the art of breaking and designing captchas - rsa … art of breaking and ... recaptcha 0% 0% reddit...
TRANSCRIPT
![Page 1: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/1.jpg)
Insert presenter logo here on slide master. See hidden slide
4 for directions
Session ID:Session Classification:
Elie BurszteinStanford University
The art of breaking and designing captchas
HT2-402Intermediate
![Page 2: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/2.jpg)
2
Insert presenter logo here on slide master. See hidden slide
4 for directions 2
![Page 3: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/3.jpg)
3Elie Bursztein (@elie)http://elie.im
3
![Page 4: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/4.jpg)
4Elie Bursztein (@elie)http://elie.im
World Most-Popular Captchas
4
![Page 5: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/5.jpg)
5Elie Bursztein (@elie)http://elie.im
Captcha Design Goal
AI ?
Human
sweet spot
5
![Page 6: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/6.jpg)
6Elie Bursztein (@elie)http://elie.im
Focus of this talk
xw
How to break and designCAPTCHAs
6
![Page 7: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/7.jpg)
7Elie Bursztein (@elie)http://elie.im
Based on the analysis of 21 of the most popular schemes
7
![Page 8: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/8.jpg)
8Elie Bursztein (@elie)http://elie.im
Outline
How to break text captchaHow to break audio captchaHow to make captchas easier for humanWhat’s next ?
8
![Page 9: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/9.jpg)
9Elie Bursztein (@elie)http://elie.im
Evaluation metrics
AccuracyLearnability
9
Solving time
![Page 10: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/10.jpg)
10
Insert presenter logo here on slide master. See hidden slide
4 for directions
How to Break Text-Captchas
10
![Page 11: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/11.jpg)
11Elie Bursztein (@elie)http://elie.im
Think Lego
11
![Page 12: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/12.jpg)
12Elie Bursztein (@elie)http://elie.im
Pre-processing: captcha binarizationPre-processing: background removalHow to break a captcha: examplePre-processing: Line detectionPre-processing: Line removalSegmentation: clustering algorithmSegmentation: cluster separationPost-segmentation: inverting rotationRecognition: 3173
12
![Page 13: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/13.jpg)
13Elie Bursztein (@elie)http://elie.im
Breaker 5 Stages Pipeline
Preprocessing
Segmentation
Post-segmentation
Recognition f a e t e s t
f a s t e s tPost-recognition
Slashdot captcha
13
![Page 14: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/14.jpg)
14
From the image to the matrix representation
![Page 15: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/15.jpg)
15
L1 L2 L3 L4 L5 L6vector
From the matrix representation to the vector representation
![Page 16: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/16.jpg)
16
B
B
A
A
C
C
42
40
32
70
12
18
vector
DistanceKnown vectors
C 12
From the vector representation to the segment value (classification)
![Page 17: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/17.jpg)
17Elie Bursztein (@elie)http://elie.im
Breaker efficiency
Solver accuracy = Coverage * Precision^length
Coverage: Segmentation ratePrecision: Recognition rate
17
![Page 18: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/18.jpg)
18Elie Bursztein (@elie)http://elie.im
Anti-recognition techniques
Blurring
Distortion
Rotation
Fonts
Charsets 0123456789
18
![Page 19: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/19.jpg)
19Elie Bursztein (@elie)http://elie.im
SVM learning rate
19
![Page 20: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/20.jpg)
20Elie Bursztein (@elie)http://elie.im
KNN learning rate
20
![Page 21: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/21.jpg)
21Elie Bursztein (@elie)http://elie.im
Anti-recognition taxonomy
Background Confusion
Lines
Collapsing
B k d f i21
![Page 22: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/22.jpg)
22Elie Bursztein (@elie)http://elie.im
Breaking World of Warcraft
22
![Page 23: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/23.jpg)
23Elie Bursztein (@elie)http://elie.im
Breaking Captcha.net
23
![Page 24: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/24.jpg)
24Elie Bursztein (@elie)http://elie.im
Breaking Wikipedia
24
![Page 25: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/25.jpg)
25Elie Bursztein (@elie)http://elie.im
Breaking Digg
25
![Page 26: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/26.jpg)
26Elie Bursztein (@elie)http://elie.im
Breaking Slashdot
26
![Page 27: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/27.jpg)
27Elie Bursztein (@elie)http://elie.im
Breaking eBay
27
![Page 28: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/28.jpg)
28Elie Bursztein (@elie)http://elie.im
Failing to break eBay
28
![Page 29: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/29.jpg)
29Elie Bursztein (@elie)http://elie.im
Breaking Baidu
29
![Page 30: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/30.jpg)
30Elie Bursztein (@elie)http://elie.im
Segmentation rate
Solving rate
Authorize 84% 66%Baidu 98% 5%Blizzard 75% 70%Captcha.net 96% 73%
CNN 50% 16%Digg 86% 20%eBay 95% 43%Google 0% 0%MegaUpload n/a 93%
NIH 87% 72%Recaptcha 0% 0%Reddit 71% 42%Skyrock 30% 2%Slashdot 52% 35%Wikipedia 57% 25%
30
![Page 31: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/31.jpg)
31Elie Bursztein (@elie)http://elie.im
Learning rate for real schemes
31
![Page 32: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/32.jpg)
32Elie Bursztein (@elie)http://elie.im
Building a breaker guidelinesImmediate visual feedbackVisual debuggingAlgorithm independenceExposing algorithm parameters
32
![Page 33: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/33.jpg)
33Elie Bursztein (@elie)http://elie.im
Decaptcha main interface
33
![Page 34: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/34.jpg)
34Elie Bursztein (@elie)http://elie.im
Apply design principles
Core design principlesRandomize lengthRandomize character sizeWave the captcha
Use anti-recognition as a means of strengthening captcha securityDon’t use a complex charset
Bad for human (see our research on this)Useless for security
Use collapsing or lines
34
![Page 35: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/35.jpg)
35
Insert presenter logo here on slide master. See hidden slide
4 for directions
Designing Better Captchas
35
![Page 36: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/36.jpg)
36Elie Bursztein (@elie)http://elie.im
Think Lego againDecompose in featuresAnalyze
feature in isolationfeatures interaction
36
![Page 37: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/37.jpg)
37Elie Bursztein (@elie)http://elie.im
Real vs Generated
37
![Page 38: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/38.jpg)
38Elie Bursztein (@elie)http://elie.im
Real vs Generated
38
![Page 39: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/39.jpg)
39Elie Bursztein (@elie)http://elie.im
Evaluation system
39
![Page 40: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/40.jpg)
40Elie Bursztein (@elie)http://elie.im
Experiment details
40
![Page 41: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/41.jpg)
41Elie Bursztein (@elie)http://elie.im
Some of the features tested
41
![Page 42: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/42.jpg)
42Elie Bursztein (@elie)http://elie.im
Angle of rotation
42
![Page 43: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/43.jpg)
43Elie Bursztein (@elie)http://elie.im
Collapsing
43
![Page 44: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/44.jpg)
44Elie Bursztein (@elie)http://elie.im
Character size
44
![Page 45: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/45.jpg)
45Elie Bursztein (@elie)http://elie.im
Resolution invariant
45
![Page 46: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/46.jpg)
46Elie Bursztein (@elie)http://elie.im
2D interactions
46
![Page 47: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/47.jpg)
47Elie Bursztein (@elie)http://elie.im
Length vs Angle interaction
47
![Page 48: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/48.jpg)
48Elie Bursztein (@elie)http://elie.im
Perception Does Not Match Number
48
![Page 49: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/49.jpg)
49
Insert presenter logo here on slide master. See hidden slide
4 for directions
How to Break Audio-Captcha
49
![Page 50: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/50.jpg)
50Elie Bursztein (@elie)http://elie.im
Audio Captchas
50
![Page 51: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/51.jpg)
51Elie Bursztein (@elie)http://elie.im
Super secure captcha
CaptchaMaker
Creating Audio Captcha
Noises Voices
51
![Page 52: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/52.jpg)
52Elie Bursztein (@elie)http://elie.im
Noise intensity (RMS/SNR)
2 9 0 0Microsoft
JDigg
A K
Authorize
K J 5 H
52
![Page 53: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/53.jpg)
53Elie Bursztein (@elie)http://elie.im
Sound representation
WAV DFT
Cep
TFR
TCR
TDC
53
![Page 54: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/54.jpg)
54Elie Bursztein (@elie)http://elie.im
Solving an audio captcha
CT
T A R A FR
S2
54
![Page 55: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/55.jpg)
55Elie Bursztein (@elie)http://elie.im
Dealing with random noiseStatistical learningSupervised learningRLS (Regularized least square) classifier
55
![Page 56: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/56.jpg)
56Elie Bursztein (@elie)http://elie.im
Semantic noise
56
![Page 57: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/57.jpg)
57Elie Bursztein (@elie)http://elie.im
Results
Length Coverage Digit Captcha
Authorize 5 100 97 89.2%
Digg 5 100 76 41.4%
eBay 6 85.6 92.5 82.9%
Microsoft 10 80.6 89.6 48.9%
Recaptcha 8 99.9 40.5 1.5%
Yahoo 7 99.1 74.7 45.4%
57
![Page 58: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/58.jpg)
58Elie Bursztein (@elie)http://elie.im
Recaptcha semantic noise
58
![Page 59: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/59.jpg)
59Elie Bursztein (@elie)http://elie.im
Confusion matrices
59
![Page 60: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/60.jpg)
60Elie Bursztein (@elie)http://elie.im
How many captchas do you need ?
60
![Page 61: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/61.jpg)
61Elie Bursztein (@elie)http://elie.im
Apply
Within 3 monthsMake sure you have a strong captcha schemeEnsure that your site is accessible
Within 6 monthsLog your captchas failure rate and monitor themHave a backup captcha scheme in case your scheme is broken
61
![Page 62: The art of breaking and designing captchas - RSA … art of breaking and ... Recaptcha 0% 0% Reddit 71% 42% Skyrock 30% 2% ... Have a backup captcha scheme in case your scheme is broken](https://reader031.vdocument.in/reader031/viewer/2022021822/5b3193177f8b9adf6c8b55c6/html5/thumbnails/62.jpg)
62Elie Bursztein (@elie)http://elie.im
Thank you !
Questions ?
Follow-me !
Thank you
Twitter: @elie
62
Captcha research: http://elie.im/captcha