Photo: How not to design a CAPTCHA

Unfortunately Sony missed the entire point of a CAPTCHA. Instead of using an obfuscated image which is difficult for computers to recognize the characters, they include the CAPTCHA's unobfuscated characters in HTML and use CSS and JavaScript to make the characters appear slightly distorted.

While taking a Digital Image and Video Processing class (EE 371R at utexas.edu), I picked up a summer hobby of writing CAPTCHA breakers. Most CAPTCHAs can be decoded with a combination of Gaussian edge detection and XOR difference analysis with known characters. However this one falls to a simple regex.
Loading...
Andrew Hintz
Public
How not to design a CAPTCHA

Unfortunately Sony missed the entire point of a CAPTCHA. Instead of using an obfuscated image which is difficult for computers to recognize the characters, they include the CAPTCHA's unobfuscated characters in HTML and use CSS and JavaScript to make the characters appear slightly distorted.

While taking a Digital Image and Video Processing class (EE 371R at utexas.edu), I picked up a summer hobby of writing CAPTCHA breakers. Most CAPTCHAs can be decoded with a combination of Gaussian edge detection and XOR difference analysis with known characters. However this one falls to a simple regex.

2811 plus ones
231 comments