It would have been easy to have just stored that bit of session state to the server. It’d also be pretty easy to alter the HTML board to a prerendered image w

It would have been easy to have just stored that bit of session state to the server. It’d also be pretty easy to alter the HTML board to a prerendered image with imagemap click detection. At which point someones writing custom image feature detection software to break your captchas. Of course, this mainly works because of the obscurity, even with the upgrades. And since someone’s already going to have to write custom software to break this I’m not sure it’s worth it to upgrade - as I doubt it’s worth anyone’s time to do write the minimal software that needed now.