3 ms·
Hey all, this is a blog post that aims to simplify the findings from Egor Homakov in early December (http://homakov.blogspot.in/2014/12/the-no-captcha-problem.h
by FunCaptcha_Jim 12y ago
Hey all, this is a blog post that aims to simplify the findings from Egor Homakov in early December (http://homakov.blogspot.in/2014/12/the-no-captcha-problem.html http://homakov.blogspot.in/2014/12/the-no-captcha-problem.ht...). We've included a video (http://youtu.be/718EOIoWKAE http://youtu.be/718EOIoWKAE) of a major exploit in action and chat about the implications of Mr. Homakov's findings. Hope you enjoy reading it as much as I enjoyed writing it. Any questions, fire away!
- mtmail 12y agoSo issue #2 is about click jacking. The same security consultant tweeted 3 days later it was fixed. https://twitter.com/homakov/status/541636430712156160 https://twitter.com/homakov/status/541636430712156160
- FunCaptcha_Jim 12y agoWe actually tested the theory as of yesterday and it was still possible, re: the video we posted up: https://www.youtube.com/watch?v=718EOIoWKAE https://www.youtube.com/watch?v=718EOIoWKAE
- mtmail 12y agothanks! I didn't notice the video was new.
- FunCaptcha_Jim 12y agoNo problem :)