
This looks like a clever solution to the problem for lichess, at least until someone plugs together a relatively simple bot with 100% success rates. Though, just because it can be cracked easily doesn't necessarily demerit it, perhaps their biggest problem is random untargetted bots, in which case this is great (the argument that it could take longer isn't really important to people on a chess forum).

Re: Chess CAPTCHA

#4
I know a lot of people are commenting on how effectively this could be used, but I'm simply amazed at how clever this is.

The idea behind it is very interesting, but it obviously can't be used as a mainstream way of human detection. I think what matters here is the really well-made implementation with HTML5.

Great job!

Re: Chess CAPTCHA

#5
post #3

This looks like a clever solution to the problem for lichess, at least until someone plugs together a relatively simple bot with 100% success rates. Though, just because it can be cracked easily doesn't necessarily demerit it, perhaps their biggest problem is random untargetted bots, in which case this is great (the argument that it could take longer isn't really important to people on a chess forum).

It also keeps out beginners. Depending on the forum (I'm not familiar with lichess) that might be a drawback or a bonus.

Re: Chess CAPTCHA

#7
post #2

It really isn't that secure since a bot could be used to calculate the checkmate and it takes more time than a normal CAPTCHA.

That is definitely true, it's not good enough to secure yourself against a persistent attacker but I do think it's a good captcha:

It's a topical captcha that the target audience of the site will recognize and most likely enjoy.

It's significantly different from any other captcha so that automated untargeted bots will not be able to beat it

It has a high enough entropy that untargeted bots that repeatedly attempt to guess the answer will fail

People without a chess background most likely have to think about the answer in a way that makes buying human workers a less attractive option (maybe)

Re: Chess CAPTCHA

#8
post #2

It really isn't that secure since a bot could be used to calculate the checkmate and it takes more time than a normal CAPTCHA.

But then someone would have to target that forum specifically. The bots out there now won't have this functionality.

Also, as someone else mentioned, it might keep beginners out, which could be what they want? Seems like a bad idea, but it's not my board so...

Re: Chess CAPTCHA

#9

What's with the "Ping" at the bottom of the page. Why would someone do that?

A quick google gives this; apparently from the creator.

"I[t] tells how fast your computer talks with lichess server. It measures the time a message needs to make the round trip from your browser to lichess, then from lichess to your browser.

I'm interrested in knowing what your ping is, depending on the country/city where you live.

I live in Le Mans, France, and my ping is around 30-40ms.

What about you?"

{source} http://nn.lichess.org/forum/lichess-feedback/whats-your-ping

Re: Chess CAPTCHA

#10
post #2

It really isn't that secure since a bot could be used to calculate the checkmate and it takes more time than a normal CAPTCHA.

That is definitely true, it's not good enough to secure yourself against a persistent attacker but I do think it's a good captcha: It's a topical captcha that the target audience of the site will recognize and most likely enjoy. It's significantly different from any other captcha so that automated untargeted bots will not be able to beat it It has a high enough entropy that untargeted bots that repeatedly attempt to…

topic filtering ... and suddenly they noticed a sudden raise in quality in the forum.

Anyway, the same effect could be obtained by writing a "captcha" that simply asks: "Click on the queen", a fixed chess board picture. They are assuming no one targets them, so it's not so important how hard it is. (until someone targets them)

Post reply on HN