On Fri, 2008-08-29 at 23:39 -0400, Eric Gorr wrote: > On Aug 29, 2008, at 11:31 PM, Robert Cummings wrote: > > > On Fri, 2008-08-29 at 23:24 -0400, Eric Gorr wrote: > >> On Aug 29, 2008, at 11:16 PM, Robert Cummings wrote: > >> > >>> On Fri, 2008-08-29 at 23:05 -0400, Eric Gorr wrote: > >>>> On Aug 29, 2008, at 9:40 PM, Robert Cummings wrote: > >>> > >>> All CAPTCHA's are not easily crackable. Some are quite difficult. > >> > >> All someone has to do is hire someone to sit there and solve the > >> captcha's. There are places in this world which, unfortunately, > >> employ > >> slave or virtually slave labor. If someone wants to fire that > >> missile, > >> it is certainly possible. > >> > >> They are _all_ easily crackable. > > > > A human tending to a CAPTCHA is not cracked, the human is performing > > the > > action for which the CAPTCHA was intended. While CAPTCHA's may be weak > > to this kind of exploitation, this exploitation does not constitute a > > crack. > > Remember, the purpose of a captcha is to prevent a spammer from > performing some kind of action. Anything that would allow the spammer > to perform that action is cracking that thing which was put into place > to prevent it. No, circumvention is not necessarily cracking. You have described the "relay attack". See wikipedia section called "Human Solvers": http://en.wikipedia.org/wiki/Captcha Cheers, Rob. -- http://www.interjinn.com Application and Templating Framework for PHP -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php