Re: Warped Text...

2005-09-09 Thread Antonio Gallardo


Yep, but SVG IMVHO is quite overkill to generate a simple image... 
Plus I suspect that the blurring algorithm is quite easy to 
recognize (in terms of running a simple image analysis package over 
the generated output).



Hi:

I just wanted to know where we are right now. I did some tests. Here is 
the results:


http://www.pwntcha.net/test.html?file=20050910023800guNNub.jpeg

Since we can also change the SVG file. Here is another sample :

http://www.pwntcha.net/test.html?file=20050910022917hUSpnb.jpeg

Best Regards,

Antonio Gallardo.

P.S: I am not trying to defeat the above statement.


Re: Warped Text...

2005-09-08 Thread Ugo Cei

Il giorno 02/set/05, alle 17:32, Pier Fumagalli ha scritto:

Yep, but SVG IMVHO is quite overkill to generate a simple image... 
Plus I suspect that the blurring algorithm is quite easy to recognize 
(in terms of running a simple image analysis package over the 
generated output).


Indeed, but my CAPTCHA widget is not tied to a particular image 
generation algorithm. It just calls a pipeline which must be able to 
get the string to be rendered from a session attribute. If you want, 
you can replace the one in the sample with one using your generator.


Ugo

--
Ugo Cei
Tech Blog: http://agylen.com/
Open Source Zone: http://oszone.org/
Wine  Food Blog: http://www.divinocibo.it/



Re: Warped Text...

2005-09-08 Thread Pier Fumagalli

On 8 Sep 2005, at 16:47, Ugo Cei wrote:

Il giorno 02/set/05, alle 17:32, Pier Fumagalli ha scritto:

Yep, but SVG IMVHO is quite overkill to generate a simple image...  
Plus I suspect that the blurring algorithm is quite easy to  
recognize (in terms of running a simple image analysis package  
over the generated output).




Indeed, but my CAPTCHA widget is not tied to a particular image  
generation algorithm. It just calls a pipeline which must be able  
to get the string to be rendered from a session attribute. If you  
want, you can replace the one in the sample with one using your  
generator.


Chill... No need to be defensive...

Pier



smime.p7s
Description: S/MIME cryptographic signature


Re: Warped Text...

2005-09-08 Thread Ugo Cei

Il giorno 08/set/05, alle 18:53, Pier Fumagalli ha scritto:

Yep, but SVG IMVHO is quite overkill to generate a simple image... 
Plus I suspect that the blurring algorithm is quite easy to 
recognize (in terms of running a simple image analysis package over 
the generated output).




Indeed, but my CAPTCHA widget is not tied to a particular image 
generation algorithm. It just calls a pipeline which must be able to 
get the string to be rendered from a session attribute. If you want, 
you can replace the one in the sample with one using your generator.


Chill... No need to be defensive...


I assure you that I'm not being defensive at all :-) I was just trying 
to suggest that your reader would be a good complement to the CAPTCHA 
support in CForms and it would be better to show them together in a 
sample rather than not.


Cheers,

Ugo

--
Ugo Cei
Tech Blog: http://agylen.com/
Open Source Zone: http://oszone.org/
Wine  Food Blog: http://www.divinocibo.it/



Re: Warped Text... (off topic)

2005-09-03 Thread Sylvain Wallez

Dirk-Willem van Gulik wrote:


On Fri, 2 Sep 2005, Pier Fumagalli wrote:
 


http://agylen.com/2005/05/16/captcha-validator-for-cocoon-forms/

Ciao,
 


Yep, but SVG IMVHO is quite overkill to generate a simple image...
   



For something really simple:

sub getBCD {
   $_ = (123567,36,13457,13467,2346,12467,24567,136,1234567,12346)[ shift 
@_ ];
   return (((m/1/) ? ' _ ' : '   '),
   ((m/2/) ? '|' : ' ').  ((m/4/) ? '_' : ' ').  ((m/3/) ? '|' : ' 
'),
   ((m/5/) ? '|' : ' ').  ((m/7/) ? '_' : ' ').  ((m/6/) ? '|' : ' 
'));
};

map { my @r = getBCD($_); map { $out[ $_ ] .= $r[$_].' '; } (0 .. 2); } '3231' 
=~ m/./g;

print join(\n,@out);

Just kidding.
 



Hey, nice to see you here!

As my perl is more than limited, I had to run it to understand what it 
does. Brilliant :-)


Sylvain

--
Sylvain WallezAnyware Technologies
http://people.apache.org/~sylvain http://www.anyware-tech.com
Apache Software Foundation Member Research  Technology Director



Re: Warped Text...

2005-09-03 Thread Tony Collen

Pier Fumagalli wrote:

On 2 Sep 2005, at 16:23, Gianugo Rabellino wrote:


On 9/2/05, Pier Fumagalli [EMAIL PROTECTED] wrote:


Guys,
 for one of our registration projects, we needed to verify that a
user is really in front of the browser (no automatons allowed). I
wrote, then, a little text-warper that randomly stretches text for
a user to see (and re-type) and writes out JPEG files.

In addition to that I wrote a little random-text generator and
encryptor (so that you can be sure the text displayed is nowhere in
your HTML). An example of a generated image is attached here.



Did you look at what Ugo did with captchas?

http://agylen.com/2005/05/16/captcha-validator-for-cocoon-forms/

Ciao,



Yep, but SVG IMVHO is quite overkill to generate a simple image...  Plus 
I suspect that the blurring algorithm is quite easy to recognize  (in 
terms of running a simple image analysis package over the  generated 
output).


I kinda like more random things! :-P :-P

Pier




Ugo's work built on some stuff I did a long time ago.  I did a gaussian 
blur on the text just as a proof of concept.  Of course, the SVG filters 
have displacement maps, so ideally you'd add one in addition to the 
stuff that's already there.



Tony


Warped Text...

2005-09-02 Thread Pier Fumagalli

Guys,
for one of our registration projects, we needed to verify that a  
user is really in front of the browser (no automatons allowed). I  
wrote, then, a little text-warper that randomly stretches text for  
a user to see (and re-type) and writes out JPEG files.


In addition to that I wrote a little random-text generator and  
encryptor (so that you can be sure the text displayed is nowhere in  
your HTML). An example of a generated image is attached here.


attachment: example.jpeg


Now, all this was implemented as cocoon components (because, of  
course, we use it with Cocoon). Anyone interested in me committing  
this to SVN? I'm thinking along the lines of a userid block.


Note, there's no CFORM integration as of now as I have not looked  
into it (CFORMs, yeah, I don't know them), but as far as I heard it  
should be a straightforward widget that can be implemented in no time.


Shall I commit?

Pier

smime.p7s
Description: S/MIME cryptographic signature


Re: Warped Text...

2005-09-02 Thread Gianugo Rabellino
On 9/2/05, Pier Fumagalli [EMAIL PROTECTED] wrote:
 Guys,
  for one of our registration projects, we needed to verify that a
 user is really in front of the browser (no automatons allowed). I
 wrote, then, a little text-warper that randomly stretches text for
 a user to see (and re-type) and writes out JPEG files.
 
 In addition to that I wrote a little random-text generator and
 encryptor (so that you can be sure the text displayed is nowhere in
 your HTML). An example of a generated image is attached here.

Did you look at what Ugo did with captchas?

http://agylen.com/2005/05/16/captcha-validator-for-cocoon-forms/

Ciao,

-- 
Gianugo Rabellino
Pro-netics s.r.l. -  http://www.pro-netics.com
Orixo, the XML business alliance: http://www.orixo.com
(blogging at http://www.rabellino.it/blog/)


Re: Warped Text...

2005-09-02 Thread Pier Fumagalli

On 2 Sep 2005, at 16:23, Gianugo Rabellino wrote:

On 9/2/05, Pier Fumagalli [EMAIL PROTECTED] wrote:


Guys,
 for one of our registration projects, we needed to verify that a
user is really in front of the browser (no automatons allowed). I
wrote, then, a little text-warper that randomly stretches text for
a user to see (and re-type) and writes out JPEG files.

In addition to that I wrote a little random-text generator and
encryptor (so that you can be sure the text displayed is nowhere in
your HTML). An example of a generated image is attached here.



Did you look at what Ugo did with captchas?

http://agylen.com/2005/05/16/captcha-validator-for-cocoon-forms/

Ciao,


Yep, but SVG IMVHO is quite overkill to generate a simple image...  
Plus I suspect that the blurring algorithm is quite easy to recognize  
(in terms of running a simple image analysis package over the  
generated output).


I kinda like more random things! :-P :-P

Pier

attachment: gianugo.jpg
attachment: gianugo.jpg
attachment: gianugo.jpg
attachment: gianugo.jpg
attachment: gianugo.jpg
attachment: gianugo.jpg





smime.p7s
Description: S/MIME cryptographic signature


Re: Warped Text...

2005-09-02 Thread Sylvain Wallez

Pier Fumagalli wrote:


Did you look at what Ugo did with captchas?

http://agylen.com/2005/05/16/captcha-validator-for-cocoon-forms/

Ciao,



Yep, but SVG IMVHO is quite overkill to generate a simple image...  
Plus I suspect that the blurring algorithm is quite easy to recognize  
(in terms of running a simple image analysis package over the  
generated output).



Just curious: what do you use to produce the image? If it's lighter and 
more efficient that SVG, we may simply consider using your stuff for the 
captcha widget.


Sylvain

--
Sylvain WallezAnyware Technologies
http://people.apache.org/~sylvain http://www.anyware-tech.com
Apache Software Foundation Member Research  Technology Director



Re: Warped Text... (off topic)

2005-09-02 Thread Dirk-Willem van Gulik

On Fri, 2 Sep 2005, Pier Fumagalli wrote:

  http://agylen.com/2005/05/16/captcha-validator-for-cocoon-forms/
 
  Ciao,

 Yep, but SVG IMVHO is quite overkill to generate a simple image...

For something really simple:

sub getBCD {
$_ = (123567,36,13457,13467,2346,12467,24567,136,1234567,12346)[ shift 
@_ ];
return (((m/1/) ? ' _ ' : '   '),
((m/2/) ? '|' : ' ').  ((m/4/) ? '_' : ' ').  ((m/3/) ? '|' : ' 
'),
((m/5/) ? '|' : ' ').  ((m/7/) ? '_' : ' ').  ((m/6/) ? '|' : ' 
'));
};

map { my @r = getBCD($_); map { $out[ $_ ] .= $r[$_].' '; } (0 .. 2); } '3231' 
=~ m/./g;

print join(\n,@out);

Just kidding.

Dw.


Re: Warped Text...

2005-09-02 Thread Pier Fumagalli

On 2 Sep 2005, at 16:44, Sylvain Wallez wrote:

Pier Fumagalli wrote:


Did you look at what Ugo did with captchas?

http://agylen.com/2005/05/16/captcha-validator-for-cocoon-forms/

Ciao,


Yep, but SVG IMVHO is quite overkill to generate a simple  
image...  Plus I suspect that the blurring algorithm is quite easy  
to recognize  (in terms of running a simple image analysis package  
over the  generated output).


Just curious: what do you use to produce the image?


AWT... I create an image, dump some text into it, calculate a couple  
of sine-waves, use them as the displacement base, re-scale the warped  
image while antialiasing it... On my laptop, with Eclipse/iTunes/ 
blablalba and so on running, I can get something like 4 requests/ 
second (9 kilobytes/second) on 100x50 pixel images.


It can be optimized a lot, I'm sure about it, I waste quite a large  
amount of cylcles, but the code is so simple (100 lines with  
comments) that in a couple of iterations I'm pretty sure I can double  
the thrugput.


If it's lighter and more efficient that SVG, we may simply consider  
using your stuff for the captcha widget.


Pretty sure it's lighter than SVG (even in its current state)! :-D  
I'm all up for it, as long as it can be found also without CFORMs  
enabled (I don't normally include them but I need the reader) and as  
long as I don't have to integrate it (as I wouldn't know where to  
start).


Shall I commit it in a simple block with a couple of samples, just to  
show how it works???


Pier


smime.p7s
Description: S/MIME cryptographic signature


Re: Warped Text...

2005-09-02 Thread Jorg Heymans

Pier Fumagalli wrote:

 Guys,
  for one of our registration projects, we needed to verify that a
 user is really in front of the browser (no automatons allowed). I
 wrote, then, a little text-warper that randomly stretches text for
 a user to see (and re-type) and writes out JPEG files.


Amazingly enough, PWNtcha [0] does not seem to be able to decode your
rather simple text warping. It's intriguing to see how their routines
can solve captchas even humans have to concentrate on, yet is unable to
solve a simple text warp.


Jorg

[0] http://sam.zoy.org/pwntcha/
(i took the liberty of running your warps through their cgi)



Re: Warped Text...

2005-09-02 Thread Gregor J. Rothfuss

Pier Fumagalli wrote:


Err... Ehm... Well, did the same before posting! :-D

But this http://www.brains-n-brawn.com/default.aspx?vDir=aicaptcha  can 
defeat it.


If it's human-readable, at the end, it WILL be defeated, no matter what.


there are better alternatives to captchas, like riddles or simple 
mathematical problems, with the added benefit of being accessible.


Re: Warped Text...

2005-09-02 Thread Mark Lundquist


On Sep 2, 2005, at 1:13 PM, Gregor J. Rothfuss wrote:


there are better alternatives to captchas, like riddles


Ah yes... :-)
http://www.mwscomp.com/movies/grail/grail-23.htm