News for hackers. Stuff that matters.
Re:Apple using moving letters as captcha by nwh on Tuesday May 14, 2013 @06:00AM (#5703872)
Doesn't this just make the CAPTCHA easier to solve for a bot?

There's 20 frames in each challenge image, 20 different sets of data to process and compare for a correct result. It's also three letters long.

ED: The form itself is included in an iframe, with the following tag:

    <meta http-equiv="Expires" content="Sat, 1 Apr 2006 23:59:59 GMT">
ED2: The audio CAPTCHA sounds even weaker. You could probably just pipe that to Googles dictation API and you'd be set.
Re:Apple using moving letters as captcha by gibybo on Tuesday May 14, 2013 @06:09AM (#5703899)
It probably does, but it also makes it easier for a human. I would guess that humans gain from it far more than bots do (since humans are really good at distinguishing moving objects), which should be the primary goal of a captcha.
Re:Apple using moving letters as captcha by tuxracer on Tuesday May 14, 2013 @06:20AM (#5703938)
Couldn't a bot just look at the first frame?
Re:Apple using moving letters as captcha by mhaymo on Tuesday May 14, 2013 @06:50AM (#5704030)
In theory, you could make the letters overlap so much that it is difficult to distinguish them in a single frame. This would give humans a distinct advantage over robots. However as it stands, a single frame is barely obscured at all, and I'm sure it could be easily broken.
Re:Apple using moving letters as captcha by ozgung on Tuesday May 14, 2013 @07:55AM (#5704260)
I agree. Their assumption must be that OCR fails when a letter has covered regions, and to make it more readable to humans they provide the missing information in other time frames. But the letters have very nice borders and shadows, they are not deformed and have rigid motions which is trivial to track. Even in a single frame they provide more information than a traditional captcha. But the concept is promising and will definitely work with few modifications (e.g. no stroke color, time dependent deformations, not showing all letters in all frames etc.)
Re:Apple using moving letters as captcha by glenra on Tuesday May 14, 2013 @12:56PM (#5706199)
What makes you think the individual frames look like the letters? They certainly don't have to. At the price of a little flickering you could, say, show the top half of the letters in one frame, the bottom half the next, the right half the next and so on. Or randomly leave out one letter in every frame. Or even throw in different replacement letters for one frame each.
Re:Apple using moving letters as captcha by adisbladis on Tuesday May 14, 2013 @06:41AM (#5703995)
Or even better: Iterate over the frames until you find one which is very easily solved.
Re:Apple using moving letters as captcha by mbq on Tuesday May 14, 2013 @06:47AM (#5704017)
It can look at all frames and average predictions; this should boost the accuracy as errors will likely cancel out.
Re:Apple using moving letters as captcha by Achshar on Tuesday May 14, 2013 @09:17AM (#5704602)
Accuracy is not always the only factor in play. The computational power required to process 20 frames is 20x the normal image. And the overhead of actually comparing the frames 20^2 if each frame is compared to every other frame. Since this is done automatically by bots, speed most certainly does affect the final performance of a bot.
Re:Apple using moving letters as captcha by mbq on Saturday May 18, 2013 @07:00PM (#5730799)
Comparison of frames? I was only thinking about averaging predictions for each frame which is just 20x slower. Still I think that the process is way more constrained by the time to fetch new CAPTCHAs than by OCR, so this doesn't really matter.
Re:Apple using moving letters as captcha by hkmurakami on Tuesday May 14, 2013 @06:40AM (#5703993)
If this becomes a trend, then surely the first frame won't always be the most obvious frame to choose.
Re:Apple using moving letters as captcha by workbench on Tuesday May 14, 2013 @12:30PM (#5706006)
If you were coding this I'm sure you'd jumble the start point anyway.
Re:Apple using moving letters as captcha by zura on Tuesday May 14, 2013 @10:54AM (#5705232)
It shouldn't be necessary to have separated letters in the first frame.
Re:Apple using moving letters as captcha by gibybo on Tuesday May 14, 2013 @07:12AM (#5704095)
Sure, but then it gains none of the advantage given to the human.
Re:Apple using moving letters as captcha by n3rdy on Tuesday May 14, 2013 @07:29AM (#5704161)
Why not? If it can grab all 20 frames, it has 20 times more data than it would normally have to solve the captcha.

Even if the captcha recognition's success rate is only 5%, its overall recognition rate is going to go through the roof.

You also get to do something you can't do with static captchas, compare the results. If 70% of the frames recognized the first letter as A, it's likely to be A, and so on.

As the letters move, they briefly do the really hard task of segmentation for you.

If there is any incentive to crack this captcha, it will be cracked very soon if not already, it looks like a very easy one to write.

Re:Apple using moving letters as captcha by dan1234 on Tuesday May 14, 2013 @06:45AM (#5704010)
Maybe they're hoping the overlapping letters make it more difficult to solve through a bot?

I have to admit I'd expected something better, although it's certainly not a form designed to be seen (I'm assuming it's required for legal reasons)

Re:Apple using moving letters as captcha by 6ren on Tuesday May 14, 2013 @06:28AM (#5703959)
I was thinking they'd use motion blur - humans are good at seeing through that. But they don't blur. Each frame is crystal clear. Giving the bot 20 data instead of one, as you say.
Re:Apple using moving letters as captcha by joelthelion on Tuesday May 14, 2013 @06:37AM (#5703984)
It actually makes it a lot easier for humans, while not making it immediately easier for bots which will need to be tuned to use motion.

Pretty smart.

Re:Apple using moving letters as captcha by codeka on Tuesday May 14, 2013 @06:40AM (#5703991)
Sure, but it wouldn't take a lot of tuning to update a bot to read the animated frames and then you're back to square one. In fact, with 20-odd frames and only three (entirely upper-case!) letters to select it looks very easy to develop a bot that would get a very high success rate.
Re:Apple using moving letters as captcha by joelthelion on Tuesday May 14, 2013 @07:04AM (#5704064)
Actually benefiting from the motion requires a new algorithm. Probably not that hard to design, but not trivial either.

As always CAPTCHA is a game of cat and mouse. When something is completely broken, you need to think up something new.

Re:Apple using moving letters as captcha by leddt on Tuesday May 14, 2013 @09:50AM (#5704779)
You don't actually need to use the motion to improve the success rate. Just run the normal algorithm on each frame and elect a winning solution.
Re:Apple using moving letters as captcha by calinet6 on Tuesday May 14, 2013 @07:48AM (#5704233)
Are the people using the captcha-breaking algorithms the ones developing them? Probably not. These things take time... the best way to combat them is probably to change what your captcha looks like and works like every week or so.
Re:Apple using moving letters as captcha by lachenmayer on Tuesday May 14, 2013 @06:40AM (#5703994)
They don't really have to be tuned for motion, you can just consider each frame individually.
Re:Apple using moving letters as captcha by Retric on Tuesday May 14, 2013 @07:44AM (#5704214)
With this implementation you don't, but it's not hard to construct it such that there is no single frame with enough information to construct the whole message. If you screen capture there are several frames where you really can't tell what the middle letter is, but it's obvious what the message is.

The real issue is a computer can compare the images individually and combine them so if it get's 'G_G', 'GF_', and '_FG' it's going to assume 'GFG'.

Re:Apple using moving letters as captcha by joelthelion on Tuesday May 14, 2013 @07:02AM (#5704057)
In that case you don't gain anything from the motion (except maybe the ability to vote between your bot's output for the individual frames, but that also makes your bot 20 times slower).
Re:Apple using moving letters as captcha by jiggy2011 on Tuesday May 14, 2013 @07:24AM (#5704140)
Don't people from nigeria offer captcha breaking services for something like $1/thousand now?
Re:Apple using moving letters as captcha by roq on Tuesday May 14, 2013 @06:58AM (#5704049)
Actually makes it a lot easier for BOTs. This one is very easy to break.
Re:Apple using moving letters as captcha by alcuadrado on Tuesday May 14, 2013 @07:41AM (#5704207)
motion? just take a single frame and OCR it!
Re:Apple using moving letters as captcha by acqq on Tuesday May 14, 2013 @06:07AM (#5703894)
And the GIF I've got seem to has all the letters in the first frame anyway? What do they get by using animated GIF then?
Re:Apple using moving letters as captcha by bornhuetter on Tuesday May 14, 2013 @06:11AM (#5703909)
At the risk of sounding snarky, it's form over function.
Re:Apple using moving letters as captcha by coob on Tuesday May 14, 2013 @07:13AM (#5704098)
It is pretty snarky, considering this is a one-off use of a 3rd party captcha solution on a form only required for legal reasons for a time limited promotion.
Re:Apple using moving letters as captcha by m00njuice on Tuesday May 14, 2013 @12:14PM (#5705899)
I doubt the unique capture implementation was done for a one off limited time form, I would have thought that this is something Apple has cooked up for re-use across multiple projects and this just so happens to be one of the first.

The comment wasn't snarky, it was accurate.

Re:Apple using moving letters as captcha by Shivetya on Tuesday May 14, 2013 @08:45AM (#5704480)
I have far too many repeats when I ask for a new one, NTN, RNC, and SAZ, are three that stood out
Re:Apple using moving letters as captcha by nanofortnight on Tuesday May 14, 2013 @07:48AM (#5704230)
Not to mention the motion makes separating out the letters easy[1]; optical flow can be used to segment the individual letters.

[1]: Have not actually attempted this.

Re:Apple using moving letters as captcha by shawnphoffman on Tuesday May 14, 2013 @04:27PM (#5707824)
I'm surprised they don't include letters in different colors and only have you distinguish ones of a particular color. Or make certain colors blink having the user select only the ones that are blinking.
Re:Apple using moving letters as captcha by OGinparadise on Tuesday May 14, 2013 @07:53AM (#5704248)
I hope not, these are refreshingly easy for humans, compared to the rest.

Maybe an Apple engineer can chime in