Slashdot Mirror

← Back to Stories (view on slashdot.org)

3D-Based CAPTCHAs Become a Reality

Posted by Soulskill on from the is-that-an-e-wait-i-think-it's-a-5-dangit-let-me-in dept.

mateuscb writes "A new way of creating a CAPTCHA using 3D objects has become a reality. The idea was thought up independently by blogger Taylor Hayward and by the folks at YUNiTi.com. 'Similar to Hayward's idea, this new technology relies on our ability to identify objects in 3D instead of using alphanumeric characters. YUNiti's 3D Captcha, however, has three objects in the challenge and extends the list of images to any object, not limiting it to animals as in Hayward's idea. This increases the challenge's level of complication to prevent computers from successfully making the correct guesses.' I, for one, welcome the thought of not having to read more and more complex CAPTCHA. Lately, I've been having a hard time getting CAPTCHA to work the first time."

9 of 192 comments (clear)

  1. First time? by Tubal-Cain · · Score: 5, Funny

    I've been having a hard time getting CAPTCHA to work the first time.

    And the secondtime . And the third time. And the fourth. And the....

    1. Re:First time? by Tubal-Cain · · Score: 5, Funny

      Do you wish that i cant pass a captcha it really is sad what they learn the truth?

    2. Re:First time? by MacTO · · Score: 5, Funny

      I've been having a hard time getting CAPTCHA to work the first time.

      And the secondtime . And the third time. And the fourth. And the....

      I was having trouble too, until I found this awesome piece of software that solves CAPTCHAs for me. It even automatically finds the CAPTCHA image and text entry field so that I don't even have to be bothered by it. ;)

  2. Re:Humans can defeat humans by bobetov · · Score: 5, Interesting

    It's much worse than that. Put up a porn site. Use free content. Have a "Solve captcha to get free pics!" blocker.

    Now, grab a captcha you want to break, show to pornaholics, get solution, pass it back to the original site.

    Perfectly unbeatable captcha solving, for virtually free, and totally automated.

    Feh.

    --
    Looking for a Rails developer in Chapel Hill?
  3. Re:Humans can defeat humans by MeanMF · · Score: 5, Funny

    Easy - just make the CAPTCHA so you have to simultaneously type something with both hands.

  4. Re:Rationality check by MWoody · · Score: 5, Insightful

    Such is the way of all intelligent life, though. If you build a maze for a mouse, the rodent may run its course a thousand times to reach the end and its reward. But never be fooled for a second: the mouse likes the cheese, not the maze. If he finds a way to climb over the walls and skip the test entirely, you should be neither surprised nor angry, as the failure is yours.

  5. 4D? Pfft. by artor3 · · Score: 5, Funny

    If you wanna post on my site, you better be prepared to solve the 5D hyper-hyper-cube!

  6. A few common CAPTCHA fallacies by QuoteMstr · · Score: 5, Insightful

    Everyone has a great idea for a CAPTCHA, but very few people know what the hell is really going on. Remember that the machine doesn't need to solve the CAPTCHA every time, that machines are infinitely patient and have huge memories, and that another machine needs to make sure the human gave the right answer!

    Ideas that won't work:

    1. Make clients identify an object from a picture. Machines can't describe objects in pictures: if machines can't describe the picture, how the hell is the CAPTCHA server supposed to verify that the client gave the correct answer? If a human being manually inputs the pictures and acceptable descriptions for each, then another human can program his attacking machine to do the same thing! Having a large, but finite set of pictures doesn't help either since a machine doesn't need to solve the CAPTCHA every time. It can just learn the correct responses without actually understanding the image. ANY APPROACH BASED ON IDENTIFYING A MEMBER OF A FINITE SET DOES NOT WORK AS A CAPTCHA.
    2. As a special case of #2, QUIZZES DO NOT WORK: either the questions are finite and subject to attacker memorization, or the number of patterns for the question is finite, and these patterns can be detected by a machine. (Consider "A train is coming from Denver at X miles per hour..." --- same problem, different coefficients)
    3. Send the client a special program that verifies he's real: if it doesn't work for DRM, it won't work for CAPTCHAs. An attacker can just program his machine to simulate slow typing, slow thinking, or a cross-eyed human being. YOU CANNOT CONTROL THE EXECUTION ENVIRONMENT. No amount of Javascript obfuscation, encryption, or header-checking will make the slightest bit of difference for a determined hacker.
    4. As a special case of #3, TIMING ANALYSIS DOES NOT WORK. Machines can simulate arbitrary delays.
    5. Limiting CAPTCHA-solving attempts by cookie/IP address/etc.: that doesn't work. Attackers don't obey web standards, and have botnets

    Really, it's very easy to think you've come up with a very clever CAPTCHA. When you think that, all you've done is stoked your ego and screwed yourself over. It's the same reason why we don't roll our own cryptography: CAPTCHA-making is a very hard problem, mainly because your problem space must be infinite (to avoid an attacking machine simply memorizing answers), the answers verifiable by a machine, but the problems not solvable by a machine.

    How many questions can be checked by machines but not answered by them?

    Not many; fewer every day. There are no questions that can't be answered by a computer (and which can be answered by a human mind). The Church-Turing thesis has some validity: the human mind is no more powerful than a turing machine, and ultimately, computers and our brains are equivalently computationally. There's nothing a computer can't solve: there are just things we haven't figured out yet.

  7. They must be Runescape players by peterofoz · · Score: 5, Interesting

    So Jagex's Runescape MMORPG has had this for a couple of years in random events to defeat macros.

    http://www.runescape.com/