Slashdot Mirror
Researchers Dare AI Experts To Crack New GOTCHA Password Scheme
alphadogg writes "If you can't tell the difference between an inkblot that looks more like 'body builder lady with mustache and goofy in the center' than 'large steroid insect with big eyes,' then you can't crack passwords protected via a new scheme created by computer scientists that they've dubbed GOTCHA. GOTCHA, a snappy acronym for the decidedly less snappy Generating panOptic Turing Tests to Tell Computers and Humans Apart, is aimed at stymying hackers from using computers to figure out passwords, which are all too often easy to guess. GOTCHA, like its ubiquitous cousin CAPTCHA, relies on visual cues that typically only a human can appreciate. The researchers don't think that computers can solve the puzzles and have issued a challenge to fellow security researchers to use artificial intelligence to try to do so. You can find the GOTCHA Challenge here."
I feel like they mind as well have asked me to paint a picture which best conveys my ex-girlfriend's LiveJournal post from 2001.
Turns out i am a computer. Couldn't have figured it out myself!
They've already been shelling out free porn in exchange for people solving captchas for them... I don't think this will change anything...
WARNING! This girl exceeds the MAXIMUM SAFE standards established by the FDA for BRATTINESS
I don't see any of these. e.g. How the F*** is that a robot on a skateboard?
The only winning move is not to play.
Did the researchers ever try having someone not on their team pass this test? There's no way anyone could figure out which ink blot is which unless they were involved in the naming process.
According to this challenge, I'm totally failing the Turing test. Is http://www.cs.cmu.edu/~jblocki/GOTCHA-Challenge_files/Account%200Inkblot4.jpg really a "robot on a skateboard like thing" to anyone here? What am I missing?
It may or may not be uncrackable. Woot. But it certainly is untenable, unwieldy, and unimplementable. I've got to generate 6+ random-ish images, assign descriptions, and then at some point in the future re-match them? Why not have me generate a one-time pad at the length needed and ask me to remember that?
I can't pass any one of those they've got posted.
I guess you need to be dropping acid for those to work.
I dare them to take their scheme to the streets and fairly find 1000 people that can get them right.
Using US-centric terms is certainly not going ti help the rest of the world ...
We only expect people to be able to solve these puzzles. That's the whole point.
Today's Google opener is Hermann Rorschach.
Is this story just a coincidence?
I wonder what he could have read out of peoples passwords?
Your account may be secure, but now the admin knows everything about your mother issues.
Too bad for you, because C# is an awesome language that absolutely doesn't require Windows or .NET or Mono.
It doesn't matter, as they're the ones coming up with the description, not the website owners. In fact, for colour blind people it adds an extra layer of security as the image they perceive (and describe) may be completely different from how the majority would perceive it.
This is kind of like people used to design cryptography before there were sound mathematical and information theoretic results: "Hey, this looks complicated to us. It must be a good crypto algorithm. Bet you can't break it."
Unlike cryptography, this actually looks like a solution in search of a problem.
It does matter, a colourblind person (like me) can't see anything but random dots. How can I possibly come up with a description (that I will remember) for random dots?
You are assuming that people who see colour see anything other than random dots. I can understand why you would believe that, but in this case it is wrong. It IS just random dots. The colouration just adds to the confusion.
The title should read:
Researchers Prevent Humans From Cracking New GOTCHA Password Scheme
"awful" is more like it. I had more fun writing 8086 assembler than C# code. On a broken keyboard. With a toothpick in my mouth and both hands tied behind my back. By a sadistic Pascal teacher who kept going on about clean code structure and went on to describe Oberon when that wasn't enough.
Also, it was more readable.
Assorted stuff I do sometimes: Lemuria.org
And isn't the # supposed to be at the front of the hashtag? Damn hipsters and their hashtag crap.
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
Never mind them, what about those with trypophobia? Why won't anyone think of the trypophobics??