| | At Large Membership and Civil Society Participation in ICANN |
|
| |
|
|
|
|
This discussion has been archived.
No new comments can be posted.
|
|
GoDaddy.com launches RecallVeriSign.com Web site
|
Log in/Create an Account
| Top
| 5 comments
|
Search Discussion
|
|
|
|
The Fine Print:
The following comments are owned by whoever posted them.
We are not responsible for them in any way.
|
|
 |
|
I have heard that one way of breaking those image-based security locks, especially if they have long (or non-existant timeouts) is to capture the image and, in real time, put it up on a porn site and let some human enter the response. That response can then be fed back into the original web form.
|
|
|
|
[ Reply to This | Parent
]
|
|
|
|
Re:CAPTCHA image tests
by KarlAuerbach
|
| Starting Score: |
2 |
points |
| Karma-Bonus Modifier |
|
+1 |
|
| Total Score: |
|
3 |
|
|
|
|
I have heard that one way of breaking those image-based security locks, especially if they have long (or non-existant timeouts) is to capture the image and, in real time, put it up on a porn site and let some human enter the response.
It's not hard to design a CAPTCHA that's tied to your web site ("Please type the fourth letter in this sites domain name ...") But best case, a CAPTCHA only proves there's a human on the other end.
If what you're protecting is valuable enough, then the attacker could hire minimum wage workers to answer the questions.
But a CAPTCHA is still better than nothing.
|
|
|
|
[ Reply to This | Parent
]
|
|
|
Privacy Policy: We will not knowingly give out your personal data -- other than identifying your postings in the way you direct by setting your configuration options -- without a court order. All logos and trademarks in this site are property of their
respective owner. The comments are property of their posters, all the rest © 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 by ICANNWatch.Org. This web site was made with Slashcode, a web portal system written in perl. Slashcode is Free Software released under the GNU/GPL license.
You can syndicate our headlines in .rdf, .rss, or .xml. Domain registration services donated by DomainRegistry.com
|
