Live data from Hacker News

Chess CAPTCHA

en.lichess.org

31–40 of 171 posts

Re: Chess CAPTCHA

#31
post #19
post #2

It really isn't that secure since a bot could be used to calculate the checkmate and it takes more time than a normal CAPTCHA.

> it takes more time than a normal CAPTCHA Most of these captchas are very easy. If the targeted king was easier to spot (e.g. marked red) I'm sure I would solve them faster than the omnipresent reCaptchas (even knowing that I only need to type the less legible word).

Yes but for some people that don't know how to play chess it would be very hard.

Re: Chess CAPTCHA

#32
Yeah, let's pick one of the things that computers do much better than humans and make a captcha based on it!

It's astounding, I'm not even sure how to offend them, since I don't think any sort of insult is enough for whoever "designed" this.

Re: Chess CAPTCHA

#33
post #15

I thought image recognition on that would be trivially easy to compute? You could identify each piece, then just analyse it to work out the 1 move. As a layman, it seems less computationally difficult to solve that than a state-of-the-art captcha currently?

Not even image recognition. The chessboard is nicely marked-up with relevant classes (e.g. 'bishop') for each piece; would be very easy to automatically solve. However, as others have said, since it's such a narrow target, it's probably not worth cracking.

Re: Chess CAPTCHA

#34
post #31
post #19

Earlier quoted context omitted.

> it takes more time than a normal CAPTCHA Most of these captchas are very easy. If the targeted king was easier to spot (e.g. marked red) I'm sure I would solve them faster than the omnipresent reCaptchas (even knowing that I only need to type the less legible word).

Yes but for some people that don't know how to play chess it would be very hard.

I'd hazard a guess that most people posting on a chess forum know the rules.

And as somebody else pointed out, maybe they don't want new topics asking what are the possible moves of a queen.

Re: Chess CAPTCHA

#35
post #9

Earlier quoted context omitted.

A quick google gives this; apparently from the creator. "I[t] tells how fast your computer talks with lichess server. It measures the time a message needs to make the round trip from your browser to lichess, then from lichess to your browser. I'm interrested in knowing what your ping is, depending on the country/city where you live. I live in Le Mans, France, and my ping is around 30-40ms. What about you?" {source} h…

I know what a ping is. Why would someone do that on a website? It just seems pointless and causes additional load on the server.

lichess.org is a game server, and supports real-time playing. The ping is a critical information when you play fast games, it helps to diagnose lagging when it happens.

Re: Chess CAPTCHA

#36
post #31
post #19

Earlier quoted context omitted.

> it takes more time than a normal CAPTCHA Most of these captchas are very easy. If the targeted king was easier to spot (e.g. marked red) I'm sure I would solve them faster than the omnipresent reCaptchas (even knowing that I only need to type the less legible word).

Yes but for some people that don't know how to play chess it would be very hard.

It is on a chess forum.

Re: Chess CAPTCHA

#37
post #21

Can brute force answer from the server quicky: http://en.lichess.org/captcha/0nbdeigw?solution=a1+a2 returns either 1 or 0. The total complexity of this to brute force is 768 possible moves. Most of us here could write a bot to spam their site with less than 30 minutes of time and effort.

Philistine! At least plug it into a chess AI and do it properly.

I don't think a chess AI would offer much benefits to execution time with a brute force that is that small.

Re: Chess CAPTCHA

#39

Earlier quoted context omitted.

Philistine! At least plug it into a chess AI and do it properly.

I don't think a chess AI would offer much benefits to execution time with a brute force that is that small.

At the least, the HTTP response time overhead might be a reason to use an AI.

Re: Chess CAPTCHA

#40
post #21

Can brute force answer from the server quicky: http://en.lichess.org/captcha/0nbdeigw?solution=a1+a2 returns either 1 or 0. The total complexity of this to brute force is 768 possible moves. Most of us here could write a bot to spam their site with less than 30 minutes of time and effort.

Blocking bruteforce is 'easy', just make any attempts after X attempts be void for the given board/ip

For the humans, just give another board (and add a time delay)

Post reply on HN