Re: Integrated captcha?

"Perry E. Metzger" <[email protected]> Wed, 10 Sep 2008 19:17:55 -0400
Newsgroups gmane.mail.majordomo.majordomo2.devel
Message-ID <[email protected]>
"Steven W. Orr" <[email protected]> writes:
> There's also another system I do like called textchas which is a pute text 
> alternative. It's in use on the moin wiki system. Pardon the python 
> snippet, but here's the config setup I have here for my wiki.
>
>     textchas = {
>         'en': {
>         u'What day comes after Thursday?': ur"Friday",
>         u'What do you turn to start your car?': ur"Key",
>         u'Who is on the $100 bill?': ur"Franklin",
>         u'Who says "WOOF!"?': ur'Dog',
>         u'What flows in your veins?': ur'Blood',
>         u'What is the capital of Massachusetts?': ur'Boston',
>         u'What do you wear on your feet?': ur'Shoes',
>         u'What do you wear on your head?': ur'Hat',
>         u'Who was the first president?': ur'Washington',
>         u'What are trees made of?': ur'Wood',
>         u'How many days are there in December?': ur'31',
>         u'How many bases are there in baseball?': ur'4',
>         },
>         }
>
> It's sysadmin configurable and supports multiple languages.

The problem here is that an attacker can easily find all the possible
questions within a few minutes.


-- 
Perry E. Metzger		[email protected]