Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Automatically Solving Captchas on Project Euler

franklinta.com

Post reply on HN
Print view View original

11–15 of 15 posts

Re: Automatically Solving Captchas on Project Euler

#11

Post by userbinator »

ary wrote: post #2

This is a security problem for Project Euler and should have been disclosed to them as such. Dropping what amounts to a zero-day on their submission form is not acting in good faith. The right way to go about this would have been to break the captcha, submit the problems, and then email them a polite writeup. Claim the glory after they fix it.

What are the "bad guys" going to do, create accounts and submit problem solutions...? There doesn't appear to be anything worth "attacking" here anyway, so I don't think this is a "security problem" at all.

Re: Automatically Solving Captchas on Project Euler

#12

Post by fantan »

dlss wrote: post #10
joelthelion wrote: post #9

Earlier quoted context omitted.

Given that Google still uses text-based captchas in 2014, I think we can safely conclude that they are still state-of-the art. Of course Google's captchas are a little harder to defeat than these ones :)

1. ReCAPTCHA does a lot more than Project Euler's captchas... or to put it another way, the "Zero day" you're talking about would be worthless vs ReCAPTCHA: http://en.wikipedia.org/wiki/ReCAPTCHA#Security 2. Google requires a verified cell phone number for most of their services at this point, with the captha basically being a way to avoid spamming text messages "Given that people still drive cars in 2014, I think we…

I agree with everything you said but also want to add that recaptchas have been "solved" also. By google themselves actually (http://techcrunch.com/2014/04/16/googles-new-street-view-ima...).

Cars are safer now than they were in 1908 but are still one of leading cause of death. But it's the best we've got for now.

Re: Automatically Solving Captchas on Project Euler

#13

Post by joshdick »

userbinator wrote: post #11
ary wrote: post #2

This is a security problem for Project Euler and should have been disclosed to them as such. Dropping what amounts to a zero-day on their submission form is not acting in good faith. The right way to go about this would have been to break the captcha, submit the problems, and then email them a polite writeup. Claim the glory after they fix it.

What are the "bad guys" going to do, create accounts and submit problem solutions...? There doesn't appear to be anything worth "attacking" here anyway, so I don't think this is a "security problem" at all.

The captcha was introduced to Project Euler a few years ago in response to someone spamming the site with requests to check an answer.

Apparently, someone had trouble with a question, so they wrote a script to submit every possible number.

Re: Automatically Solving Captchas on Project Euler

#15

Post by fantan »

kevinburke wrote: post #14

Heh! I implemented this a few years ago as part of a command line client for submitting solutions. https://bitbucket.org/kevinburke/euler

Looking at a screenshot https://skitch.com/kburke/fmkf3/1-bash-2-1 it seems like all this does is display the image in terminal and still requires user input?
Post reply on HN