Defeating Captchas
So if you’ve been on the web recently, you’ve probably seen something like this prompting you to enter the text before the site grants you access:

known as CAPTCHA’s, they are a form of reverse Turing tests meant to identify an entity as a person or a ‘dumb’ machine based on their capabilities. Seems to have originated with Max Levchin when he was trying to combat spammers on PayPal. But I was puzzled when I was prompted to solve one when I was uninstalling a piece of spyware on an old computer – why would they bother to ask me? It was later that Jacob elucidated the motivation for me: malicious bots on the internet can bypass the CAPTCHAs by simply defering it to a human on the other end of some screen wanting access to typically a porn/gambling site on the internet. The human solves it, it takes the input from them and sends it to the site the bot needs access to, and presto, problem solved.
It’s essentially what’s become known as a ‘man-in-the-middle’ attack to cryptography people… but it extends to other disciplines – such as the military. The example I remember is of the South African air force trying to detect whether a plane flying overhead is a friend or foe – because enemy planes can try to act as hidden communication intermediaries between the ground system and other South African aircraft, essentially passing the outgoing communications of one to the incoming channel of the other, and vice versa.

