WebApp Sec mailing list archives

Re: Defeating CAPTCHA


From: Chris Shiflett <shiflett () php net>
Date: Thu, 25 Aug 2005 21:38:51 -0400

Mark Burnett wrote:
Many ideas I hear for CAPTCHA's rely solely upon the secrecy of the
data set.

Many ideas about authentication rely upon the secrecy of the passwords. Many forms of encryption rely upon the secrecy of the key.

And that is security that relies upon obscurity.

Is it?

Chris


Current thread: