It are not only botnets or social engineering techniques (see striptease post) that are attacking CAPTCHAs (wikipedia), it seems also to be an outsourcing service in India. Dancho Danchev made a very interesting analysis of India's CAPTCHA-solving industry on ZDNet.
"No CAPTCHA can survive a human that's receiving financial incentives for solving it, and with an army of low-waged human CAPTCHA solvers officially in the business of data processing while earning a mere $2 for solving a thousand CAPTCHAs, I'm already starting to see evidence of consolidation between India's major CAPTCHA solving companies. The consolidation, logically leading to increased bargaining power, is resulting in an international franchising model recruiting data processing workers empowered with do-it-yourself CAPTCHA syndication web based kits, API keys, and thousands of proxies to make their work easier and the process more efficient."This is not a positive trend. What's next? A 30-minute quiz to replace the current CAPTCHAs?
Related posts:
- Google's CAPTCHA under fire by botnets
- Yahoo CAPTCHAs might not be strong enough
- Striptease award for solving captchas
- Are CAPTCHAs broken for good?
Security4all Blog
Twitter
Slideshare
Facebook
Digg
Flickr
0 comments:
Post a Comment