The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA”

https://www.funcaptcha.co/2015/01/06/recaptcha-is-still-vulnerable-perhaps-even-more-than-ever-before/

by FunCaptcha_Jim • 12 years ago

2 5 12 years ago

Hey all, this is a blog post that aims to simplify the findings from Egor Homakov in early December (http://homakov.blogspot.in/2014/12/the-no-captcha-problem.ht...). We've included a video (http://youtu.be/718EOIoWKAE) of a major exploit in action and chat about the implications of Mr. Homakov's findings. Hope you enjoy reading it as much as I enjoyed writing it. Any questions, fire away!

mtmail2• 12 years ago

So issue #2 is about click jacking. The same security consultant tweeted 3 days later it was fixed. https://twitter.com/homakov/status/541636430712156160

FunCaptcha_Jim3• 12 years ago

We actually tested the theory as of yesterday and it was still possible, re: the video we posted up: https://www.youtube.com/watch?v=718EOIoWKAE

The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA”

Related Stories