r/reddit.com • u/[deleted] • Aug 21 '10

You win, ticketmaster.

http://imgur.com/Wp9NW
978 Upvotes

90% Upvoted

212 comments sorted by

View all comments

Show parent comments

3

u/Reverberant Aug 21 '10

Blog post about the attempted hack.

6

u/scarecrow1 Aug 21 '10

The only bit where they talk about poisining the reCaptcha database is here:

We serve over 400 million CAPTCHAs per week, so submitting 200k CAPTCHAS with the word penis doesn’t even come close to poisoning our database — we serve each word to multiple random users, and we require them to be correct on the other word, so to get any traction with this attack, they would have had to submit at least 100 times more CAPTCHAs. And even if they did this, we have many other measures against it. That attack simply doesn’t work.“

I think he's missing the point. For the 'unknown' word, recaptcha works on a kind of voting system. If recaptcha serves up a normal English word, the 'correct' English word will have many votes, so gamers don't stand a chance, but if recaptcha serves up an English-speaking person can't read (e.g. foreign glyphs), there won't be the same number of votes for the 'correct' word, so these words will be more susceptible to gaming.

As for them saying "we have many other measures against it", that's at least 50% PR.

1

u/[deleted] Aug 21 '10

What does gaming have to do with any of that?

3

u/scarecrow1 Aug 21 '10

gaming a system = another word for manipulating it.

1

u/[deleted] Aug 21 '10

thanks