# Are captchas more trouble than they are worth?

**URL:** <https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891>\
**Category:** Factual Questions\
**Created:** [October 14, 2008, 4:16pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891 "2008-10-14T16:16:53Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![John\_DiFool](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/john_difool/32/19543_2.png) [@John\_DiFool](https://boards.straightdope.com/u/John_DiFool)\
**Post date:** [October 14, 2008, 4:16pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/1 "2008-10-14T16:16:53Z")

</div>

Inspired by [THIS](http://boards.straightdope.com/sdmb/showthread.php?t=487760) thread…

Apparently the hackers and spammers have little trouble cracking these anymore. Is there a better way I wonder? How about a quick question on some pop-culture reference (a la American GIs who would quiz suspected German agents about who Babe Ruth or Fay Wray was)? Not only would a bot be unable to provide the answer, the armies of Indian captcha-breakers likely would have trouble with such questions. (Who is the star of the show “24”? Who plays third for the Yankees?)

Or, a simple little mathematical equation maybe? Or are such “security” measures ultimately pointless and always subject to countermeasures?

---

<div class="post-metadata">

**Author:** ![Crowbar\_of\_Irony\_3](https://avatars.discourse-cdn.com/v4/letter/c/f08c70/32.png) [@Crowbar\_of\_Irony\_3](https://boards.straightdope.com/u/Crowbar_of_Irony_3)\
**Post date:** [October 14, 2008, 4:23pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/2 "2008-10-14T16:23:08Z")

</div>

I tried a mathematical anti-bot measure. It seems to work well.

Of course, if the site is being targeted by the determined hacker there’s nothing it can do.

You also have to keep in mind about language barriers or such.

One interesting measure I saw is to ask the users to type in words of a certain color only (like ‘all the red words in the image’) or some sort of spatial recognition which would be hard pressed for bots (how many circles are there in the image?) but you risk accessibility issues.

---

<div class="post-metadata">

**Author:** ![Baldwin](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/baldwin/32/7264_2.png) [@Baldwin](https://boards.straightdope.com/u/Baldwin)\
**Post date:** [October 14, 2008, 4:30pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/3 "2008-10-14T16:30:29Z")

</div>

What I wonder is how the spamming generates enough revenue to be worthwhile. The come-ons for web-cams that I saw in Yahoo chatrooms want you to create an account, which I assume leads to paying money in some way. But if a guy’s horny and desperate and wants to see some pornographic webcams, he’s probably already signed up for something that suits his particular pathetic needs.

What is it about this particular crime – which might reasonably be considered minor in the hierarchy of crimes – that makes me imagine finding the person behind it, and putting my hands around his throat, and squeezing, squeezing. . . .

---

<div class="post-metadata">

**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\
**Post date:** [October 14, 2008, 4:35pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/4 "2008-10-14T16:35:45Z")

</div>

> [@John\_DiFool](#):
>
> Who is the star of the show “24”? Who plays third for the Yankees?

I’d be fucked. 😃 I’m a pop culture illiterate.

---

<div class="post-metadata">

**Author:** ![jjimm](https://avatars.discourse-cdn.com/v4/letter/j/ba8739/32.png) [@jjimm](https://boards.straightdope.com/u/jjimm)\
**Post date:** [October 14, 2008, 5:13pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/5 "2008-10-14T17:13:58Z")

</div>

Best captcha I’ve seen is lots of small pictures of fluffy animals, and you have to identify all the puppies or all the kitties. It really needs human intelligence to do that.

ETA: [here it is](http://www.thepcspy.com/contact).

---

<div class="post-metadata">

**Author:** ![Erasmus\_Darwin](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@Erasmus\_Darwin](https://boards.straightdope.com/u/Erasmus_Darwin)\
**Post date:** [October 14, 2008, 6:56pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/6 "2008-10-14T18:56:35Z")

</div>

> [@jjimm](#):
>
> Best captcha I’ve seen is lots of small pictures of fluffy animals, and you have to identify all the puppies or all the kitties. It really needs human intelligence to do that.

They’re even cracking that. The last paragraph on the first page of this article discusses it: [http://www.technologyreview.com/web/21519/page1/](http://www.technologyreview.com/web/21519/page1/)

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [October 14, 2008, 7:02pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/7 "2008-10-14T19:02:27Z")

</div>

> [@John\_DiFool](#):
>
> Who is the star of the show “24”?

Jack somebody. If you mean the actor’s name, no idea.

> [@](#):
>
> Who plays third for the Yankees?

I don’t even know what sport you’re referring to.

Fail.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [October 14, 2008, 7:06pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/8 "2008-10-14T19:06:01Z")

</div>

> [@](#):
>
> Best captcha I’ve seen is lots of small pictures of fluffy animals, and you have to identify all the puppies or all the kitties. It really needs human intelligence to do that.

That depends on the number of images in the database. If the database is too small, it’s relatively easy to just recognize “OK, the last time I got this set of images, image#17362 was identified as a fox, so I’ll click on that one as a fox.”. For a captcha to be useful, it has to be able to automatically generate a vast number of different puzzles. For a pop-culture trivia test, you’d need to have a text file somewhere of all of the questions and answers, and if the crackers got ahold of that text file (which they would), the system would be useless. Nor could you generate your question file automatically from Google, because then the crackers could likewise automate the answers through Google.

---

<div class="post-metadata">

**Author:** ![Cisco](https://avatars.discourse-cdn.com/v4/letter/c/ccd318/32.png) [@Cisco](https://boards.straightdope.com/u/Cisco)\
**Post date:** [October 14, 2008, 7:07pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/9 "2008-10-14T19:07:18Z")

</div>

Captcha weeds out A LOT of noise. Not all, but it certainly helps. I put one on my friend requests on Myspace and I went from ~15 spam requests per day down to maybe ~2 per month.

---

<div class="post-metadata">

**Author:** ![Laughing\_Lagomorph](https://avatars.discourse-cdn.com/v4/letter/l/6bbea6/32.png) [@Laughing\_Lagomorph](https://boards.straightdope.com/u/Laughing_Lagomorph)\
**Post date:** [October 14, 2008, 8:11pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/10 "2008-10-14T20:11:58Z")

</div>

> [@Mangetout](#):
>
> …
> 
> I don’t even know what sport you’re referring to.
> 
> …

Truly? They are probably the most famous American sports franchise.

I know nothing at all about, say, Manchester United, except what sport they play.  
I can well believe most people wouldn’t know who plays where for the Yankees, though.

(When I clicked on **jjimm’s** link it asked me to identify the pictures with hedgehogs…I bet many North Americans wouldn’t know what they look like).

---

<div class="post-metadata">

**Author:** ![Alive\_At\_Both\_Ends](https://avatars.discourse-cdn.com/v4/letter/a/73ab20/32.png) [@Alive\_At\_Both\_Ends](https://boards.straightdope.com/u/Alive_At_Both_Ends)\
**Post date:** [October 14, 2008, 8:21pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/11 "2008-10-14T20:21:50Z")

</div>

> [@Mangetout](#):
>
> I don’t even know what sport you’re referring to.

Baseball - but I must admit I only got that because of the “plays third”. It’s the only American sport I know of that has a playing order. I doubt if many people this side of the pond would know for sure.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [October 14, 2008, 8:23pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/12 "2008-10-14T20:23:33Z")

</div>

…And I just tried the kitten link again, and got two of the same picture show up in the grid. That’s pretty good evidence that their database is too small.

EDIT:

> [@](#):
>
> Baseball - but I must admit I only got that because of the “plays third”. It’s the only American sport I know of that has a playing order.

Right answer for the wrong reason. When one speaks of a baseball player “playing third” or “playing first”, it’s position on the field (first, second, or third base), not batting order. A team will typically have a particular batting order they like to use (conventional wisdom is to put your best home-run hitter in the #4 spot), but a player isn’t inherently associated with any particular batting order. The different positions, though (first, second, third, shortstop, pitcher, catcher, left field, center field, right field) do use different skill sets, and a player who’s a pretty good first baseman is likely to be a lousy pitcher (with the exception of Babe Ruth).

---

<div class="post-metadata">

**Author:** ![Alive\_At\_Both\_Ends](https://avatars.discourse-cdn.com/v4/letter/a/73ab20/32.png) [@Alive\_At\_Both\_Ends](https://boards.straightdope.com/u/Alive_At_Both_Ends)\
**Post date:** [October 14, 2008, 8:34pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/13 "2008-10-14T20:34:21Z")

</div>

> [@Chronos](#):
>
> Right answer for the wrong reason. When one speaks of a baseball player “playing third” or “playing first”, it’s position on the field (first, second, or third base), not batting order. A team will typically have a particular batting order they like to use (conventional wisdom is to put your best home-run hitter in the #4 spot), but a player isn’t inherently associated with any particular batting order. The different positions, though (first, second, third, shortstop, pitcher, catcher, left field, center field, right field) do use different skill sets, and a player who’s a pretty good first baseman is likely to be a lousy pitcher (with the exception of Babe Ruth).

Thanks for clarifying. One of these days I’ll have to try to figure out baseball. (If only for interest’s sake - it gets precisely zero media coverage over here.)

---

<div class="post-metadata">

**Author:** ![spoike](https://avatars.discourse-cdn.com/v4/letter/s/da6949/32.png) [@spoike](https://boards.straightdope.com/u/spoike)\
**Post date:** [October 14, 2008, 8:43pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/14 "2008-10-14T20:43:16Z")

</div>

While purchasing tickets on [Ticketmaster.com](http://Ticketmaster.com) this weekend, I noticed the following on their captcha screen:

> [@](#):
>
> **Digitize Books One Word at a Time**  
> By entering the words in the box, you are also helping to digitize books from the Internet Archive and preserve literature that was written before the computer age.

I thought it was kind of cool, and it made me resent them a little less, although I still find it very irritating when I get a completely illegible one.

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [October 14, 2008, 9:08pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/15 "2008-10-14T21:08:17Z")

</div>

> [@Laughing\_Lagomorph](#):
>
> Truly? They are probably the most famous American sports franchise.

Truly.

> [@](#):
>
> I know nothing at all about, say, Manchester United, except what sport they play.

That’s about the same as me, for Manchester United too.

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [October 14, 2008, 9:10pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/16 "2008-10-14T21:10:20Z")

</div>

> [@Chronos](#):
>
> …And I just tried the kitten link again, and got two of the same picture show up in the grid. That’s pretty good evidence that their database is too small.

It would be easy enough to get a server to present the same set of images as randomly-named each time, subtly alter pixel values, or apply filters, or randomly partially crop them on demand, so as to make it very difficult for a bot to tell that they were the same images each time.

---

<div class="post-metadata">

**Author:** ![Troy\_McClure\_SF](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/troy_mcclure_sf/32/4150_2.png) [@Troy\_McClure\_SF](https://boards.straightdope.com/u/Troy_McClure_SF)\
**Post date:** [October 14, 2008, 10:23pm UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/17 "2008-10-14T22:23:17Z")

</div>

> [@spoike](#):
>
> While purchasing tickets on [Ticketmaster.com](http://Ticketmaster.com) this weekend, I noticed the following on their captcha screen:
> 
> I thought it was kind of cool, and it made me resent them a little less, although I still find it very irritating when I get a completely illegible one.

But if you were digitizing the image from the book, then it would need something to compare it to, and it would therefore already have to be digitized somewhere. I don’t see how it could function as both a Capcha and a humanized OCR, if that’s what’s begin said.

---

<div class="post-metadata">

**Author:** ![tofergregg](https://avatars.discourse-cdn.com/v4/letter/t/bbe5ce/32.png) [@tofergregg](https://boards.straightdope.com/u/tofergregg)\
**Post date:** [October 15, 2008, 12:37am UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/18 "2008-10-15T00:37:42Z")

</div>

> [@Troy\_McClure\_SF](#):
>
> But if you were digitizing the image from the book, then it would need something to compare it to, and it would therefore already have to be digitized somewhere. I don’t see how it could function as both a Capcha and a humanized OCR, if that’s what’s begin said.

Read this excellent article about how they do it:

[http://arstechnica.com/news.ars/post/20080814-captchas-workfor-digitizing-old-damaged-texts-manuscripts.html](http://arstechnica.com/news.ars/post/20080814-captchas-workfor-digitizing-old-damaged-texts-manuscripts.html)

The bottom line:

> [@](#):
>
> According to the authors, humans handle over 100 million CAPTCHAs every day. “This mental effort is precious,” they write, “since deciphering CAPTCHAs requires people to perform a task that computers cannot.” Their automated system attempts to harvest this precious effort. Scanned text is subjected to analysis by two optical character recognition programs; in cases where the programs disagree, the questionable word is converted into a CAPTCHA. It, along with a control word of known identity (used for cases where a bot is trying to crack the CAPTCHA) are then distributed to participating websites. Currently, over 40,000 sites are using reCAPTCHA.
> 
> The identification performed by each computer program is given a value of 0.5 points, and each interpretation by a human is given a full point. Once a given identification hits 2.5 votes, the word is considered called. Those words that are consistently given a single identity by human judges are recycled as control words.

---

<div class="post-metadata">

**Author:** ![OldGuy](https://avatars.discourse-cdn.com/v4/letter/o/3bc359/32.png) [@OldGuy](https://boards.straightdope.com/u/OldGuy)\
**Post date:** [October 15, 2008, 4:35am UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/19 "2008-10-15T04:35:50Z")

</div>

> [@Alive\_At\_Both\_Ends](#):
>
> Baseball - but I must admit I only got that because of the “plays third”. It’s the only American sport I know of that has a playing order. I doubt if many people this side of the pond would know for sure.

Baseball does have a playing order normally called a batting order, but Alex Rodriquez who “plays third [base]” usually bats fourth. No American baseball fan would understand the question “who plays third” to refer to the batting order rather than the fielding position.

---

<div class="post-metadata">

**Author:** ![grey\_ideas](https://avatars.discourse-cdn.com/v4/letter/g/dfb087/32.png) [@grey\_ideas](https://boards.straightdope.com/u/grey_ideas)\
**Post date:** [October 15, 2008, 7:44am UTC](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891/20 "2008-10-15T07:44:54Z")

</div>

Interesting, reading the Technology Review article, it sounds like they are using neural network software to learn the CAPTCHAs. I used one of these during my postgrad when I was attempting to get a computer to correctly identify different types of cells based on certain criteria (seven different physical measurements taken at different ages and/or environmental conditions) and it worked incredibly well, greater that 95% accurate if I remember rightly. The only reason that the results never made it into my thesis was that neither I nor anyone I worked with could explain ‘how’ the neural network got the results it did. Bear in mind though that in this case the NN was working on the actual physical measurements rather than the image of the cell itself, still in the rougly ten years it’s been since I did my postgrad I’m not surprised that this sort of thing is being applied directly to the images.

[Next page](https://boards.straightdope.com/t/are-captchas-more-trouble-than-they-are-worth/467891.md?page=2)
