Re: [PHP] Audio CAPTCHA review request

2007-04-06 Thread Tijnema !
On 4/6/07, tedd <[EMAIL PROTECTED]> wrote: At 2:55 PM +0100 4/6/07, Tijnema ! wrote: >I know, but animated gifs are still quite easy to read with a bot. Really? What if I a created a box surrounded by letters, like so: A B C D E F G H I However, where "E" is located I have a gif (animated or

Re: [PHP] Audio CAPTCHA review request

2007-04-06 Thread tedd
At 2:55 PM +0100 4/6/07, Tijnema ! wrote: I know, but animated gifs are still quite easy to read with a bot. Really? What if I a created a box surrounded by letters, like so: A B C D E F G H I However, where "E" is located I have a gif (animated or not) pointing to a letter, which would be

Re: [PHP] Audio CAPTCHA review request

2007-04-06 Thread tedd
At 9:24 AM -0400 4/6/07, Robert Cummings wrote: What I'm saying is that's it's a fairly poor choice from an accessibility perspective. I thought that as well, but it seems that at least visually impaired users using screen readers don't have any problems with it. Not that I have any support

Re: [PHP] Audio CAPTCHA review request

2007-04-06 Thread tedd
At 10:17 AM -0400 4/5/07, Jason Pruim wrote: There has to be some commonality -- any suggestions? Would it be possible to change the phrase in your audio captcha depending on the character set chosen by the user? In other words, if someone is using a chinese character set, could you have it s

Re: [PHP] Audio CAPTCHA review request

2007-04-06 Thread Tijnema !
On 4/6/07, tedd <[EMAIL PROTECTED]> wrote: At 7:54 PM +0200 4/5/07, Tijnema ! wrote: >About your dot-captcha program tedd, it's another trick, it hasn't >been used yet, so somebody needs to look at it to crack. Like Jochem >said, if someone really wants to break it, he will do it. Making a >real

Re: [PHP] Audio CAPTCHA review request

2007-04-06 Thread tedd
At 7:54 PM +0200 4/5/07, Tijnema ! wrote: About your dot-captcha program tedd, it's another trick, it hasn't been used yet, so somebody needs to look at it to crack. Like Jochem said, if someone really wants to break it, he will do it. Making a real though CAPTCHA isn't that hard, it's hard to cr

Re: [PHP] Audio CAPTCHA review request

2007-04-06 Thread Robert Cummings
On Fri, 2007-04-06 at 09:08 -0400, tedd wrote: > At 6:36 PM -0400 4/5/07, Robert Cummings wrote: > >But still, relying on Javascript is a bit flakey IMHO. > > There's nothing wrong with javascript -- you just need to know it's > limitations. *lol* You misunderstood me, I'm in no way dissing on J

Re: [PHP] Audio CAPTCHA review request

2007-04-06 Thread tedd
At 6:36 PM -0400 4/5/07, Robert Cummings wrote: But still, relying on Javascript is a bit flakey IMHO. There's nothing wrong with javascript -- you just need to know it's limitations. My audio captcha relies on javascript, namely ajax. The problem I had was how to deliver the sound once the

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread Robert Cummings
On Thu, 2007-04-05 at 18:14 -0400, tedd wrote: > Rob: > > Okay, nothing wrong with playing devil's advocate. I open to discussion. > > Note, that some of my blind testers report that there are ways for > them to move a mouse -- but I haven't a clue as to how they do it or > what they "see". >

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread tedd
At 10:59 AM -0400 4/5/07, Robert Cummings wrote: > If you're gonna do this, you probably need to remove a little piece in your security, which isn't wanted of course :) I'm just playing devil's advocate... (my mouse isn't really broken) this is about accessibility after all >:) Cheers, Rob.

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread Tijnema !
What can you do to make audio captcha's harder? Add more voice! This is exactly what google has done on their updated audio captcha. This really helps, you need a much more fine grained and larger voice model to trancribe that. I still think it is doable, but the amount of training work that is in

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread jochem
tedd wrote: > > However, I'm not convinced that all sound methodologies can be > resolved as simply as that. For example -- your method looks for > pauses/high points and then capsulizes segments for comparison > against known sounds. That's OK, but what if there is other meaning > in the so

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread Robert Cummings
On Thu, 2007-04-05 at 16:52 +0200, Tijnema ! wrote: > On 4/5/07, tedd <[EMAIL PROTECTED]> wrote: > > At 10:25 AM -0400 4/5/07, Robert Cummings wrote: > > > > However, I like my dot captcha (been fixed for IE 5 & IE 6) , see: > > >> > > >> http://sperling.com/examples/dot-captcha/index.php > > >>

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread Tijnema !
On 4/5/07, tedd <[EMAIL PROTECTED]> wrote: At 10:25 AM -0400 4/5/07, Robert Cummings wrote: > > However, I like my dot captcha (been fixed for IE 5 & IE 6) , see: >> >> http://sperling.com/examples/dot-captcha/index.php >> >> As you can "see", it's only for sighted users. > >My mouse is broken

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread tedd
At 10:25 AM -0400 4/5/07, Robert Cummings wrote: > However, I like my dot captcha (been fixed for IE 5 & IE 6) , see: http://sperling.com/examples/dot-captcha/index.php As you can "see", it's only for sighted users. My mouse is broken and I couldn't navigate to it using my keyboard! :B C

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread tedd
At 3:39 PM +0200 4/5/07, Tijnema ! wrote: Still, I don't see any way that a computer could make the difference between a user and a computer. Because some computers can't be smarter then others. It's only the way they're programmed. Tijnema Tijnema: You may very well be correct. I've often sa

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread Robert Cummings
On Thu, 2007-04-05 at 10:19 -0400, tedd wrote: > At 3:39 PM +0200 4/5/07, Tijnema ! wrote: > >Yes, but using a too hard protection where it isn't needed makes > >people irritated and they will hate your site. If you're using more > >then 1 CAPTCHA program on a simple board for example. But if you h

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread tedd
At 3:39 PM +0200 4/5/07, Tijnema ! wrote: Yes, but using a too hard protection where it isn't needed makes people irritated and they will hate your site. If you're using more then 1 CAPTCHA program on a simple board for example. But if you have a site like the NSA, yes, then it wouldn't be very s

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread Jason Pruim
On Apr 5, 2007, at 10:08 AM, tedd wrote: That's a good point. Not only should a captcha be accessible by sighted, visually impaired, deaf-blind, cognitive impaired, and other disabilities not mentioned, but also deal with all languages as well. It certainly sounds impossible, but what

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread tedd
At 3:28 PM +0200 4/5/07, Tijnema ! wrote: I often wondered why simple CAPTCHA's like "Type the number seven four three", or "What is the sum of two plus three?", or "Spell cat", or "Spell two" wouldn't work? Certainly, one can create a routine coupled a dB to randomly produce thousands of differ

Re: [PHP] Audio CAPTCHA review request

2007-04-05 Thread Tijnema !
I often wondered why simple CAPTCHA's like "Type the number seven four three", or "What is the sum of two plus three?", or "Spell cat", or "Spell two" wouldn't work? Certainly, one can create a routine coupled a dB to randomly produce thousands of different combinations of simple questions. Likew

RE: [PHP] Audio CAPTCHA review request

2007-04-04 Thread Daevid Vincent
> I often wondered why simple CAPTCHA's like "Type the number seven > four three", or "What is the sum of two plus three?", or "Spell cat", > or "Spell two" wouldn't work? Certainly, one can create a routine > coupled a dB to randomly produce thousands of different combinations > of simple que

Re: [PHP] Audio CAPTCHA review request

2007-04-04 Thread tedd
At 2:30 PM -0700 4/3/07, jochem wrote: Since you are asking for review: this audio captcha is almost certainly easily breakable. Tijnema is right with most of his comments, open source voice recognition software (the code he pointed to like spynx) will break this. I disagree with his point 3) b

RE: [PHP] Audio CAPTCHA review request

2007-04-04 Thread tedd
At 4:59 PM -0700 4/3/07, Daevid Vincent wrote: > -Original Message- From: Daevid Vincent [mailto:[EMAIL PROTECTED] I will point you at http://www.cepstral.com/ for a possible solution to your .mp3 usage. You could use Cepstral's "swift" tool to say the text dynamically. Actually

RE: [PHP] Audio CAPTCHA review request

2007-04-03 Thread Daevid Vincent
> -Original Message- > From: Daevid Vincent [mailto:[EMAIL PROTECTED] > > I will point you at http://www.cepstral.com/ for a possible > solution to your > .mp3 usage. You could use Cepstral's "swift" tool to say the text > dynamically. Actually Ted, what I was referring to was that you c

Re: [PHP] Audio CAPTCHA review request

2007-04-03 Thread jochem
Since you are asking for review: this audio captcha is almost certainly easily breakable. Tijnema is right with most of his comments, open source voice recognition software (the code he pointed to like spynx) will break this. I disagree with his point 3) below, obfuscating the speech with differ

RE: [PHP] Audio CAPTCHA review request

2007-04-02 Thread Daevid Vincent
I think what you're doing is very interesting. I will point you at http://www.cepstral.com/ for a possible solution to your .mp3 usage. You could use Cepstral's "swift" tool to say the text dynamically. Another suggestion on your security: put in a random delay after unsuccessful attempts. This c

Re: [PHP] Audio CAPTCHA review request

2007-04-01 Thread tedd
At 3:02 AM -0500 4/1/07, Richard Lynch wrote: On Fri, March 30, 2007 2:23 am, Tijnema ! wrote: Speech recognition isn't working very well, and i don't think it would be able to get these numbers from the audio, but I have too less experience with speech recognition. Put it this way: If Co

Re: [PHP] Audio CAPTCHA review request

2007-04-01 Thread Richard Lynch
On Fri, March 30, 2007 2:23 am, Tijnema ! wrote: > Speech recognition > isn't working very well, and i don't think it would be able to get > these numbers from the audio, but I have too less experience with > speech recognition. Put it this way: If Corporate America uses speech recognition on nat

Re: [PHP] Audio CAPTCHA review request

2007-03-31 Thread Richard Lynch
On Thu, March 29, 2007 3:50 pm, tedd wrote: >>And because you can't do anything on the internet without bumping >>into adult material. Don't worry, this is safe... no pics or bad >>words, just an article about using porn sites to break visual >>CAPTCHA. The spambots would take your visual CAPTCHA

Re: [PHP] Audio CAPTCHA review request

2007-03-31 Thread Richard Lynch
On Thu, March 29, 2007 6:46 pm, TG wrote: > On Thu, March 29, 2007 3:45 pm, Tijnema ! wrote: >> You're maybe on the right path, adding images as the background >> makes >> it really hard to read the code from the image. You could for >> example >> use random images as background. > > Some of the CA

Re: [PHP] Audio CAPTCHA review request

2007-03-31 Thread Richard Lynch
I am relatively certain that the QUICKTIME instructions are irrelevant on Linux... Unless they finally released QT for Linux while I wasn't paying attention... On Fri, March 30, 2007 1:15 am, Zoltán Németh wrote: > 2007. 03. 29, csütörtök keltezéssel 22.00-kor Tijnema ! ezt írta: >> On 3/29/

Re: [PHP] Audio CAPTCHA review request

2007-03-30 Thread tedd
At 8:20 PM -0400 3/29/07, TG wrote: > Not as hard as you might think. You don't have to identify it as a pig but rather as the spectral properties that a pig image displays. > It's like part recognition on an assembly line. Are you incinerating pigs and doing spectral analysis on them to se

Re: [PHP] Audio CAPTCHA review request

2007-03-30 Thread tedd
Trivia: FedEx and UPS boxes use Simplex locks. Typically 5 digits that can only be pressed once each. You can press multiple buttons at once though, adding to the permutation a little bit. But in the end, this still only provides roughly 1000 unique combinations. The average child's Master Lock

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Tijnema !
I would like to give a few comments on your script: 1) it looks like that http://www.sperling.com/examples/captcha/tmp/access.mp3, without a code, always returns the same value :) 284 2) About the timeout, you should set it at least less then 24 hrs, i should do about 6 hrs, that's enough for

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Zoltán Németh
2007. 03. 29, csütörtök keltezéssel 22.00-kor Tijnema ! ezt írta: > On 3/29/07, Zoltán Németh <[EMAIL PROTECTED]> wrote: > > 2007. 03. 29, csütörtök keltezéssel 21.52-kor Tijnema ! ezt írta: > > > On 3/29/07, Zoltán Németh <[EMAIL PROTECTED]> wrote: > > > > works fine on XP/IE7 > > > > but still te

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread TG
On Thu, March 29, 2007 4:50 pm, tedd wrote: >>2. What you've created is a relatively simplistic audio captcha that >>HAS to be really succeptible to speech recognition. Spammers have >>gotten used to visual CAPTHCA so maybe they're not going to focus >>too much on detecting and breaking audio CAPT

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread TG
On Thu, March 29, 2007 3:45 pm, Tijnema ! wrote: > You're maybe on the right path, adding images as the background makes > it really hard to read the code from the image. You could for example > use random images as background. Some of the CAPTCHA methods listed as being difficult for the PWNtcha

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread tedd
At 7:32 PM +0200 3/29/07, Tijnema ! wrote: Yes, it's nice made, i see you didn't stored anything in sessions except PHPSESSID, which you probably use to verify the code entered. Atleast, that's what i think, i hope you didn't use IP ;) No, it's just uses sessions to keep track of the visitor. H

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread tedd
At 9:45 PM +0200 3/29/07, Tijnema ! wrote: For example, i would go to the page and save the number that the CAPTCHA passed to my session. Then i would write down the code that i need to enter. So, next time i need to pass, i set the session value to the one i got first time, and i enter same code

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread tedd
tg: At 2:36 PM -0400 3/29/07, <[EMAIL PROTECTED]> wrote: 1. My biggest fear when relying on an audio CAPTCHA system is if the users doesn't have sound. No speakers, or can't play stuff at the office or something like that. I keep my system muted at work unless I'm playing music because some

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Tijnema !
On 3/29/07, Zoltán Németh <[EMAIL PROTECTED]> wrote: 2007. 03. 29, csütörtök keltezéssel 21.52-kor Tijnema ! ezt írta: > On 3/29/07, Zoltán Németh <[EMAIL PROTECTED]> wrote: > > works fine on XP/IE7 > > but still tells me to install some unknown plugin on ubuntu/firefox > > > > greets > > Zoltán

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Zoltán Németh
2007. 03. 29, csütörtök keltezéssel 21.52-kor Tijnema ! ezt írta: > On 3/29/07, Zoltán Németh <[EMAIL PROTECTED]> wrote: > > works fine on XP/IE7 > > but still tells me to install some unknown plugin on ubuntu/firefox > > > > greets > > Zoltán Németh > > That unknown plugin would probably some aud

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Tijnema !
On 3/29/07, Zoltán Németh <[EMAIL PROTECTED]> wrote: works fine on XP/IE7 but still tells me to install some unknown plugin on ubuntu/firefox greets Zoltán Németh That unknown plugin would probably some audio player. Tijnema 2007. 03. 29, csütörtök keltezéssel 12.41-kor tedd ezt írta: > Hi

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Zoltán Németh
works fine on XP/IE7 but still tells me to install some unknown plugin on ubuntu/firefox greets Zoltán Németh 2007. 03. 29, csütörtök keltezéssel 12.41-kor tedd ezt írta: > Hi gang: > > If you people would be so kind as to review this: > > http://sperling.com/examples/captcha/ > > and tell me

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Tijnema !
On 3/29/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Not bad. Seems to work nicely. No "OMGWTF!" obvious slips like naming the MP3 with the digits the user needs to enter. Worked fine in Firefox 1.5 too. Sometimes when audio is embedded in a page, it tries to load Windows Media Player or

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread tedd
At 2:02 PM -0400 3/29/07, Jason Pruim wrote: Just a really quick check right now is all I have time for, but it looks good. The one thing you could do (And this is personal preference) Mark on it that they can replay the code if they didn't hear it the first time. I am in a loud environment at

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Jason Pruim
No, it replayed just fine. It just didn't seem to me to be obvious that hitting the "speak" button would replay the same code that I may have missed a digit out of. But then again, I've been trying to figure out how to do math with PHP and MySql all day so my brain is totally fried :P On

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread tg-php
Not bad. Seems to work nicely. No "OMGWTF!" obvious slips like naming the MP3 with the digits the user needs to enter. Worked fine in Firefox 1.5 too. Sometimes when audio is embedded in a page, it tries to load Windows Media Player or something which doesn't always work well in Firefox withou

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread tg-php
It played the same sequence for me when I re-clicked the Play button.. until I went away for a min or two and my session probably timed out. Did it not play the same sequence for you? -TG = = = Original message = = = Just a really quick check right now is all I have time for, but it looks g

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Jason Pruim
Just a really quick check right now is all I have time for, but it looks good. The one thing you could do (And this is personal preference) Mark on it that they can replay the code if they didn't hear it the first time. I am in a loud environment at times and can't always hear things the fi

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Tijnema !
It worked for you, Tij? My guess, then, since it's timing out, is it must be our corporate firewall blocking MP3s on my end. In which case, disregard my reponses with extreme prejudice. Yes it worked for me, it probably is a firewall, because it works for Jake too. On 3/29/07, Jake McHenr

RE: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Jake McHenry
Looks good to me... Had to use my laptop since none of my office sets have speakers, tested it, tried bunch of stuff and it only let me in when I typed in the code... So seems good :) Jake > -Original Message- > From: tedd [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 29, 2007 12:4

Re: [PHP] Audio CAPTCHA review request

2007-03-29 Thread Tijnema !
On 3/29/07, tedd <[EMAIL PROTECTED]> wrote: Hi gang: If you people would be so kind as to review this: http://sperling.com/examples/captcha/ and tell me what you think (ease of use, if it works, security, etc.), I would appreciate it. The point is to be able to get to the "Congratulations" pa