Making CAPTCHAs Even Harder With 3-D Models

Michael G. Kaplan writes "CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart) are commonly used to prevent computers from filling out web forms. Computer vision experts have been able to design programs to foil CAPTCHA with a high degree of success. I have designed a CAPTCHA that is based on the identification of attributes contained in an image generated by the grouping of easily recognized 3-D objects. I call this the Virtual Photographic CAPTCHA and it is likely to remain invulnerable to automated attack for many years to come. A novel anti-spam system necessitated its development."

Comments

Someone already cracked it...

[mp3phish]

Someone already figured out that if you run a porn site (or other type of legitimate site which could possibly use CAPTCHAs) you can have legitimate users fill out the CAPTCHAs which you scrape from the site you want to crack, and then forward it back to the targetted site. Since there is a surplus of people filling out CAPTCHAs over bots wanting to crack them, there is plenty of room for cracking it...

In the end, it is only a deterrent. But it is definately not close to foolproof

(note that this technique does not have anything to do with cracking the CAPTCHAs, it only bypasses their decoding step by handing off the work to a real human being which doesn't know he is decoding an offsite CAPTCHA)