Re^2: howto: Perl CGI, image with random scewed text for account creations

Would this not be too easy a pick to bypass? With the use of Aspell or any spellchecker, I could quite reliably find the typo automatically. If you added a word that would be a good English word but clearly didn't fit in the sentence, that would be another matter, but that would be also very hard to do randomly with certainty that it will be clear what the inserted word is.

Comment on Re^2: howto: Perl CGI, image with random scewed text for account creations

Replies are listed 'Best First'.
Re^3: howto: Perl CGI, image with random scewed text for account creations by gloryhack (Deacon) on Mar 12, 2007 at 16:05 UTC
'Tis the nature of arms races. My grandchildren will be playing this game long after I'm buried in a box. I think the next step for any CAPTCHA is to add some additional noise into the equation along with some dynamic firewalling, and that's my plan for my own implementation. The policy will be simply "bounce off of the defense x times in y seconds and you're firewalled away for z seconds". That'll work for a while, then it'll be time for a radical rethink. Again.	[reply]

Replies are listed 'Best First'.

Re^3: howto: Perl CGI, image with random scewed text for account creations
by gloryhack (Deacon) on Mar 12, 2007 at 16:05 UTC

'Tis the nature of arms races. My grandchildren will be playing this game long after I'm buried in a box.

I think the next step for any CAPTCHA is to add some additional noise into the equation along with some dynamic firewalling, and that's my plan for my own implementation. The policy will be simply "bounce off of the defense x times in y seconds and you're firewalled away for z seconds". That'll work for a while, then it'll be time for a radical rethink. Again.

[reply]