Hacker News Reader

Comment by heyitsnick | Hacker News Reader

Because a computer is very good at solving basic maths questions?

All this does is simplify the captcha for machines to solve, whilst complicating it for humans (basic maths is easy for most but it's still one more logical step then 'type out the 5 letters you see'). Instead of 26 upper and lower-case characters, and often just a random string (so we can't make a best guess vs a dictionary), we now just have ten characters and maybe 2-4 mathematical operators and it must make sense (it can't be "42+-" for example).

View on HN

As you stated: If computer wanted to hack it - sure it is easy enough. But I was looking for a easy way to do some verification.

I asked this because I was creating a reddit clone and wanted a captcha system. I detest the ones that exist right now.

The point of most captchas is to stop someone from writing a program that abuses your system. If you're not doing that, what exactly are you "verifying"?

I want to make sure a person votes only once. But if they want to game the system fine as long as they are willing to submit a captcha

For another website, I used to store the IP address and do checks but for a simple system that seem to be overkill.

All of the websites have no user accounts.

Is there another way to do this? Where you want some voting to happen but with no user accounts. And you want it to be dirt simple.

Ah, I get it. You are using a captcha not for its resistance to automation but as a way to make a user pay (with time) for an action.

If you start with the assumption that no one will try to attack your site, then you don't need a captcha at all. You can give the user any annoying/time-consuming task (e.g. "click a square ten times"), or you can insert an inconvenient delay in vote submission. However, people may object less to the inconvenience of something that looks like a captcha, because they are used to them.

Needless to say, almost no one uses captchas for this purpose. Instead, they use captchas to make their sites more resistant to automated abuse -- as you almost certainly will need if your sites become popular.

Thanks, these are great ideas. I never thought of doing this way.

The site dos not take in user generated content that is immediately displayed. The data is first curated and verified so the attack will be a bit harder. So there is fresh (delayed) content constantly.

That is exactly the reason of the captcha: to give a person something to do that wastes a bit of their time and that is familiar to them.

Yes, in other sites I have used captchas to prevent automated abuse.

Reply on news.ycombinator.com