The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA” - Hackdot

Re:The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA” by FunCaptcha_Jim on Tuesday January 06, 2015 @07:48PM (#8848184)

Hey all, this is a blog post that aims to simplify the findings from Egor Homakov in early December (http://homakov.blogspot.in/2014/12/the-no-captcha-problem.ht...). We've included a video (http://youtu.be/718EOIoWKAE) of a major exploit in action and chat about the implications of Mr. Homakov's findings. Hope you enjoy reading it as much as I enjoyed writing it. Any questions, fire away!

[ Parent | on HN ]

Re:The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA” by mtmail on Tuesday January 06, 2015 @08:02PM (#8848231)

So issue #2 is about click jacking. The same security consultant tweeted 3 days later it was fixed. https://twitter.com/homakov/status/541636430712156160

[ Parent | on HN ]

Re:The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA” by FunCaptcha_Jim on Tuesday January 06, 2015 @08:23PM (#8848296)

We actually tested the theory as of yesterday and it was still possible, re: the video we posted up: https://www.youtube.com/watch?v=718EOIoWKAE

[ Parent | on HN ]

Re:The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA” by mtmail on Tuesday January 06, 2015 @08:39PM (#8848351)

thanks! I didn't notice the video was new.

[ Parent | on HN ]

Re:The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA” by FunCaptcha_Jim on Tuesday January 06, 2015 @08:45PM (#8848378)

No problem :)

[ Parent | on HN ]