Peoplesign
Security and privacy
captcha
SHOW HN2010
3points
6comments
#221of 370 in 2010
Top 60%of 2010 by points
How HN took it
QuietFewer than 5 comments about the project
0 positive, 0 neutral or asking, 0 mixed, 2 critical, out of 2 comments about the project.
Execution: 0 for, 1 againstIdea: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
Objections
Guessing odds are too low: about 1 in 36 per attempt, so bots can brute force it
From 2 comments
That is a retarded captcha. You have a 1 in 6 chance of randomly guessing the first picture right, and then a 1 in 6 chance of getting the second picture right. So my automated…
grepular on HNI'd probably use just use Tor or similar to make all requests come from different IPs. You don't need to increase the number of pictures by a couple, you need to increase the…
grepular on HN
Human outsourcing solving services would defeat it
From 1 comment
You are missing the way people break captchas... it is not because they have super cool software that can read the captcha, have a huge database of hashed portions of a…
bsnss-mn-cdr on HN
Distributed IPs would evade rate limiting
From 2 comments
I'd probably use just use Tor or similar to make all requests come from different IPs. You don't need to increase the number of pictures by a couple, you need to increase the…
grepular on HNIf someone is making 30+ requests from distinct ip addresses in their botnet, you won't even suspect they're related.
mooism2 on HN
Requests
Increase the number of possible photos by orders of magnitude
From 2 comments
I'd probably use just use Tor or similar to make all requests come from different IPs. You don't need to increase the number of pictures by a couple, you need to increase the…
grepular on HNYour concern is somewhat valid although if someone is making 30 plus attempts to submit a form can we not assume it is a bot? We have made a configuration interface to allow…
ermac on HN
Alternatives named
reCAPTCHA
From 1 comment
reCAPTCHA is bar none the way to go. Not only is is robust, but it also serves a useful purpose---it uses user answers to the reCAPTCHA to digitize books by having users…
chisophugis on HN