Live data from Hacker News

Chess CAPTCHA

en.lichess.org

111–120 of 171 posts

Re: Chess CAPTCHA

#111
post #104
post #90

Earlier quoted context omitted.

I would change "a real user" with "a real user who doesn’t use a screen-reader". That’s less funny, but more accurate.

Out of curiosity: are there any known blind chess players? I guess it would be quite hardcore.

Ray Charles.

Re: Chess CAPTCHA

#113
post #39

Earlier quoted context omitted.

I don't think a chess AI would offer much benefits to execution time with a brute force that is that small.

At the least, the HTTP response time overhead might be a reason to use an AI.

Then implement a check for checkmates and brute force it on your computer before relaying the HTTP response. The real AI part is somewhat uneccesairy.

Re: Chess CAPTCHA

#114
post #110

Earlier quoted context omitted.

Yes, an afternoon of coding to be able to post spam on exactly one website. Until they change the captcha.

Actually, the captcha predicate is a GET request that looks like this: http://en.lichess.org/captcha/78pkfjgz?solution=e5+e4 which returns 1 or 0. So the brute force captcha solution is to go through 8^4 (~4k) get requests, which you could code in five minutes and execute in a minute.

I would imagine it'd be fairly trivial to limit the number of requests.

Re: Chess CAPTCHA

#115
i like the idea, but i'm not that good in chess so i'm lost here =) my advantage? i could learn it, and solve the problem, but what are blind people doing? they have no chance to solve the captcha.

are there any ideas, how to deal with this problem? like a audio file, where all positions are being told? or anything like that? right now i would not have an idea how to solve this in a good way.

me as a web-developer often thinks about the common problem, we we need these captchas, and would be a good alternative to them. until now i had no idea )= hopefully someday someone has a idea to replace captchas with an easier protection for all people.

the sad part is, that we need stuff like captchas since years... stupid spam!!

Re: Chess CAPTCHA

#116
post #45

I am fairly certain it would be quicker to program a computer that can brute force a checkmate in one than I can solve these things by hand. You have what, 11 pieces, they can move into 64 positions each (at most, much less in reality). That means a computer must brute force 64*11 = 704 attempts. In other words, no time at all to bruteforce this once you've read the grid. Reading the grid in itself is rather trivial…

Yes, an afternoon of coding to be able to post spam on exactly one website. Until they change the captcha.

OP may have been suggesting it's not actually a CAPTCHA in the first place, under the understanding that CAPTCHAs are at least nominally supposed to target something computers are bad at.

Chess is even a particularly ironic implementation because it was one of the first traditionally human passtimes where computers excelled.

A site can have a CAPTCHA that's so bad it's not actually a CAPTCHA even if no one bothers to attack it. My hidden forum could require a user to sum one thousand integers before seeing any posts. I probably wouldn't attract any spammers (because no one would join to read their spam), but that doesn't mean the so-called CAPTCHA is beyond reproach.

Re: Chess CAPTCHA

#117
post #45

I am fairly certain it would be quicker to program a computer that can brute force a checkmate in one than I can solve these things by hand. You have what, 11 pieces, they can move into 64 positions each (at most, much less in reality). That means a computer must brute force 64*11 = 704 attempts. In other words, no time at all to bruteforce this once you've read the grid. Reading the grid in itself is rather trivial…

Good point. Maybe this could be used as an anti-captcha then, to prove that you are a robot (although i can't think who would want that)

Re: Chess CAPTCHA

#118
post #97

Interestingly enough, it looks like it has a specific checkmate in mind. It generated a board for me in which black could be mated in two different ways, but one didn't count.

Did you get a screenshot of it?

Re: Chess CAPTCHA

#119
post #4

I know a lot of people are commenting on how effectively this could be used, but I'm simply amazed at how clever this is. The idea behind it is very interesting, but it obviously can't be used as a mainstream way of human detection. I think what matters here is the really well-made implementation with HTML5. Great job!

It is not HTML5 - I am using a browser that does not support HTML5.

Re: Chess CAPTCHA

#120

Not everyone plays chesss. This is a huge assumption here.

Yes, a HUGE assumption for access to the chess forums of a chess server...

Indeed, nowhere does it say it is a general CAPTHCA solution.

Post reply on HN