Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

EDIT: This question was dumb, I misread the quote that made me ask it. Sorry.

This is more of a follow up question from schroeder's answer to another question.

schroeder said that CAPTCHAs are vulnerable to automated attack. After looking around it seems like modern CAPTCHAs are not (as far as I can find), the closest I have seen was a criminal organization having random people solve CAPTCHAs for them in exchange for access to porn or other online goods.

What attacks exist that are truly automated?

share|improve this question
No dude... I said they prevented online attacks..... – Terry Chia May 8 '13 at 15:51
Oops, lysdexia. Sorry, will close question. Actually, I can't. – BSpiros May 8 '13 at 15:51
I said they can be cracked by automated tools :) – schroeder May 8 '13 at 15:55
up vote 2 down vote accepted

There may be modern forms of CAPTCHA that do not have automated tools yet, but a quick Google search will provide tools to crack various CAPTCHA systems with varying success rates.

In addition, not only are there sites that pay people to interpret CAPTCHAs (including Amazon's Mechanical Turk), but some warez include a CAPTCHA that must be passed in order to allow the user to access the software, but the CAPTCHA is a capture of a live crack attempt from some other source.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.