this guy probably has a swastika for a tattoo
DOOM Captcha
161–170 of 178 posts
Re: DOOM Captcha
#162Re: DOOM Captcha
#163Re: DOOM Captcha
#164Earlier quoted context omitted.
It mostly depends on what you are trying to protect with your CAPTCHA. When I managed a small phpbb forum, all I had to do was to change a few lines in the register page to make it non-standard and it stopped all bots. Better than the built-in CAPTCHA. Simply, no one cared enough about our forum to write a specialized tool, no matter how easy it was. If it is all you have to protect, go ahead with your clever ideas,…
When I managed a purely Danish forum, i simply added a textbox and asked the user to write ‘æ’ in it. Never saw any spam after that.
They couldn't copy-paste 'æ'?
Re: DOOM Captcha
#165Re: DOOM Captcha
#166Cool! Music is a bit too much, but it's great that it can be turned off. Link to repo: https://github.com/vivirenremoto/doomcaptcha
Websites with auto-play.
Always a joy at 0:16am when everyone's already asleep.
Re: DOOM Captcha
#167While this is too simple (even the website admits that a bot could be written in virtually no time to break it), it does make me wonder if you could have a WarioWare CAPCHA. A minigame with extremely vague description that you have to react to quickly to pass. Thinking about it some more it fails the primary criteria for a CAPCHA: it needs to be harder to write the bot that cracks it than each test case, by at least…
It mostly depends on what you are trying to protect with your CAPTCHA. When I managed a small phpbb forum, all I had to do was to change a few lines in the register page to make it non-standard and it stopped all bots. Better than the built-in CAPTCHA. Simply, no one cared enough about our forum to write a specialized tool, no matter how easy it was. If it is all you have to protect, go ahead with your clever ideas,…
This is the best comment, by far. Of course we can have lots of brainstorming about other fun captcha-ish constructions, but the key question is whether they satisfy their purpose, which is to filter machines out and only those.
In low scale settings, if it's a place almost nobody knows, then this works, but many approaches work like just asking "What is 1+1?". Scale is low, no bot writer will bother to adjust.
In high scale, high visibility, none of this works. The incentive to break your captcha is so high that you'd need to basically construct a reverse turing test. You need to assume that the attacker is very powerful and very smart and will spend months custom tuning their solution to vreak your captcha. This is really hard and how to do it is the interesting discussion.
In summay, the setting matters. If it's the first one, we can debate toys all day long but they only have entertainment value. If it's the second then this is really hard and state of the art is to click pictures with traffic lights.
Re: DOOM Captcha
#168Interesting. Fundamentally, I believe CAPTCHA, and attempting to distinguish humans from computers is pointless. I think it's better just accept it and design applications accordingly.
I don't understand. How would you propose protecting a website from DDoS attacks? What sort of design would address that?
Avoiding DDoSability of your app (removing bottlenecks, scaling up replicas, implementing rate-limiting, etc). There are probably some rare cases where captcha is useful, though. For example some account creations where you wish to have more human accounts created, especially if you need to later manually approve them by humans (verifying documents, etc) and don't want to deal with thousands of cat photos instead of passport scans.
Re: DOOM Captcha
#169Men In Black (1997) “[In a shooting range, confronted with numerous menacing-looking targets, Edwards shoots a cardboard little girl] Zed: May I ask why you felt little Tiffany deserved to die? James Edwards: Well, she was the only one that actually seemed dangerous at the time, sir. Zed: How'd you come to that conclusion? James Edwards: Well, first I was gonna pop this guy hanging from the street light, and I realiz…
Now i feel like rewatching that movie!