Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Sorry, the CAPTCHA is completely pointless. Here's why:

1. Go to http://scr.im/test

2. Click the upper right box

3. If you receive an error page, click "Try Again" and go to step 1.

4. You should arrive at this step in approximately 9 tries (on average) taking less than 15 seconds.

What the heck is the point of a "human test" if it can be automatically attacked by a bot with literally no effort at all. The funny thing is that there is a more traditional CAPTCHA at http://scr.im/test?failsafe=1 that is much more secure.

Why is the default CAPTCHA pointless? Because it attempts to test for "human-ness" without requiring any human action what so ever. Click a link, the same link, over and over until it is correct is what a bot will do. On the flip side, using your eyes to interpret slightly out of skew characters is decidedly much harder for anything other than a "human" to do.





Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: