Live data from Hacker News

Worst CAPTCHA Ever

svedic.org

31–40 of 169 posts

Re: Worst CAPTCHA Ever

#33
post #2

Well, it is a good way to tell computers and humans apart. Computers can read it, while humans can't. They should reject corectly filled in captchas.

You'd think, but what's so dumb about this captcha is that it's both easy to guess for a computer, but for a human too. If you look at it, the random parts are outside the readable text (which is just white on a gray background). I'd love to know what led to the "decision" of implementing something so dumb.

The text has been selected, hence the single-colour backhround.

Re: Worst CAPTCHA Ever

#34
post #13

Earlier quoted context omitted.

It doesn't matter though. This isn't just a 'stupid mistake' made by a dev rushed for time, this is literally 'not a captcha.' It's not. Not even a poorly designed and incompetently executed captcha... it just isn't even one at all. It doesn't take long to find out that best practices exist for captchas, what they are, what the typical vulnerabilities are, and then pick one from the top shelf of existing solutions on…

The funny thing is that the dev is apparently competent enough to make it look like a captcha, yet not enough to know what the purpose of a captcha is. Actually, even if it was real captcha, a computer could still easily guess the answer because the random parts are outside the answer text.

Yeah the regular grid and text would probably make ocr even easier if it were necessary. It wouldn't surprise me if they just used uppercase letters, too.

Maybe they assumed that bots would interpret the page the way a human being would, when they're not looking at the source code? Though my money's on someone just not caring.

Re: Worst CAPTCHA Ever

#36
I've worked for managers who would've ask for features like this; they just wanted it to look like it functioned so our non-technical audience would think it was impressive.

Re: Worst CAPTCHA Ever

#38
Every expense was spared to give the impression that no expense had been spared. It's a credit report site; they want you to think they are secure.

Re: Worst CAPTCHA Ever

#39
There are different levels of "captcha". Some bots just fill any forms on any sites with their spam.. a simple client-side question goes a long way to mitigate this. It obviously is a very different story if it's a script created especially for this form.

Re: Worst CAPTCHA Ever

#40
post #38

Every expense was spared to give the impression that no expense had been spared. It's a credit report site; they want you to think they are secure.

Exactly. It probably increases conversion because it looks secure.

Credit card forms are sometimes used that way too, they get a lot of extra information because if they don't, people feel that they're scammy.

Post reply on HN