Highest Voted 'captcha' Questions - IT Security Stack Exchange

29

votes

3 answers

Is there anything insecure about Google ReCaptcha?

In this question on software recommendations, the OP asks for an alternative to Google reCAPTCHA because "for a security reasons also we don't want to depend on any out side services". As far as I know, you ask Google for a CAPTCHA, you display it,…

captcha

asked Sep 28 '15 at 12:35

Mawg says reinstate Monica

1,410
2
14
26

23

votes

3 answers

If we know CAPTCHA can be beat, why are we still using them?

If we know CAPTCHA can be beat, why are we still using them? A 35% to 90% success rate like wikipedia is stating means software is better at solving CAPTCHAs then I am.

captcha

asked Jan 08 '13 at 02:40

sup

371
3
13

13

votes

3 answers

AntiForgeryToken versus Captcha

I am having some question regarding captcha and AntiForgeryToken Do I need to use captcha if I am using AntiForgeryToken in an MVC application. Does AntiForgeryToken prevents automated form submission? Can I use AntiForgeryToken as an alternative…

captcha

asked Sep 01 '14 at 07:19

Twix

233
2
6

9

votes

5 answers

What type of captcha will you recommend?

What type of captcha will you recommend? I am looking mainly at usability, ease of use (development too), relatively secure Usability I find that those captcha with very curly words/numbers are sometimes too unreadable. What I start to see in many…

captcha

asked Dec 23 '10 at 12:56

jiewmeng

5

votes

5 answers

Why re-verify with CAPTCHA on failed form entry?

Is there a reason for sites to ask for another CAPTCHA verification when some other part of the registration form, e.g. the username, was invalid?

captcha

asked Apr 25 '11 at 07:59

user1633

4

votes

2 answers

Are photo recognition captchas a reliable way to distinguish humans from bots?

You all know captchas that require you to either type some letters displayed in an obfuscated way as image. Recently I started to see more and more captchas that show you a set of small photos and require you to e.g. "select all street signs" or…

captcha

asked May 10 '16 at 19:45

Byte Commander

160
1
6

3

votes

2 answers

Are captchas based on ASCII art secure enough?

I have just came across an ASCII art captcha, something that I have never seen before. It seems to be really easy to implement server side! Are ASCII art captchas secure enough?

captcha

asked May 04 '15 at 13:02

Renato Gama

171
1
6

3

votes

5 answers

Anyone using Asirra in production? Are there similar alternatives?

The Asirra project is a Captcha alternative that shows you pictures of kittens and puppies to fend off bots and prove that the end user is a human. Is anyone using Asirra (or something similar) in production? What alternatives are you aware…

captcha

asked Nov 24 '10 at 01:45

makerofthings7

50,918
55
261
556

3

votes

1 answer

A potential CAPTCHA phishing attack against reCAPTCHA?

In reCAPTCHA's API (without plugin), the key part is

<div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/captcha" class="post-tag grid--cell" title="show questions tagged 'captcha'" rel="tag">captcha</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Oct 03 '14 at 18:58">asked Oct 03 '14 at 18:58</time>
    <a href="../../users/56842/randytek" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/56842.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="RandyTek" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/56842/randytek" class="s-user-card--link">RandyTek</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">141</li>
            
            
            <li class="s-award-bling s-award-bling__bronze" title="7 bronze badges">7</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-229368">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>3</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status ">
                <strong>2</strong> answers
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/229368/do-we-use-different-captchas-with-different-difficulty-to-how-sensitive-the-re" class="question-hyperlink">Do we use different CAPTCHAs with different difficulty to how sensitive the request is?</a></h3>
        <div class="excerpt">My idea is to use a sort of layered CAPTCHA model (4 layers - from which layer 0 is no captcha) with difficulty as primary focus.
My first focus beside stopping bots is to make the visitor more and more aware of what he's doing.
It will give the…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/captcha" class="post-tag grid--cell" title="show questions tagged 'captcha'" rel="tag">captcha</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Apr 07 '20 at 10:27">asked Apr 07 '20 at 10:27</time>
    <a href="../../users/214899/criticalsys" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/214899.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="CriticalSYS" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/214899/criticalsys" class="s-user-card--link">CriticalSYS</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">194</li>
            
            <li class="s-award-bling s-award-bling__silver" title="1 silver badges">1</li>
            <li class="s-award-bling s-award-bling__bronze" title="13 bronze badges">13</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-41992">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>2</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status ">
                <strong>3</strong> answers
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/41992/what-is-a-good-way-of-preventing-captcha-jacking-attacks" class="question-hyperlink">What is a good way of preventing captcha jacking attacks?</a></h3>
        <div class="excerpt">Captcha jacking is an attack to bypass a captcha by coercing a human into solving the challenge response. Prof of concept code that uses a proxy can be found here.
Is there a good method of preventing this type of attack?   How can an application…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/captcha" class="post-tag grid--cell" title="show questions tagged 'captcha'" rel="tag">captcha</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Sep 07 '13 at 21:23">asked Sep 07 '13 at 21:23</time>
    <a href="../../users/975/rook" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/975.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="rook" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/975/rook" class="s-user-card--link">rook</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">47,238</li>
            <li class="s-award-bling s-award-bling__gold" title="10 gold badges">10</li>
            <li class="s-award-bling s-award-bling__silver" title="96 silver badges">96</li>
            <li class="s-award-bling s-award-bling__bronze" title="182 bronze badges">182</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-210879">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>2</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status answered-accepted">
                <strong>2</strong> answers
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/210879/how-can-google-s-recaptcha-verify-identity-and-train-ai" class="question-hyperlink">How can google's ReCaptcha verify identity *and* train AI?</a></h3>
        <div class="excerpt">I have heard that the reason the image portion of ReCaptcha contains so many driving questions is that Google is using it to train AI for their self-driving cars. But to make it an effective security measure, wouldn't Google need to verify that the…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/captcha" class="post-tag grid--cell" title="show questions tagged 'captcha'" rel="tag">captcha</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked May 27 '19 at 17:25">asked May 27 '19 at 17:25</time>
    <a href="../../users/208967/compileyourcake" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/208967.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="CompileYourCake" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/208967/compileyourcake" class="s-user-card--link">CompileYourCake</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">123</li>
            
            
            <li class="s-award-bling s-award-bling__bronze" title="3 bronze badges">3</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-199459">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>2</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status ">
                <strong>1</strong> answer
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/199459/can-we-use-reverse-image-search-to-bypass-image-captchas" class="question-hyperlink">Can we use reverse image search to bypass image CAPTCHAs?</a></h3>
        <div class="excerpt">Has there been any group that managed to bypass the Image CAPTCHAs using reverse image search? Whats stopping people from writing a script that bypasses these CAPTCHAs by reverse image searching via many services like Google and make a choice?
And…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/captcha" class="post-tag grid--cell" title="show questions tagged 'captcha'" rel="tag">captcha</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Dec 10 '18 at 07:41">asked Dec 10 '18 at 07:41</time>
    <a href="../../users/187893/richard-jones" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/187893.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="Richard Jones" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/187893/richard-jones" class="s-user-card--link">Richard Jones</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">507</li>
            <li class="s-award-bling s-award-bling__gold" title="2 gold badges">2</li>
            <li class="s-award-bling s-award-bling__silver" title="6 silver badges">6</li>
            <li class="s-award-bling s-award-bling__bronze" title="9 bronze badges">9</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-149425">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>2</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status answered-accepted">
                <strong>2</strong> answers
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/149425/is-captcha-on-nth-login-attempt-is-really-stops-bots" class="question-hyperlink">Is captcha on nth login attempt is really stops bots?</a></h3>
        <div class="excerpt">I have a requirement to show google reCaptcha on 2nd attempt on login screen.
But frankly speaking I consider it not the way to stop bots.
Because on server side I cannot tell whether  this is the first or second login attempt unless the user…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/captcha" class="post-tag grid--cell" title="show questions tagged 'captcha'" rel="tag">captcha</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Jan 25 '17 at 19:10">asked Jan 25 '17 at 19:10</time>
    <a href="../../users/75980/muhammad-hewedy" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/75980.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="Muhammad Hewedy" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/75980/muhammad-hewedy" class="s-user-card--link">Muhammad Hewedy</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">123</li>
            
            
            <li class="s-award-bling s-award-bling__bronze" title="5 bronze badges">5</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-146678">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>2</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status answered-accepted">
                <strong>2</strong> answers
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/146678/what-is-the-future-of-captcha" class="question-hyperlink">What is the future of CAPTCHA?</a></h3>
        <div class="excerpt">According to this article  this guy has made a simple AI to beat CAPTCHA. With the development of AI, robots will pass the Turing test, and bots will beat Google's reCAPTCHA, maybe already there are robots that can beat all captchas, so, what will…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/captcha" class="post-tag grid--cell" title="show questions tagged 'captcha'" rel="tag">captcha</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Dec 29 '16 at 06:14">asked Dec 29 '16 at 06:14</time>
    <a href="../../users/112122/lasan" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/112122.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="lasan" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/112122/lasan" class="s-user-card--link">lasan</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">317</li>
            <li class="s-award-bling s-award-bling__gold" title="1 gold badge">1</li>
            <li class="s-award-bling s-award-bling__silver" title="3 silver badge">3</li>
            <li class="s-award-bling s-award-bling__bronze" title="9 bronze badge">9</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>

</div>
        </div>

</div>
        </div>
        <script src="../../static/js/stack-icons.js"></script>
        <script src="../../static/js/fromnow.js"></script>
        
    </body>
</html>

Questions tagged [captcha]