Attacking Audio reCaptcha using Google's Web Speech API

#1

Post by morphics » Sun, Apr 20, 2014, 8:48 PM UTC

Attacking Audio reCaptcha using Google's Web Speech API
debasish.in

Re: Attacking Audio reCaptcha using Google's Web Speech API

#2

Post by joshfraser » Sun, Apr 20, 2014, 9:14 PM UTC

This feels like a good time to repost my article on why you should never use a CAPTCHA:

http://www.onlineaspect.com/2010/07/02/why-you-should-never-...

Re: Attacking Audio reCaptcha using Google's Web Speech API

#3

Post by vowelless » Sun, Apr 20, 2014, 9:51 PM UTC

This is a relevant and very entertaining talk: http://www.youtube.com/watch?v=rfgGNsPPAfU&feature=player_em...

Re: Attacking Audio reCaptcha using Google's Web Speech API

#4

Post by userbinator » Mon, Apr 21, 2014, 12:28 AM UTC

Using Google's services on themselves? This is awesome and reminds me of the article a short while ago about Google's own OCR beating its (visual) CAPTCHA.

Re: Attacking Audio reCaptcha using Google's Web Speech API

#5

Post by daurnimator » Mon, Apr 21, 2014, 3:33 AM UTC

vowelless wrote: post #3

This is a relevant and very entertaining talk: http://www.youtube.com/watch?v=rfgGNsPPAfU&feature=player_em...

Infact the same thing was discussed at 55 mins in.

Re: Attacking Audio reCaptcha using Google's Web Speech API

#6

Post by nacs » Mon, Apr 21, 2014, 4:05 AM UTC

vowelless wrote: post #3

This is a relevant and very entertaining talk: http://www.youtube.com/watch?v=rfgGNsPPAfU&feature=player_em...

The "new" version of the audio Captcha mentioned in that video is truly unbelievable. For those that haven't heard it, give it a go here:

http://www.google.com/recaptcha/learnmore (click the small audio icon to the right of the input box)

I turned my volume up pretty high and couldn't understand a single word over all the static in the background and over-distorted foreground audio is unintelligble. Can people actually get that audio captcha right or is that Google trolling people?

Re: Attacking Audio reCaptcha using Google's Web Speech API

#7

Post by emhart » Mon, Apr 21, 2014, 1:01 PM UTC

vowelless wrote: post #3

This is a relevant and very entertaining talk: http://www.youtube.com/watch?v=rfgGNsPPAfU&feature=player_em...

LayerOne is one of my favorite conferences every year, and that talk was one of the best I've ever seen. The depth, clarity and cleverness contrasted nicely with the ever increasing intoxication.