3 ms·

Quoting their FAQ: " The Captcha (humanity check) is way too simple, I can bruteforce it with a script! It's exactly how it should be. It's not an unbreakable

Quoting their FAQ: " The Captcha (humanity check) is way too simple, I can bruteforce it with a script! It's exactly how it should be. It's not an unbreakable locker. We prefer simple captchas, ease of use and convenience over undecypherable and cumbersome enigmas. " Not convinced...

mapleoin 16y ago
Yeah, I don't understand how that helps with the goal of protecting my email...
- mike-cardwell 16y ago
  If anything, it will do the opposite. https://encrypted.google.com/search?q=http://scr.im/ https://encrypted.google.com/search?q=http://scr.im/ 95,000 results. Easily scriptable. Any spammers out there want a list of email addresses of people who are interested in spam protection?
  - tankrim 16y ago
    Quickly scanning a few randomly selected search result pages revealed exactly zero links to email addresses protected by scr.im.
    - lrm242 16y ago
      First two pages of results: http://scr.im/yuri http://scr.im/yuri http://scr.im/john http://scr.im/john http://scr.im/stevie http://scr.im/stevie http://scr.im/palmynthteu http://scr.im/palmynthteu http://scr.im/mrintech http://scr.im/mrintech http://scr.im/jffcrmr http://scr.im/jffcrmr
    - mike-cardwell 16y ago
      You didn't look very hard then, there's loads.
olalonde 16y ago
I still don't get why anyone would want to use this service. First, if you've had an e-mail for long enough, chances are you are already getting spammed like hell. Second, if you really really wanted to keep your e-mail free from spam, you would use a truly unbreakable captcha. IMHO, the only viable solution to spam nowadays is filtering - not prevention.
lrm242 16y ago
Sorry, the CAPTCHA is completely pointless. Here's why: 1. Go to http://scr.im/test http://scr.im/test 2. Click the upper right box 3. If you receive an error page, click "Try Again" and go to step 1. 4. You should arrive at this step in approximately 9 tries (on average) taking less than 15 seconds. What the heck is the point of a "human test" if it can be automatically attacked by a bot with literally no effort at all. The funny thing is that there is a more traditional CAPTCHA at http://scr.im/test?failsafe=1 http://scr.im/test?failsafe=1 that is much more secure. Why is the default CAPTCHA pointless? Because it attempts to test for "human-ness" without requiring any human action what so ever. Click a link, the same link, over and over until it is correct is what a bot will do. On the flip side, using your eyes to interpret slightly out of skew characters is decidedly much harder for anything other than a "human" to do.
- deleted 16y ago
  [deleted]

mapleoin 16y ago

Yeah, I don't understand how that helps with the goal of protecting my email...

mike-cardwell 16y ago
If anything, it will do the opposite. https://encrypted.google.com/search?q=http://scr.im/ https://encrypted.google.com/search?q=http://scr.im/ 95,000 results. Easily scriptable. Any spammers out there want a list of email addresses of people who are interested in spam protection?
- tankrim 16y ago
  Quickly scanning a few randomly selected search result pages revealed exactly zero links to email addresses protected by scr.im.
  - lrm242 16y ago
    First two pages of results: http://scr.im/yuri http://scr.im/yuri http://scr.im/john http://scr.im/john http://scr.im/stevie http://scr.im/stevie http://scr.im/palmynthteu http://scr.im/palmynthteu http://scr.im/mrintech http://scr.im/mrintech http://scr.im/jffcrmr http://scr.im/jffcrmr
  - mike-cardwell 16y ago
    You didn't look very hard then, there's loads.

olalonde 16y ago

I still don't get why anyone would want to use this service. First, if you've had an e-mail for long enough, chances are you are already getting spammed like hell. Second, if you really really wanted to keep your e-mail free from spam, you would use a truly unbreakable captcha. IMHO, the only viable solution to spam nowadays is filtering - not prevention.

lrm242 16y ago

Sorry, the CAPTCHA is completely pointless. Here's why: 1. Go to http://scr.im/test http://scr.im/test 2. Click the upper right box 3. If you receive an error page, click "Try Again" and go to step 1. 4. You should arrive at this step in approximately 9 tries (on average) taking less than 15 seconds. What the heck is the point of a "human test" if it can be automatically attacked by a bot with literally no effort at all. The funny thing is that there is a more traditional CAPTCHA at http://scr.im/test?failsafe=1 http://scr.im/test?failsafe=1 that is much more secure. Why is the default CAPTCHA pointless? Because it attempts to test for "human-ness" without requiring any human action what so ever. Click a link, the same link, over and over until it is correct is what a bot will do. On the flip side, using your eyes to interpret slightly out of skew characters is decidedly much harder for anything other than a "human" to do.

deleted 16y ago
[deleted]