...

View Full Version : KittenAuth... ???? i thought this was a wind up to begin with...



Crowds
10-19-2007, 01:18 AM
...But
http://www.thepcspy.com/kittenauth

The working version is found on their contact page. Seems a little large and cumbersome at the moment but worth keeping an eye on.

Crowds

bcarl314
10-19-2007, 06:29 AM
That's neat, but really poses an accessibility problem. :(

Fumigator
10-19-2007, 07:11 AM
Looks like a spin off of this captcha which has been up for years:

http://www.hotcaptcha.com/

ArcticFox
10-19-2007, 08:00 AM
That's neat, but really poses an accessibility problem. :(

Can't be everything to all people. It's a tough world, but a line has to be drawn somewhere.

TheShaner
10-19-2007, 03:48 PM
Looks like a spin off of this captcha which has been up for years:

http://www.hotcaptcha.com/
And KittenAuth would respond with...

First thing, KittenAuth is not a clone of any of these other projects... Its the other way around... KittenAuth is the original "pick images from the grid" concept and implementation.

Secondly. they are insecure. Most of them try to overcome the drawbacks of KittenAuth (accessibility mainly) by having alt tags for the images so blind people can use them... Let me ask you this: If the hinge of a security application relies on people being able to process images and tell what they are, where computers find it much harder, what good is it if you give the computer the text-explanation? And I answer: No good. It breaks its security. HotCaptcha, based on Hot-or-Not, uses lots of javascript. Its a nice implementation but each image have the same URL it has on Hot-or-Not. A spambot can go there see if they're hot and answer the CAPTCHA. Fun... but totally useless..

In my opinion, all these CAPTCHAs have their drawbacks, including the current method of obfuscating words. And look how involved they're getting! If we're going to have a huge block of pick 3 pics, then we might as well just implement a reading comprehension question on a paragraph and have the person answer it. The paragraph can randomly generate certain words that will change the whole meaning, thus giving different answers each time. The benefits would be twofold: blind people can answer them and it'll weed out the dumb people :D

-Shane

Fumigator
10-19-2007, 06:07 PM
Whoops, I got it backwards. Thanks for the correction.

Yeah I'm a fan of simple logic questions, but nothing will ever be foolproof.

I'm in the middle of trying out the recaptcha.net that Basscyst mentioned a while back. That one looks cool.

TheShaner
10-19-2007, 09:49 PM
Yeah I'm a fan of simple logic questions, but nothing will ever be foolproof.
Current CAPTCHAs are usually databases of words that are obfuscated, but one simple image algorithm can decipher all of them. If you do a database of logical questions, as of right now, it'd be almost possible for a computer to be able to understand the thousands of kind of different questions you can ask. One algorithm couldn't solve them all.

As an example, consider this small database of questions:

If an eight-legged spider lost a leg, how many legs would he have?
If you are in the front of the line, what position are you in?
A red car is going fifty km/h and slows down ten km/h. What color is the car?
Which animal is faster: a turtle or a cheetah?
If there are three boxes on the ground and you pick up one, how many are left on the ground?
How many sides does a square have?


Could you really design a logical recognition system to answer all of these questions? Most likely not. The only thing i can see is that you can design for one of them and then keep refreshing the page until your algorithm recognizes the sentence structure and can solve it. But with a big database filled with thousands of different types of questions, the odds would be really against you and definitely not worth it for spam.

-Shane

bcarl314
10-20-2007, 12:45 AM
Current CAPTCHAs are usually databases of words that are obfuscated, but one simple image algorithm can decipher all of them. If you do a database of logical questions, as of right now, it'd be almost possible for a computer to be able to understand the thousands of kind of different questions you can ask. One algorithm couldn't solve them all.

As an example, consider this small database of questions:

If an eight-legged spider lost a leg, how many legs would he have?
If you are in the front of the line, what position are you in?
A red car is going fifty km/h and slows down ten km/h. What color is the car?
Which animal is faster: a turtle or a cheetah?
If there are three boxes on the ground and you pick up one, how many are left on the ground?
How many sides does a square have?


Could you really design a logical recognition system to answer all of these questions? Most likely not. The only thing i can see is that you can design for one of them and then keep refreshing the page until your algorithm recognizes the sentence structure and can solve it. But with a big database filled with thousands of different types of questions, the odds would be really against you and definitely not worth it for spam.

-Shane

True, but then you have to deal with answers as well. For example what's valid for your first question?

7?
Seven?
seven?
seven legs?
7 legs?
The spider has 7 legs?
there are seven legs left?

TheShaner
10-22-2007, 02:58 PM
Well, you could easily do a multiple choice answer, although that may give a spam bot a 25% (if doing 4 choices) chance of passing the CAPTCHA.

Alternatively, you could specify in the directions for one word answers and no numbers. I just gave a quick example, so a possible rephrasing of the questions to better clarify the answer expected could also be done.

I would prefer to go with the latter method for a more secure CAPTCHA and I don't foresee too much of a problem with the answers if done correctly. Yes, there will be people that mess them up from time to time, but that even happens now with current methods.

-Shane



EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum