Live data from Hacker News

Worst CAPTCHA Ever

svedic.org

131–140 of 169 posts

Re: Worst CAPTCHA Ever

#131

Earlier quoted context omitted.

Isn't that one ambitious DA away from being a felony these days?

No, it was publicly accessible information from a public-facing website.

Since when was that a defence?

You circumvented COMPUTER SECURITY on a GOVERNMENT WEBSITE. This is how the judge will see it.

Re: Worst CAPTCHA Ever

#132
Two years ago I had to deal D&B's flagship product, which came packaged in a Java applet. I remember one day I upgraded to the latest version of Java(a security patch) and it broke their tool. After contacting them they said the only solution was to downgrade to the Java version with a known security hole...

Re: Worst CAPTCHA Ever

#133
post #22
post #6

Earlier quoted context omitted.

That's a great idea. If i was ever to create a product for colorblinds only i'd use that.

It's not an uncommon strategy (eg: fill up a comment form with hidden but obviously named form fields) and since people won't be filling in those hidden fields then bots will have revealed themselves. This isn't by any means a complete solution however it does catch 90% of drive-by spam.

Careful! There are legitimate toolbars that will helpfully prefill forms, sometimes even hidden fields. I've been bitten by this in production.

Re: Worst CAPTCHA Ever

#134
post #94
post #81

Earlier quoted context omitted.

Fun tip: reCAPTCHA is actually two things, the "re" and the "CAPTCHA". In other words, one half is about testing that you're not a human, while the other half is a legitimately unknown word from a source of failed optical character recognition. You actually don't have to get the latter one anything close to right; and I think you're given the option of at least one typo in the actual CAPTCHA test. So when a CAPTCHA l…

> try doing the possible half and typing in "balls" for the other half That doesn't help with the digitization of books. :)

Who gives a crap about helping Google digitize books that they scanned without publisher or author permission and that we won't be able to to read afterwards because we have to respect copyright where they didn't?

Capchas are a pox on the web, and reCaptcha a sleazy immoral one, too.

Re: Worst CAPTCHA Ever

#135
I find it hard to believe that you could be smart enough to build something like this, while also being dense enough to think that it's actually a CAPTCHA. My guess is that some pointy-haired boss really wanted a CAPTCHA and the developer didn't think it was needed. Everyone's happy.

Of course, the developer could have also just slapped RECAPTCHA on there and been done in even less time...

Re: Worst CAPTCHA Ever

#136
post #13

While this captcha is truly a display of ignorance I could imagine that "corporate developers" at D&B aren't web developers. All I am saying is that if you force me to write enterprise software (which I have zero experience with) on a tight schedule I'm probably going to make a stupid mistake or two even though I hope I am not of "lower quality". I imagine someone in management refused to hire web devs because "we've…

It doesn't matter though. This isn't just a 'stupid mistake' made by a dev rushed for time, this is literally 'not a captcha.' It's not. Not even a poorly designed and incompetently executed captcha... it just isn't even one at all. It doesn't take long to find out that best practices exist for captchas, what they are, what the typical vulnerabilities are, and then pick one from the top shelf of existing solutions on…

With hindsight, sure. But that's not looking at the whole picture.

The problem is not how much effort to stop this one mistake, the problem is how much effort to stop every potential mistake of similar importance to this.

Or worse, perhaps they did get this from a shelf of existing solutions.

Re: Worst CAPTCHA Ever

#137
post #94

Earlier quoted context omitted.

> try doing the possible half and typing in "balls" for the other half That doesn't help with the digitization of books. :)

Who gives a crap about helping Google digitize books that they scanned without publisher or author permission and that we won't be able to to read afterwards because we have to respect copyright where they didn't? Capchas are a pox on the web, and reCaptcha a sleazy immoral one, too.

Plus you can guess (with absolute certainty since they changed the domain to read the google.com cookie) they use it as an unblockable tracker to build a database of sites you're registered on.

Re: Worst CAPTCHA Ever

#138
This should give you a really good idea what it's like trying to get a DUNS number (a requirement for doing contract work with the government as a business). Their entire business is basically the front-end to a scam. Somebody pulled a network contact to wedge their company in between businesses and the federal government.

You are guaranteed to get scammy-sounding emails and phone calls from D&B after signing up. Emails with subjects like "Your business is in danger!" or messages like "Your business credit report has some big issues!" and you find out that in order to get "protection" or to find out what these "issues" are, you have to pay Dun and Bradstreet a shitload of money.

That company is a SCAM and a perfect example of how completely retarded/bought-and-paid-for the United States government is.

Re: Worst CAPTCHA Ever

#140
post #122
post #74

Earlier quoted context omitted.

And at the same time, most captcha solving services I've tried break recaptcha with no problem! And they aren't even expensive. Now, I dunno if they use fancy ML techniques or sweatshops with little African children receiving electroshocks when they get one wrong, but they do work to the point that nowadays captchas only repel legit users and very badly engineered spam bots, the good bots are already ahead of the gam…

I think all CAPTCHA solving "services" that offer reCAPTCHA solving rely on human work, and thus work on a delay (which obviously is just a minor inconvenience for any mass spamming operation). Here's a pretty nice article about it.[1] ReCAPTCHA itself remains unbroken to date (and it sure has gotten harder over the years too). [1] http://www.troyhunt.com/2012/01/breaking-captcha-with-automa...

reCAPTCHA was broken a couple times by these guys: http://www.dc949.org/projects/stiltwalker/
Post reply on HN