TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

How Not to invent the next-gen CAPTCHA

8 点作者 spydez超过 15 年前

3 条评论

blahedo超过 15 年前
Yeah, the problem with most captchas is that they're visual and they're working in an area where computers are starting to get really good. The main thing that computers are still pretty bad at is understanding completely arbitrary text, so the way to go has to be in that direction (which also has the benefit of being handicap-accessible). Ask questions, in text, that have textual answers. Throw in a random-number generator so that the questions aren't just a memorisable list. And most important, make EVERY USER of the captcha system ("user" here meaning the owner of the blog or the site, not the visitor to the site) able to edit the question list. Any system that is uniform across all its users will become a target for spam-hackers to break. But if you can change the question? Maybe even just _rephrase_ the question? Way, way harder. People are still smarter than computers, we just have to give them the chance to actually do their thing.<p>I wrote a plugin years ago for MovableType as a proof of concept (which I still use on my own blog): <a href="http://www.blahedo.org/botblock/" rel="nofollow">http://www.blahedo.org/botblock/</a> Even a user that doesn't want to touch any of the code (even though it's pretty easy) can always edit "Add one to this number:" to "What number comes after this number:" or somesuch. To solve the "more humans on this end" problem, it seems like you have to let them modify the very questions themselves.
评论 #893203 未加载
评论 #892954 未加载
swombat超过 15 年前
Interesting to note that the article Louis refers to has been pulled. I guess I'd pull that article too after it was pointed out how monumentally stupid the whole thing was...
dpcan超过 15 年前
The real solution might be to have Captcha technology built right into the browser that can physically detect whether or not a human is interfacing with the form.
评论 #892967 未加载
评论 #892974 未加载
评论 #893119 未加载