brad's life - best captcha format EVAR! [entries|archive|friends|userinfo]
Brad Fitzpatrick

[ website | bradfitz.com ]
[ userinfo | livejournal userinfo ]
[ archive | journal archive ]

best captcha format EVAR! [Aug. 25th, 2005|05:34 pm]
Previous Entry Add to Memories Tell a Friend Next Entry
[Tags|, ]

I just invented the best CAPTCHA format evar:



Aaaaah yeah.

Pre-clarification: This is pretty much a joke.

Even better:

http://www.picpix.com/brad/pic/008dsdxr

BTW, I hear these don't work well in IE. I'm looking at them in Firefox.
LinkReply

Comments:
[User Picture]From: [info]colin
2005-08-26 12:36 am (UTC)

(Link)

pass the pipe, baby, don't bogart.
[User Picture]From: [info]niftybitch
2005-08-26 12:37 am (UTC)

(Link)

Epileptics beware!
[User Picture]From: [info]niftybitch
2005-08-26 12:41 am (UTC)

(Link)

Ok yea. Killing the eyes.
From: [info]phil
2005-08-26 12:37 am (UTC)

(Link)

I think I'm having a seizure.
From: [info]solteronita
2005-08-26 12:37 am (UTC)

(Link)

The mall at Christmas time.
[User Picture]From: [info]revmischa
2005-08-26 12:38 am (UTC)

(Link)

ahhhhh the epilepsy oh god
[User Picture]From: [info]nick
2005-08-26 12:38 am (UTC)

(Link)

"such a fine line between stupid and clever"
[User Picture]From: [info]ydna
2005-08-26 12:39 am (UTC)

(Link)

Awesome!
[User Picture]From: [info]funjon
2005-08-26 12:40 am (UTC)

(Link)

Sweet merciful crap!
[User Picture]From: [info]j7xz49br3m93xrr
2005-08-26 12:41 am (UTC)

(Link)

Y'know, that's actually not a bad idea. Not that specific implementation, of course, it's kinda hard to read, but joke or not, animated captchas aren't a bad idea..
From: (Anonymous)
2005-08-26 02:40 pm (UTC)

(Link)

still easily breakable by either testing all frames and using a standard still-captcha algo (actually, it may help an attacker by allowing them to do all frames and then take the most frequent answer) or finding some method of compositing the frames into a single one and then running traditional algorithms on that.

additionally, if the motion is applied in a consistient/uniform manner and/or the perturbation is not, it either adds no additional security, or, in the case of the latter, actually leaks data about edges.

most people never think about breaking captchas when they create them, which is why it's so easy to crack most of them, including LJs.

0 user@host:~/gaffler3$ wc -l gaffle.c
308 gaffle.c
0 user@host:~/gaffler3$

YHBT,
bantown minister of *
From: (Anonymous)
2005-08-26 06:19 pm (UTC)

(Link)

Animated captchas are a horrible idea. Giving an attacker an excess of samples of a given captcha string is a perfect way to assure 100% accuracy. There are only five or six captchas that have presented any difficulty at all in decoding (still pretty easily breakable, you just have to break out some advanced geometry/trig, always done in <1k lines of code) and none of them have been animated.

Also hello brad! We <3 you, we just despise that bitch Denise Paolucci. Fire her ass and everything will be cool.

Adding to the initial YHBT put forward by our * man,
Poisoned Meme, Bantown Minister of Enforcement.
[User Picture]From: [info]lisa
2005-08-26 12:42 am (UTC)

(Link)

pretty much the best captcha ever.

i'd throw in more rainbows.
[User Picture]From: [info]imgreen
2005-08-26 12:42 am (UTC)

(Link)

the letters.. they keep changing in front of my eyes...

the second one is actually easier to read
[User Picture]From: [info]jwz
2005-08-26 12:44 am (UTC)

(Link)

That's awesome. You should integrate the Apple2 screen saver into that.
[User Picture]From: [info]starblazr
2005-08-26 05:43 am (UTC)

(Link)

or phosphor... or AnalogTV
[User Picture]From: [info]smackfu
2005-08-26 12:48 am (UTC)

(Link)

It's a schooner.
[User Picture]From: [info]brad
2005-08-26 01:05 am (UTC)

(Link)

A schooner is a sailboat! :P
[User Picture]From: [info]killhamster
2005-08-26 01:18 am (UTC)

(Link)

you're gonna ruin my easter next, aren't you?
[User Picture]From: [info]killhamster
2005-08-26 01:02 am (UTC)

(Link)

put some tinfoil on your antenna, that should clear right up.
[User Picture]From: [info]niftybitch
2005-08-26 01:08 am (UTC)

(Link)

haha!
[User Picture]From: [info]adcott
2005-08-26 01:10 am (UTC)

(Link)

could that leave machine-readable text if you squish it into a static image taking the average darkness for each pixel?
[User Picture]From: [info]brad
2005-08-26 04:19 am (UTC)

(Link)

Yeah, totally. Which is why I later went on to make moving text. :-)
[User Picture]From: [info]jc
2005-08-26 01:25 am (UTC)

(Link)

Yeah, it's a joke, but now my retinas have officially been incinerated, I can put more thought into the underlying idea.

Thinking about it, animated captchas are nice and flashy but generally impractical. It's not hard to pull a single frame from the above example and analyse it on its own, and if you were to break up the sequence or even the letters themselves between frames you'd end up with horribly blinky text that'd leave epileptics paralysed anyway.

It's even harder to generate a captcha that bots can't automatically present to a human in exchange for free pr0n...
[User Picture]From: [info]valiskeogh
2005-08-26 01:30 am (UTC)

(Link)

working fine for me, ie6 :)
[User Picture]From: [info]edm
2005-08-26 02:17 am (UTC)

(Link)

Wow, an actual use for image animation. Even if I had to read the comments to figure out that I should turn image animation on to see what the point was (with my default setting of "animate: never" it looked pretty boring).

I'd put image animation up for a "dumbest web feature" award, if it weren't for the fact that there are _so_ many other dumb web features.

Ewen
[User Picture]From: [info]mart
2005-08-26 07:22 am (UTC)

(Link)

I had similar troubles. Do “most people” (for some special value of “most people”) really use the web with animation enabled? I don't know how they all deal with it. I have all kinds of moving, distracting things disabled in my browser and my life is better for it.

From: [info]legolas
2005-08-27 08:55 pm (UTC)

(Link)

I sure don't have it disabled. It never occurred to me to do so. Why would you do that? All the obnoxious things are flash anyway... (And if a site has too much, I go away. Problem fixed!)

[User Picture]From: [info]aaronlehmann
2005-08-26 02:28 am (UTC)

(Link)

Doesn't work at all for me. I imagine it's because I have animation turned off to preserve my sanity.
From: [info]photwenny
2005-08-26 04:12 am (UTC)

If you are epileptic, do not use this web service.

(Link)

I love it!


I'm tired of all this "Intelligent Design" bull.

Let's stop it with all the wheelchair ramps, and closed captioning, and idiot-proofing. Maybe if we start implementing some real "survival of the fittest" shit, we can convince the rest of the country that Darwin might be right. Be sure the ALT text reads "hey blind people, you're totally fucked here, and weeeeeee like it!"

(Just kidding about the ramps and captions and the blind people. That was just for... uh... "effect". :)
[User Picture]From: [info]ciphergoth
2005-08-26 10:17 am (UTC)

(Link)

Inspired. You would have to explicitly say "this is animated" so those of us with animation off can switch it on again, but for all the partially jokey stuff I'm sure you could use animation to make a more readable CAPTCHA. Just take an existing CAPTCHA that works well, like the Passport one, introduce more noise, then recover readability by making the noise flow past the text.

I'm at a con, I must have con fun instead of hiding in my room with my friend's computer trying to code it up...
From: (Anonymous)
2005-08-26 06:21 pm (UTC)

(Link)

Passport has already been broken by the Bantown forces of darkness.
[User Picture]From: [info]ciphergoth
2005-08-30 09:49 am (UTC)

(Link)

The point is that this animated variant would be harder to break (much more noise) and easier to read (animation makes it easy for the brain to separate noise from data).
[User Picture]From: [info]ghewgill
2005-08-26 02:01 pm (UTC)

(Link)

So I don't see whatever animation is actually supposed to be here. That's not the point though - at first I thought this was one of those 3-d cross-your-eyes things but try as I might, I couldn't see it. That would make a good captcha.
[User Picture]From: [info]brad
2005-08-26 03:15 pm (UTC)

(Link)

You're using IE I bet. It doesn't animate it fast enough.
From: (Anonymous)
2005-08-27 03:09 pm (UTC)

Actually...

(Link)

The fact that there are constant areas within the otherwise variable picture is it's weakness. By taking four or five captures of this, it'd be easy to have a computer layer them, pick out the areas that agree, and solve the captcha.

Still freaking hilarious, though.
From: [info]legolas
2005-08-27 08:56 pm (UTC)

(Link)

Actually, making one where the first frame contained random lines, and was set to display for 0.0001s or something, might throw of some automated recognition. Although I don't know if that's a real problem yet?
[User Picture]From: [info]xxv
2005-09-05 01:36 pm (UTC)

(Link)

When the page first loaded, I had my image animation set to "once" and though that it was a random-dot stereogram. However, no amount of crossing my eyes yielded any useful image. Then I tried again with it animation on and wasn't sure which technique would be more evil. Then I realized you could combine them...
From: (Anonymous)
2005-10-27 11:22 pm (UTC)

Don't even use images!

(Link)

There are plenty of options better than words inside actual images out there: 1. Convert this javascript implementation of CSS shrunken random-text logos to PHP - http://mardeg.sitesled.com 2. Use CSS borders to construct letters like this - http://www.iross.net/csscaptcha 3. Use radio buttons to allow users to match any cartoon image with the one given - http://www.cannedmonkey.com/wordpress/index.php?p=4#comments