News for hackers. Stuff that matters.
Re:How Not to invent the next-gen CAPTCHA by dpcan on Tuesday October 20, 2009 @02:18PM (#892952)
The real solution might be to have Captcha technology built right into the browser that can physically detect whether or not a human is interfacing with the form.
Re:How Not to invent the next-gen CAPTCHA by docmach on Tuesday October 20, 2009 @02:24PM (#892967)
How would this work? Spammers aren't going to use a web browser with this feature, so it would only bother real people.
Re:How Not to invent the next-gen CAPTCHA by jm4 on Tuesday October 20, 2009 @02:27PM (#892974)
There are just as many holes. How does a browser detect whether a human is using it? Even if it could how would the site be made aware of this? Does the browser send some special information with the request? If so, can't it be reproduced by some script?
Re:How Not to invent the next-gen CAPTCHA by tetsuo13 on Tuesday October 20, 2009 @03:25PM (#893119)
The browser can be scripted to mimic human behavior -- clicks, keyboard entry, mouse movements, etc. How do you determine that a human is behind the browser?