PJ Vogt is on Twitter here. If you'd like to subscribe to TLDR's short weekly podcast, please go here.
The CAPTCHA is Dead! (Eventually, maybe, sort of.)
Monday, April 21, 2014 - 11:57 AM
No one particularly loves CAPTCHA's, those tiny boxes that make you type in hard to read pieces of text to prove that you're a human being.
Last week, Google announced an algorithm that can crack CAPTCHA's with 99.8 percent accuracy. The algorithm was designed for Google Street View -- it's supposed to pluck address numbers out of photos and make sense of them for Google's computers. But a computer that can decode a grainy photo of an address number on a house can also decode a CAPTCHA.
So what happens now? Well, just because because CAPTCHA's are theoretically useless, it doesn't mean they'll immediately go away. Spammers would first have to recreate Google's algorithm. And even if and when they do, stray CAPTCHA's could persist. The internet is filled with redundant security theater.
And when these floating text CAPTCHA's are truly gone, we'll need something else - some cheap Turing Test to separate us from the bots. Whatever that looks like, it's a near-guarantee that it'll be something annoying. Maybe the next generation of CAPTCHA's will ask us to I.D. a picture of Ryan Gosling, or hum a few notes of music into our computer. We'll have to keep finding things we can do but our computers can't.