• 09Jan

    This dream captcha by Jeffrey Augustine runs on the net for several months now.
    Yet it reserves to be mentioned also here, on the adscaptcha blog.
    We aren’t that serious, you know.
    We do have humor and can laugh about stuff, including ourselves or our online security application

    So what is this dream captcha?
    Just like a dream catcher, which supposes to assure you a good night (or afternoon) sleep, only this one has a captcha code on it.
    The artist who created the dream captcha says “that one use of Captcha is to protect a website’s identity” and that he decided to create it because of his interest to understand how the internet affects his life and more specifically his identity.

    Living in the digital world of 2010 I must say that I don’t find it weird at all. Anything can happen, including nightmares to be demanded to pass a captcha test in order to get into people’s head… :)

    Tags: , ,

  • 27Dec

    A lot has been said and written about CAPTCHAS.

    It has been said that Captchas suffer from lack of efficiency in preventing spam mail,
    That Captchas are easy to be cracked by bots,
    That human users get pissed off when they try to decipher Capchas,
    That Captchas discriminate disabled users with sight problems or dyslectic persons,
    That it’s about time to change the system…etc,’ etc’,

    Well, incidentally, I’ve read an article lately about reverse Captcha and I said to myself:
    Wow! That’s a great idea! Why haven’t all those smart guys thought about it earlier…

    The idea of Reverse Captcha is based on a system which tries to trap the bot spammer, not the human user.

    How?
    Well, the well known Captcha sets a turning test for the human user before submission. Usually it consists an image with distorted alphanumeric letters and the user is asked to decipher and copy into a certain blank field. The system is based on an assumption that bots are not intelligent so they are doomed to fail. Unfortunately, robots become more and more “smart” thanks to high technology, and so a great percentage of Captchas are cracked.

    Reverse Captcha is a turning test which bots can deal with and but humans will fail! How? Very simple: BY using a hidden filed which humans do not recognize. Bots fill out every field trying not to miss anything, and so they are trapped and filtered out of non desire submission.

    A genius idea!

  • 11Dec

    For those who have dcaptchasecided to protect their website and / or online services by using Captcha, these are just some of the sources where you can get your free Captcha plugin / script.
    If you are not sure which of the following suits your needs or technical knowledge, check this list of considerations regarding Captcha implementation.
    In any case, implementing Captcha should be easy.

    10 Resources for Free Captcha

    1. Free Captcha by reCAPTCHA – You must sign up to the site in order to use their free captchas.

    2. An open-source free PHP CAPTCHA script by Securimage

    3. Free Captcha images by captchas.net.

    4. Free ASP security image generator software by Web Wiz Guide.

    5. Free PHP Captcha scripts by thefreecountry.com.

    6. Free Captcha by Protect Web Form.

    7. A free Captcha generator by Captchator.

    8. Free captcha script by Andyydev.com.

    9. Captcher (=a PHP script that generates and verifies captchas) by White Hat Crew.

    10. VidoopCAPTCHA – a free image Captcha by Vidoop (read more about it on our post: Image based Captcha).

    For other security solutions that work like Captcha, feel free to read this comprehensive post by Netwaver:
    34 Free Captcha Script and Anti Spam Services.

    Got some free Captcha resource to recommend on?
    Write it down on the comments section below…

    Tags: , , ,

  • 28Sep

    Current Captchas are based on distorted alphanumeric characters (text based Captcha) displayed to user before registration to all kind of online platforms such as forums, blogs and sharing knowledge websites like wikipedia or Yahoo! Answers. After the user has deciphered the Captcha, he may continue to contribute a comment or any other action he is interested in.

    Unfortunately, automated hackers become more and more sophisticated these days, but the more they become sophisticated – the more Captcha becomes difficult. Consequently, more human users give up login to sites with difficult Captchas, not to mention disabled users with cognitive problems such as dyslexia, or physical disabilities such as blind persons – they are denied access to Captcha right from the beginning!

    Image based Captcha is the latest alternative to current text based Captcha. It’s based on a set of images easier to be recognized and classified by human users than traditional textual Captcha, yet at the same time, much more difficult for robot hackers.

    How does it work?
    Very easy. It only takes a few steps to be solved. First, a set of images with letters above are displayed. The user is being required to identify and click on a sequence of images. After he completes correctly the test and is verified as a human – he is allowed to carry on his online session. It’s easy, funny, not boring as a text based Captcha.

    unique-captcha
    VidooCAPTCHA is an example to an image based Captcha.

    Tags: , , ,

  • 06Sep

    What is captcha for?
    Captcha system is used on the online sphere as a method of verifying a user as a human being. Since some websites (such as forums & blogs for example) might be attacked by bot spammers sending endless garbage data, links or ads, they use captcha service as a mean of spam prevention.

    Defeating Captcha?
    Most Captchas contain distorted letters or alphanumeric characters. Some Captchas display a mathematic problem, logical questions, audio letters or words for blind people, all are easy to be deciphered by human beings but not by robots. Yet currently scientists are working hard on developing robot computers which are capable to pass the captcha test, meaning they manage to crack it. Currently the statistics stands on the fact that 1 out of 5 Captchas is being cracked.

    3D Image Recognition captcha
    What can be done to stop this captcha bot cracking? Websites can use a different kind of captcha based on a 3 dimensions images. 3D Image Recognition Captcha is unbreakable by robots so far, since it requires a function of a human brain.

    How does the 3D Image Recognition Captcha work? One or three 3D images are displayed. Than the user is required to click on another box which opens and shows another 9 3D images. Among those 9 images, 3 are identical to the formers but rotated. The user has to match them consequently with 3 empty boxes. A human brain can discern the images easily but no robot has a perception of discerning rotated images… not yet! Therefore, 3D Captcha image is a marvelous spam blocker..

  • 30Aug

    As you may already know by now, Captcha is a common approach to prevent access of users that aren’t human to all kinds of websites. The captcha is a kind of test that requires verification of distorted image plus textual content which is deciphered easily by humans but not by computer bots. 
    However, it appears that this simple system may also prevent access from a certain group of human being: disabled people such as blind, low-vision, or people who suffer from cognitive problems (dyslexia). Once a low vision user cannot decipher the image displayed on the Captcha, he cannot access the specific website that uses the captcha protection and thus can not open an account, comment on a forum or blog and so on.

    To make a long story short - Captcha can tell human and bots apart but cannot recognize human with disabilities who are not bots and fail the test because of their disabilities…

    Captcha Alternatives
    But do not worry. There other alternatives for Captcha:

    One of the alternative methods is a sound test also known as audio captcha“. It requires the potential user to listen to some sounds which are played on a noisy background, filter the sounds and repeat them. It is a good solution for low vision or blind users, but not for deaf people or users who don’t have a good hearing.

     Other captcha alternatives are as follows:
    Spam filtering – software for blogs contain spam filters targeted to delete spam messages. More advanced systems are able to control spam attacks and filter permanently or temporarily spam contents using the IP address of the user.

    Heuristic checks – are based upon the user’s data such as requests, pages he has visited, IP address, data entry or signature data and assist in detecting robot users. 

    Single sign-on – This system is similar to a passport. It utilizes visual verification. No doubt – it’s highly recommended for people with disabilities.  

    Public key infrastructure solutions – This is another alternative solution not used yet but may help low vision users – to use certifications issued by government or other trusted authorities that verify their identities. The disabled user will have to telegraph the site, inform his or her disability and get access to the site’s service.

    Biometrics – Another tool, to be used together with the single sign–on system (using D.N.A / fingerprints). Microsoft has already developed a new system of Biometric verification but it will take years until the biometric hardware will penetrate into the market.

     To sum up, Captcha is a good solution, but not for all. When it comes to disabled people with low vision or hearing and other disabilities, one must consider some other security tools and / or software, such as the captcha-alternatives mentioned on this post (spam filters, heuristic checks and so on).

    Tags: , , , ,

  • 17Aug

    Like the following captcha comics?
    funny-captcha-comics
    Check this excellent site
    (And please let us know if you run into additional funny stuff)

    Tags: , , , ,

  • 17Aug

    Not too long ago the Gmail registration, which supposed to be secured by the highly popular captcha test, was cracked by spammers. What are the implications of this event? 

    First, let’s start with clarifying the meaning of that strange word “CAPTCHA”.
    Captcha is an abbreviation of “Completely Automated Public Turning test to tell Computers and Humans Apart”.

    The captcha test is used all over the online world by all kinds of websites who want to verify the user who’s signing up to them is a human and not a robot or some automated machine.
    In other words, by using the Captcha test all spammers are supposed to be filtered out.

    Unfortunately, it has been discovered lately that spammers have succeeded to create bots that are capable to open Gmail accounts and thus can attack and abuse the infrastructure of Google mail.

    Gmail, as you may know, is a free service by Google. It is considered as a highly user-friendly, simple and flexible platform that enables over 6000 MB of storage for free (plus more 10GB for a symbolic fee of 20$ a year) and it has tens of millions of satisfied users from all over the world.

    The bots succeed to open accounts by feeding all the data required on the sign up page and then cracking the Captcha (usually displayed at the bottom, at the end of the registration process). Bots are trying to create new accounts as many as possible, by using 2 hosts in the process of cracking the Captcha code. Once the first host fails to break the code the second host gets into action.
    The cracked Captcha codes are stored in a domain located at United States.

    Luckily, Captcha is not an easy test for machine computers or bots and in spite of endless repeated cracking attempts only 20% Captchas are busted

    Is it possible to overcome the Captcha cracking problem on Gmail registration process?
    I guess only time will tell…

    Tags: , , , ,

  • 25Jul

    Captcha is a test that comes to validate web users as humans (=rather than computer bots).
    the captcha test can be used for site registration, for example – just before registration is completed the user is asked to copy an  image with distorted letters. Since those letters are captured in images and are displayed randomly, and bots can not “read” images, the CAPTCHA test suppose to “stop bots from passing the test and using the web for their inetrests”.

    But what about people who suffer from some kind of sight impairment including blindness?
    They can not solve the captcha test (they can not see the captcha image well and thus can not copy it) and thus, just like bots, can not register to sites and other online services that use captcha.
    But do not worry, there’s a solution for this problem and it called: Audio Captcha.

    People who suffer from sight impairment need to pass an audio captcha test in which they are asked to listen to a series of numbers or letters with a lot of background noise and then repeat them through typing the letters/numbers.
    The idea is that humans can filter the background noise but a computer bot – can’t.

    Unfortunately the audio captcha test is not perfect.
    First, there are people who suffer from sight impairment / blindness that also have hearing problems.
    Second, statistic shows that only 46% of audio captchas users are able to decipher the test and that the process takes 65 seconds at least , relatively much longer than a textual Captcha (about 12 seconds).
    Third, most of the sites don’t use audio-captchas yet.

    What other transformations will make the captcha test suitable for all?
    Only time will tell…

    Tags: , ,

  • 01Jul

    Captcha protects your website from unwanted users such as automated machines, bots and spammers. Once you have decided to use Captcha for your site, there are some important criterions you must take into consideration:

    Accessibility
    Captcha must be accessible for every user – for the normal and the blinds.
    That means that the captcha image shouldn’t be too small and it should offer an alternative (audio one for example) for the ones who can’t see well or don’t see at all.

    Image securitycomplexity
    Captcha images should not be easy to percept.
    They should be vague and distorted so no bot can solve it – only humans.

    Script security
    A Captcha code should consist of images that are not readable by bots as well as questions that can be answered only by using human intelligence.

    Security of CAPTCHA wide spread use

    When Captcha system is adopted by a great number of sites it could weaken its security effect, since a parser could make it easy for bots to solve the Captcha test. Since it is highly important that Captcha will be of strong security even when it is widely used, it is recommended to use well-tested implementations of *reCAPTCHA than to create your own CAPTCHA script.

    * reCAPTCHA is a free service that helps to digitize old media such as books, newspapers and radio shows so they can be used as CAPTCHAs

« Previous Entries