5 ms·
I had yesterday off and so spent four or so hours writing this. I haven't made it recognize all of the cases. It still gets a few wrong, but usually it'll just
by Xk 16y ago
I had yesterday off and so spent four or so hours writing this.
I haven't made it recognize all of the cases. It still gets a few wrong, but usually it'll just say FAILURE when it can't solve it.
As the page says, it's just a ~300 line grammar file and a parser-generator with syntax directed translation to solve the questions.
- lisper 16y agoVery nice. Any chance you'll release the code (or the grammar)?
- Xk 16y agoI'd like to wait a little bit to see if Rob (who it seems runs the site) will make it a little better. There are people who use this service and I don't think it would be right to let spammers attack them. Granted, it wouldn't be hard for someone else to do the same as me, but I just don't want my work used to do harm to someone else.
- mattmanser 16y agoGood job on the code and kudos for not just releasing the code without giving the author some time.
- jaspero 16y agoI think you should release your wonderful algorithm not directly as a way to hack text-captchas but in some other useful forms.
- jerf 16y agoYou might as well release it. The idea is fundamentally flawed, advantage attacker, and there is nothing they can do about it. You won't be hurting them, you'll sort of be doing them a favor. They've already sunk time into the idea, this is a chance for them to cut their time losses and run. Though they may take it wrong and try to start an arms race with your code, to which I'd say: An arms race in the CAPTCHA space is already a win for the attackers. In case of tie, spammers win.
- bl4k 16y agocare to publish the src?
- Xk 16y agoI replied to another comment, but since this one is getting upvoted I'll reply here too: I do not want to publish the grammar file yet. Later on, yeah, I can do that. But for now I want to leave it up to the people who run this service to improve it. I simply want to demonstrate that their scheme is not effective, I do not want to cause harm to anyone who uses it.
- davidjhall 16y agosrc or it didn't happen. ;-)
- jrockway 16y agoPeople using brand-new untested technology for security purposes are doing it for fun, not because it's a good idea. So releasing the source code to break it should not cause any problems.
- oofoe 16y agoCan I ask what you're using to do the parsing? Or did you write your own? This is definitely the kind of thing that I could see doing with REBOL's parse operator, but Python doesn't (seem to) come with such a tool built in. Thanks!
- Xk 16y agoFor a class in college I had to write a parser-generator, so I'm using mine.
- jasonlotito 16y agoChicken, egg: which came first? A: FAILURE sigh So close.
- amanuel 16y agothe rooster? FTW!