Sunday, 28 August 2011

A brief analysis of Yahoo captchas

Captchas, initially a huge annoyance, are generally recognized as a necessary evil now. They stop bots from abusing your services, and there's a lot of interesting variants to use. The biggest is google's recaptcha, which is so popular even microsoft uses it occasionally. Today my attention is on Yahoo's implementation. You'll know them, they look like this:

In a nutshell: I had to type a few of these lately, and the character distribution didn't look quite right. I grabbed a hundred captchas, laboriously typed them out, and broke it down by character.


What you can't see here: Yahoo works with the traditional 'random combinations of letters and numbers' form of captcha. They use at least three different fonts, which are then physically skewed in a variety of ways. There's no additional visible interference between you and the letters, and the average length is 7.2 characters.

What you can see: Yahoo captchas use a relatively small subset of alphanumeric characters. A, B ,F ,G ,H ,J ,L ,M, T and V appear only in uppercase while c, d, e, n, p, r, s, t, y, q, y and z appear only in lowercase. Out of the numbers we have only 2, 3, 4, 5, 6, 7, and 8. This leaves 8 alphanumeric characters completely unrepresented - i, k, o, q, x, 1, 9 and 0.

Most of these seem to be omitted due to possible confusion. O, o and 0 are easily mistaken and so all are avoided, and the same goes for l/1 and K/X. Additionally, some two-character combinations which look similar to existing characters are omitted.
In this example the letter d is very easily mistaken for either 'cl' or 'ol' due to the font. However c, l, and o never appear in the captchas, presumably for this reason.. The letter p suffers similarly, while B and 8 manage to escape despite being sometimes difficult to distinguish.

I'm not entirely sure of the strategy here. They're purposefully obfuscating the word by overlapping the characters, but at the same time dramatically reducing the number of characters that could be present. By cutting down the total alphanumeric characters from 62 to 28 they're making it easier for OCR to render their technique ineffective.

26 comments:

  1. They're painful but they work. Honestly, I think they do discourage busy people from leaving comments sometimes. The codes are tedious and then the font style- ugh. The image based captchas are better for blog owners who want to encourage comments on their blogs.

    ReplyDelete
  2. Yahoo captchas are just horrible. Google has come up with an innovative image based approach

    ReplyDelete
  3. Dell customer service is available 24×7 for customer support and deal with each customer with the full response and solving to resolve problem effectively to give best at their end. The best solution is given by Dell is that they made a Search support box in which user/customer put their product details like Dell Support

    ReplyDelete
  4. Amazing post.Thanks for sharing among us.

    ReplyDelete
    Replies
    1. very Help Full Post. Look Some Different here at UPSC Syllabus

      Delete

  5. Technical support may be delivered over by phone or a tool where users can log a call or incident. Larger organizations frequently have internal technical support available to their staff for computer-related problems.

    Windows customer support

    ReplyDelete
  6. Replies
    1. Thanks for sharing this post, very informative. I have really liked your writeup. Apple Customer Service Help Use Our Service.

      Delete
  7. Replies
    1. very Help Full Post. Look Some Different here at IAS Preperation

      Delete
  8. Useful Information You have the nice information thanks for sharing . If you need Cisco Router Help Use Our Service.

    ReplyDelete
  9. very Help Full Post. Look Some Different here at upsc syllabus

    ReplyDelete
  10. I really love these all thing that your webpage contains, thanks to making a part of that info with me. Here we are providing the more about some help of the Windows Powershell Customer Care for the worldwide user.

    ReplyDelete
  11. I'm not entirely sure of the strategy here. They're purposefully obfuscating the word by overlapping the characters, but at the same time dramatically reducing the number of characters that could be present. Here we are with some more useful stuff that are Providing the all Microsoft Customer Support for the world wide users.

    ReplyDelete
  12. Thanks for sharing this post, very informative. I have really liked your writeup. Epson error code 0x69

    ReplyDelete
  13. If You are facing any Kind of the router issue that you are not able to fix get help by our tech experts. Our technician Will help you With support service Like Router Support

    ReplyDelete
  14. Specialized help might be conveyed over by telephone or an apparatus where clients can log a call or occurrence. Bigger associations every now and again have inward specialized help accessible to their staff for PC related issues.
    How To Connect Canon Printer to Wi-Fi on Mac?

    ReplyDelete
  15. If you have any problem related to Laptop.Our support team will help you to repair your Laptop by providing Laptop technical support within a short time and at an affordable cost.Call us: +44 800 048 8653



    ReplyDelete
  16. his is really very informative post and great read for me.if you want any help regarding dell data recovery support you can call toll free number +44 800 014 8212.

    ReplyDelete
  17. Very nice post. I just stumbled upon your blog and wanted to say that I have really enjoyed browsing your blog posts. After all I’ll be subscribing to your feed and I hope you write again very soon!

    ReplyDelete