Automatically Solving Captchas on Project Euler
franklinta.com
Automatically Solving Captchas on Project Euler
1–10 of 15 posts
Re: Automatically Solving Captchas on Project Euler
#2This is a security problem for Project Euler and should have been disclosed to them as such. Dropping what amounts to a zero-day on their submission form is not acting in good faith.
The right way to go about this would have been to break the captcha, submit the problems, and then email them a polite writeup. Claim the glory after they fix it.
Re: Automatically Solving Captchas on Project Euler
#3nice simple approach!
And despite the previous commenter I don't see a problem with publishing a neat solution to a fairly cursory attempt to prevent automated submissions. If they care enough they can fix it, but the rather simplistic nature of their capcha implies they don't care much. shrug
Re: Automatically Solving Captchas on Project Euler
#4This is a security problem for Project Euler and should have been disclosed to them as such. Dropping what amounts to a zero-day on their submission form is not acting in good faith. The right way to go about this would have been to break the captcha, submit the problems, and then email them a polite writeup. Claim the glory after they fix it.
It's a dick move to be a griefer / enable grifers to a bunch of nice people. Lots of us knew you could do this; nobody else was a big enough ass to give script kiddies code.
Re: Automatically Solving Captchas on Project Euler
#5This is a security problem for Project Euler and should have been disclosed to them as such. Dropping what amounts to a zero-day on their submission form is not acting in good faith. The right way to go about this would have been to break the captcha, submit the problems, and then email them a polite writeup. Claim the glory after they fix it.
There's no code provided, and not really any original research here either. Anyone that was trying to break such a simple captcha, and is able to understand this blog post, already has all the tools they needed to break it. Reading this blog post maybe would save someone half an hour of thinking about the problem.
Re: Automatically Solving Captchas on Project Euler
#6This is a security problem for Project Euler and should have been disclosed to them as such. Dropping what amounts to a zero-day on their submission form is not acting in good faith. The right way to go about this would have been to break the captcha, submit the problems, and then email them a polite writeup. Claim the glory after they fix it.
Bahahah....
Any site using captchas for anti-bot security is already broken. There are plenty of web services to solve captchas for fractions of pennies.
Don't use captchas. Text-based captchas have been broken since 2010 at least.
Re: Automatically Solving Captchas on Project Euler
#7This is a security problem for Project Euler and should have been disclosed to them as such. Dropping what amounts to a zero-day on their submission form is not acting in good faith. The right way to go about this would have been to break the captcha, submit the problems, and then email them a polite writeup. Claim the glory after they fix it.
There's no code provided, and not really any original research here either. Anyone that was trying to break such a simple captcha, and is able to understand this blog post, already has all the tools they needed to break it. Reading this blog post maybe would save someone half an hour of thinking about the problem.
> There's no code provided
Yes there is: https://github.com/fta2012/ProjectEulerCaptchaSolver
Re: Automatically Solving Captchas on Project Euler
#8This is a security problem for Project Euler and should have been disclosed to them as such. Dropping what amounts to a zero-day on their submission form is not acting in good faith. The right way to go about this would have been to break the captcha, submit the problems, and then email them a polite writeup. Claim the glory after they fix it.
Bahahah.... Any site using captchas for anti-bot security is already broken. There are plenty of web services to solve captchas for fractions of pennies. Don't use captchas. Text-based captchas have been broken since 2010 at least.
What are some good alternatives?
Re: Automatically Solving Captchas on Project Euler
#9Earlier quoted context omitted.
Bahahah.... Any site using captchas for anti-bot security is already broken. There are plenty of web services to solve captchas for fractions of pennies. Don't use captchas. Text-based captchas have been broken since 2010 at least.
What are some good alternatives?
Given that Google still uses text-based captchas in 2014, I think we can safely conclude that they are still state-of-the art. Of course Google's captchas are a little harder to defeat than these ones :)
Re: Automatically Solving Captchas on Project Euler
#10Earlier quoted context omitted.
What are some good alternatives?
Given that Google still uses text-based captchas in 2014, I think we can safely conclude that they are still state-of-the art. Of course Google's captchas are a little harder to defeat than these ones :)
1. ReCAPTCHA does a lot more than Project Euler's captchas... or to put it another way, the "Zero day" you're talking about would be worthless vs ReCAPTCHA: http://en.wikipedia.org/wiki/ReCAPTCHA#Security
2. Google requires a verified cell phone number for most of their services at this point, with the captha basically being a way to avoid spamming text messages
"Given that people still drive cars in 2014, I think we can safely conclude that the 1908 Ford Model T is still state-of-the art"