how secure is the Captcha code

Discussion in 'PHP' started by fibi, Mar 5, 2010.

  1. #1
    Hallo I want to protect my site with Cpathca "ensure that the response is not generated by a computer".

    Ho secure is this? Do you know some human or software, that can crack it?
     
    fibi, Mar 5, 2010 IP
  2. GreenWithEnvy

    GreenWithEnvy Active Member

    Messages:
    125
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    53
    #2
    It would be a pretty complex piece of software to crack a good Captcha code. You're probably safe to use it unless you are worried about some serious hackers trying to automate stuff on your site.
     
    GreenWithEnvy, Mar 5, 2010 IP
  3. fibi

    fibi Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Thanks. No, I it is not the FBI top-secret information site :)
     
    fibi, Mar 5, 2010 IP
  4. danx10

    danx10 Peon

    Messages:
    1,179
    Likes Received:
    44
    Best Answers:
    2
    Trophy Points:
    0
    #4
    Captcha's are safe, aslong as you ensure the captcha code is integrated properly into your code.
     
    danx10, Mar 5, 2010 IP
  5. n3r0x

    n3r0x Well-Known Member

    Messages:
    257
    Likes Received:
    4
    Best Answers:
    1
    Trophy Points:
    120
    #5
    The new versions of captcha are safer than the old ones.. (seen older versions that stored the answer in a cookie which is a bit stupid)

    A friend of mine made a captcha-bypass a while back, but it´s not updated so I'm not sure if it could bypass the new ones.
     
    n3r0x, Mar 5, 2010 IP
  6. Bohra

    Bohra Prominent Member

    Messages:
    12,573
    Likes Received:
    537
    Best Answers:
    0
    Trophy Points:
    310
    #6
    use recaptcha that captcha is still not cracked
     
    Bohra, Mar 6, 2010 IP
  7. fibi

    fibi Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    good news. Thank you.
     
    fibi, Mar 6, 2010 IP
  8. killaklown

    killaklown Well-Known Member

    Messages:
    2,666
    Likes Received:
    87
    Best Answers:
    0
    Trophy Points:
    165
    #8
    programmers still have tools out there to let their software connect to a 3rd party that decrypts the captcha.
     
    killaklown, Mar 6, 2010 IP
  9. Om ji Kesharwani

    Om ji Kesharwani Peon

    Messages:
    211
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Hello friends suggest me for free secure captcha code site.
     
    Om ji Kesharwani, Mar 6, 2010 IP
  10. danx10

    danx10 Peon

    Messages:
    1,179
    Likes Received:
    44
    Best Answers:
    2
    Trophy Points:
    0
    #10
    That may be, but recaptcha is uncrackable.
     
    danx10, Mar 6, 2010 IP
  11. killaklown

    killaklown Well-Known Member

    Messages:
    2,666
    Likes Received:
    87
    Best Answers:
    0
    Trophy Points:
    165
    #11
    nothing is impossible, sooner or later it will be cracked.
     
    killaklown, Mar 6, 2010 IP
  12. SpamHat

    SpamHat Peon

    Messages:
    27
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #12
    Captchas provide a (very) weak layer of security.

    If it's possible for a human of average intelligence to solve it - then not only can a computer currently do it faster and more accurately - but humans can do it.
    What I mean is that there are many services offering real-time captcha solving by armies of people working from home.

    However if you're going to use one, ReCaptcha will stop the majority of fluff getting through.
    <edit>BTW - ReCaptcha was cracked a long time ago.</edit>
     
    SpamHat, Mar 6, 2010 IP
  13. Gray Fox

    Gray Fox Well-Known Member

    Messages:
    196
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    130
    #13
    How do you exactly "crack" a captcha generator? I see no other way but with some OCR program, since "good" captcha generators won't store any captcha information on your PC and rely only on PHP's session cookie that's IP aware (very important, otherwise if you "clone" that cookie onto 1000 different PC's, it takes only 1 captcha solving for 1000 actions, ie. comment posting).
     
    Gray Fox, Mar 7, 2010 IP
  14. Bohra

    Bohra Prominent Member

    Messages:
    12,573
    Likes Received:
    537
    Best Answers:
    0
    Trophy Points:
    310
    #14
    chances of recaptcha being cracked easily are little less coz the captcha comes through api from thier own site..
     
    Bohra, Mar 7, 2010 IP
  15. Narrator

    Narrator Active Member

    Messages:
    392
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    80
    #15
    You should be a safe with a captcha, these people are just paranoid. Big sites like google, ticketmaster and facebook wouldn't use them if they weren't effective.

    Check out reCAPTCHA, its free and the most effective that I know of.
     
    Narrator, Mar 7, 2010 IP
  16. danx10

    danx10 Peon

    Messages:
    1,179
    Likes Received:
    44
    Best Answers:
    2
    Trophy Points:
    0
    #16
    What i meant is uncrackable till date.
     
    danx10, Mar 9, 2010 IP
  17. TYPELiFE

    TYPELiFE Peon

    Messages:
    109
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #17
    It's not really too complex to crack CAPTCHA's, but most people will be hitting your site in an automated process, so a high strength generic captcha (like reCAPTCHA) will do the trick.
     
    TYPELiFE, Mar 9, 2010 IP
  18. Om ji Kesharwani

    Om ji Kesharwani Peon

    Messages:
    211
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #18
    From the above discussion.I think recaptcha is safer.
     
    Om ji Kesharwani, Mar 10, 2010 IP