[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #18361 [Tor Browser]: Issues with corporate censorship and mass surveillance



#18361: Issues with corporate censorship and mass surveillance
------------------------------------------+--------------------------
 Reporter:  ioerror                       |          Owner:  tbb-team
     Type:  enhancement                   |         Status:  new
 Priority:  High                          |      Milestone:
Component:  Tor Browser                   |        Version:
 Severity:  Critical                      |     Resolution:
 Keywords:  security, privacy, anonymity  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:  None
------------------------------------------+--------------------------
Changes (by saint):

 * cc: saint (added)


Comment:

 Replying to [comment:173 polyclef]:
 > Cloudflare is using recaptcha.  Recaptcha has been broken for years.
 >
 > http://bitland.net/captcha.pdf describes how to defeat captchas in
 general and a prior version of recaptcha in particular.
 >
 > Many challenges are overly simple and can be broken with existing tools
 that require no further modification.


 In the thread someone mentions that it's possible to derive the answer for
 the old-style street number captchas using tesseract [1]. Interestingly,
 there is a version of tesseract in javascript [1]. This is probably not
 especially useful for the current "select all boxes that contain one pixel
 of street sign" Recaptcha system, but if there were a way to trigger the
 old behavior, these techniques could be used together.

 [1] http://tesseract.projectnaptha.com/

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18361#comment:202>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs