Earlier quoted context omitted.
I would change "a real user" with "a real user who doesn’t use a screen-reader". That’s less funny, but more accurate.
Out of curiosity: are there any known blind chess players? I guess it would be quite hardcore.
Chess CAPTCHA
111–120 of 171 posts
Re: Chess CAPTCHA
#112Re: Chess CAPTCHA
#113Earlier quoted context omitted.
I don't think a chess AI would offer much benefits to execution time with a brute force that is that small.
At the least, the HTTP response time overhead might be a reason to use an AI.
Re: Chess CAPTCHA
#114Earlier quoted context omitted.
Yes, an afternoon of coding to be able to post spam on exactly one website. Until they change the captcha.
Actually, the captcha predicate is a GET request that looks like this: http://en.lichess.org/captcha/78pkfjgz?solution=e5+e4 which returns 1 or 0. So the brute force captcha solution is to go through 8^4 (~4k) get requests, which you could code in five minutes and execute in a minute.
Re: Chess CAPTCHA
#115are there any ideas, how to deal with this problem? like a audio file, where all positions are being told? or anything like that? right now i would not have an idea how to solve this in a good way.
me as a web-developer often thinks about the common problem, we we need these captchas, and would be a good alternative to them. until now i had no idea )= hopefully someday someone has a idea to replace captchas with an easier protection for all people.
the sad part is, that we need stuff like captchas since years... stupid spam!!
Re: Chess CAPTCHA
#116I am fairly certain it would be quicker to program a computer that can brute force a checkmate in one than I can solve these things by hand. You have what, 11 pieces, they can move into 64 positions each (at most, much less in reality). That means a computer must brute force 64*11 = 704 attempts. In other words, no time at all to bruteforce this once you've read the grid. Reading the grid in itself is rather trivial…
Yes, an afternoon of coding to be able to post spam on exactly one website. Until they change the captcha.
Chess is even a particularly ironic implementation because it was one of the first traditionally human passtimes where computers excelled.
A site can have a CAPTCHA that's so bad it's not actually a CAPTCHA even if no one bothers to attack it. My hidden forum could require a user to sum one thousand integers before seeing any posts. I probably wouldn't attract any spammers (because no one would join to read their spam), but that doesn't mean the so-called CAPTCHA is beyond reproach.
Re: Chess CAPTCHA
#117I am fairly certain it would be quicker to program a computer that can brute force a checkmate in one than I can solve these things by hand. You have what, 11 pieces, they can move into 64 positions each (at most, much less in reality). That means a computer must brute force 64*11 = 704 attempts. In other words, no time at all to bruteforce this once you've read the grid. Reading the grid in itself is rather trivial…
Re: Chess CAPTCHA
#118Interestingly enough, it looks like it has a specific checkmate in mind. It generated a board for me in which black could be mated in two different ways, but one didn't count.
Re: Chess CAPTCHA
#119I know a lot of people are commenting on how effectively this could be used, but I'm simply amazed at how clever this is. The idea behind it is very interesting, but it obviously can't be used as a mainstream way of human detection. I think what matters here is the really well-made implementation with HTML5. Great job!
Re: Chess CAPTCHA
#120Not everyone plays chesss. This is a huge assumption here.
Indeed, nowhere does it say it is a general CAPTHCA solution.