homepage Welcome to WebmasterWorld Guest from 54.166.39.179
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / Local / Foo
Forum Library, Charter, Moderators: incrediBILL & lawman

Foo Forum

    
Spot the kittens
New method of authenticating that a human is filling out form
Demaestro

WebmasterWorld Senior Member demaestro us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 10152 posted 7:43 pm on Apr 10, 2006 (gmt 0)

So you may have noticed more and more on websites that when you are filling out a form it will ask you to enter in the letters you see being displayed in an image to confirm that you are a human filling out the form and not some bot.

Someone emailed me a new method that is being proposed to handle this.

[thepcspy.com...]

You must identify 3 kittens out of 9 fuzzy little animals to auth the form submition.

Much nicer UI, still doesn't get around the seeing impaired issues where this is being seen as a hinderence to software that allows seeing impaired persons to surf the web. But it is sooo much cuter.

 

Lilliabeth

10+ Year Member



 
Msg#: 10152 posted 8:13 pm on Apr 10, 2006 (gmt 0)

Love it!

FrostyMug

5+ Year Member



 
Msg#: 10152 posted 8:20 pm on Apr 10, 2006 (gmt 0)

that's great

httpwebwitch

WebmasterWorld Administrator httpwebwitch us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 10152 posted 8:27 pm on Apr 10, 2006 (gmt 0)

Love it.
I guess you'd call it a "Cat-cha"

I'm already inventing variations.

DoppyNL

10+ Year Member



 
Msg#: 10152 posted 6:57 am on Apr 11, 2006 (gmt 0)

I like the idea :) Would be a lot more user friendly.

Downside however is that you will need A LOT of images.
Still, even if you got a lot of images, it is possible for someone who wants to fool the system to learn a computer to recognise an image; this would be quite simple as it is not a generated image.

But still, it's cool.

netchicken1

5+ Year Member



 
Msg#: 10152 posted 7:41 am on Apr 11, 2006 (gmt 0)

Thats great!

You don't need many images, just move them around

Demaestro

WebmasterWorld Senior Member demaestro us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 10152 posted 2:25 pm on Apr 11, 2006 (gmt 0)

I think that is why they use other small fuzzy animals, so that it can't be tricked, trust me I am a programmer and it hurts my brain to think of all the little nuances it would take to teach a computer the difference between a hamster and a little kitten. Visually that is.

Essex_boy

WebmasterWorld Senior Member essex_boy us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 10152 posted 7:01 pm on Apr 11, 2006 (gmt 0)

to learn a computer - Then TEACH it to do something more useful?

DoppyNL

10+ Year Member



 
Msg#: 10152 posted 6:42 am on Apr 12, 2006 (gmt 0)

I think that is why they use other small fuzzy animals, so that it can't be tricked, trust me I am a programmer and it hurts my brain to think of all the little nuances it would take to teach a computer the difference between a hamster and a little kitten. Visually that is.

Been there, done that, didn't succeed.

I don't think it is simple to teach a computer to recognise a little kitten on an image.
I do think it is quite simple for a computer to recognise an image that it has allready seen before. When a human has told the computer that THAT image is has a kitten on it, it is quite simple to let a computer succesfully pass this test.

Current captcha's are mostly generated images with some string on it. They will allways be different, so you can't let the computer recognise the file, it will have to interpret the contents of the image.
I don't think you are planning on generating images of kittens? or storing loads of images?

I still like the idea though, alltough I think the current generated captcha's are more secure and better capable of keeping bots out.

Demaestro

WebmasterWorld Senior Member demaestro us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 10152 posted 4:09 pm on Apr 12, 2006 (gmt 0)

All you have to do to get around that though is dynamically name the images so that a kitten image of the name 67564tfg.jpg the next time it comes to the screen can be called tuiy8687iuj.jpg and then the next time it can be tuyitu675y46.jpg

Same image different name, this sounds tricky but if you have "pil" installed on your server then it can be done with a very simple script.

DoppyNL

10+ Year Member



 
Msg#: 10152 posted 4:56 pm on Apr 12, 2006 (gmt 0)

Then the bot will simple make a hash of the contents of the file and compare it to a set of information it allready has.

Changing the name doesn't change the content of the image.

Demaestro

WebmasterWorld Senior Member demaestro us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 10152 posted 5:32 pm on Apr 12, 2006 (gmt 0)

Very true... I hadn't considered them making a hash of the file.

I wonder if generating things like the background color or color filters would be enough to get around that... getting more compliacted now though.

The real catch 22 is when you try to comply with a screen scraper used by the seeing impaired that will allow the user to move past the screen.

I know a big site was sued over access for the disabled because of these captchas. The one solution I have heard of for this is using sound bytes. Same issue as with generated images though, the file can at some point could be recognized by an intellegent enough bot.

So how do you allow software for the disabled to get passed these screens and still be tricky enough to fool bots?

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Local / Foo
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved