Quote of the GET: I think Microsoft named .Net so it wouldn't show up in a Unix directory listing. Oktal

fancy /mathematical /insecure /unofuscated /reused captchas

Few days ago, Gunnar told me about a quite curious captcha:


But, in the other hand, it had been implemented insecurely. With just one answer, you can submit many times:

Furthermore, I notice that the captcha was precomputed and, therefore, finite and reused. I made more than 15,000 requests and I had less than 5% unique (there is no motivation to solve 700 differential equations :P).

Moral: Sometimes, extravagance goes against security.

RSS feed

4 Comments

avatar
Comment by anonymous
2007-07-24 04:59:04

Eh technically that’s not “solving a differential equation.”

 
avatar
Comment by lbello
2007-07-24 09:57:54

well.. you are right. My english is bad, even worsth if its math terminology. Which is the correct name, derivative account?

In fact, many of the request returns simple additions or polinomic roots.

 
avatar
Comment by nikolasco
2007-08-09 18:34:52

Yeah, from a security perspective, the design sucks in a multitude of ways. They seem to have made a point of making the answers easy to compute by hand, so all answers are small integers. Also, as you noted, they’re reused and reusable. Still, they’re cute and I think they might be (sorta) doing their job of keeping out common bots and people who couldn’t possibly need the service. At least it’s better than the “logic puzzles” (their term) used on the page of many a congressperson.

 
avatar
Comment by lbello
2007-09-19 23:24:50

I meen derivative count… my english is becoming worst everyday

 

Sorry, the comment form is closed at this time.