Xatrix Security

[G-Brain]

Friend has a CAPTCHA on his website, I told him it's not secure, he wouldn't listen, I beat the CAPTCHA. True story.

PHP: http://g-brain.sesoyo.com/captchapwn.php
Source: http://g-brain.sesoyo.com/code/captchapwn-php.txt

It's not 100% accurate, but it does the trick.

[phiber]

interesting...

Since you cracked that version of captcha, did you by any chance code your own?

[G-Brain]

How do you mean that?

Did I crack my own CAPTCHA? No.
Did I attempt making a CAPTCHA myself? No, I haven't, yet, and I probably won't, not for function. I dislike CAPTCHA. Read http://www.w3.org/2004/Talks/0319-csun-m3m

[jd2kuk]

Interesting. Good stuff

Come to mention it, considering the amount of sites that make use of CAPTCHA's now, it's a pretty big security flaw. Sure, the one's used on most commercial websites are a little more robust, but in the end, it's a flawed technology. By using it, you're just jumping into a cat and mouse game with technology- and eventually technology will catch up.

Maybe it's time for some real research to go into a new verification technology?

Woah, I just got philosophical about computer generated letters and numbers...