The Vulnerabilities of the New “No CAPTCHA ReCAPTCHA”

funcaptcha.co

Hey all, this is a blog post that aims to simplify the findings from Egor Homakov in early December (http://homakov.blogspot.in/2014/12/the-no-captcha-problem.ht...). We've included a video (http://youtu.be/718EOIoWKAE) of a major exploit in action and chat about the implications of Mr. Homakov's findings. Hope you enjoy reading it as much as I enjoyed writing it. Any questions, fire away!

So issue #2 is about click jacking. The same security consultant tweeted 3 days later it was fixed. https://twitter.com/homakov/status/541636430712156160

We actually tested the theory as of yesterday and it was still possible, re: the video we posted up: https://www.youtube.com/watch?v=718EOIoWKAE

thanks! I didn't notice the video was new.

No problem :)

Reply on news.ycombinator.com