5 ms·
Doesn't this just make the CAPTCHA easier to solve for a bot? There's 20 frames in each challenge image, 20 different sets of data to process and compare for a
by nwh 13y ago
Doesn't this just make the CAPTCHA easier to solve for a bot?
There's 20 frames in each challenge image, 20 different sets of data to process and compare for a correct result. It's also three letters long.
ED: The form itself is included in an iframe, with the following tag:
<meta http-equiv="Expires" content="Sat, 1 Apr 2006 23:59:59 GMT">
ED2: The audio CAPTCHA sounds even weaker. You could probably just pipe that to Googles dictation API and you'd be set.
- acqq 13y agoAnd the GIF I've got seem to has all the letters in the first frame anyway? What do they get by using animated GIF then?
- bornhuetter 13y agoAt the risk of sounding snarky, it's form over function.
- coob 13y agoIt is pretty snarky, considering this is a one-off use of a 3rd party captcha solution on a form only required for legal reasons for a time limited promotion.
- m00njuice 13y agoI doubt the unique capture implementation was done for a one off limited time form, I would have thought that this is something Apple has cooked up for re-use across multiple projects and this just so happens to be one of the first. The comment wasn't snarky, it was accurate.
- Shivetya 13y agoI have far too many repeats when I ask for a new one, NTN, RNC, and SAZ, are three that stood out
- gibybo 13y agoIt probably does, but it also makes it easier for a human. I would guess that humans gain from it far more than bots do (since humans are really good at distinguishing moving objects), which should be the primary goal of a captcha.
- tuxracer 13y agoCouldn't a bot just look at the first frame?
- hkmurakami 13y agoIf this becomes a trend, then surely the first frame won't always be the most obvious frame to choose.
- workbench 13y agoIf you were coding this I'm sure you'd jumble the start point anyway.
- adisbladis 13y agoOr even better: Iterate over the frames until you find one which is very easily solved.
- mbq 13y agoIt can look at all frames and average predictions; this should boost the accuracy as errors will likely cancel out.
- Achshar 13y agoAccuracy is not always the only factor in play. The computational power required to process 20 frames is 20x the normal image. And the overhead of actually comparing the frames 20^2 if each frame is compared to every other frame. Since this is done automatically by bots, speed most certainly does affect the final performance of a bot.
- 6ren 13y agoI was thinking they'd use motion blur - humans are good at seeing through that. But they don't blur. Each frame is crystal clear. Giving the bot 20 data instead of one, as you say.
- joelthelion 13y agoIt actually makes it a lot easier for humans, while not making it immediately easier for bots which will need to be tuned to use motion. Pretty smart.
- codeka 13y agoSure, but it wouldn't take a lot of tuning to update a bot to read the animated frames and then you're back to square one. In fact, with 20-odd frames and only three (entirely upper-case!) letters to select it looks very easy to develop a bot that would get a very high success rate.
- joelthelion 13y agoActually benefiting from the motion requires a new algorithm. Probably not that hard to design, but not trivial either. As always CAPTCHA is a game of cat and mouse. When something is completely broken, you need to think up something new.
- deleted 13y ago[deleted]
- calinet6 13y agoAre the people using the captcha-breaking algorithms the ones developing them? Probably not. These things take time... the best way to combat them is probably to change what your captcha looks like and works like every week or so.
- leddt 13y agoYou don't actually need to use the motion to improve the success rate. Just run the normal algorithm on each frame and elect a winning solution.
- lachenmayer 13y agoThey don't really have to be tuned for motion, you can just consider each frame individually.
- dan1234 13y agoMaybe they're hoping the overlapping letters make it more difficult to solve through a bot? I have to admit I'd expected something better, although it's certainly not a form designed to be seen (I'm assuming it's required for legal reasons)
- nanofortnight 13y agoNot to mention the motion makes separating out the letters easy[1]; optical flow can be used to segment the individual letters. [1]: Have not actually attempted this.
- OGinparadise 13y agoI hope not, these are refreshingly easy for humans, compared to the rest. Maybe an Apple engineer can chime in
- shawnphoffman 13y agoI'm surprised they don't include letters in different colors and only have you distinguish ones of a particular color. Or make certain colors blink having the user select only the ones that are blinking.