Silviu Posted January 27, 2015 Report Posted January 27, 2015 A Firefox (>34) extension that breaks rotld.ro's audio CAPTCHA, with 100% accuracy.Flawed implementationRoTLD's audio CAPTCHAs are composed of 6 characters, in the a-f0-9 range. Each character is concatenated to the audio file, along with a header ("your captcha code is") and random amount of white noise between the characters.The major flaw is that the header, noise and characters are binary concatenated to the file (ie cat header.mp3 a.mp3 1.mp3 6.mp3 noise.mp3 d.mp3 b.mp3 f.mp3 > output.mp3), without resynthesizing the output. One can do a simple binary search for signatures and find the CAPTCHA code.InstallationYou can install by dragging the latest rotld_captcha.xpi file to your add-on page.Sursa: https://github.com/vladc/RoTLD-Captcha Quote
uhm Posted January 27, 2015 Report Posted January 27, 2015 Eu nu am stiut, asa ca mentionez aici si pentru alti necunoscatori.Extensiile .XPI merg doar in Mozilla Firefox, pot fi adaugate ca extensii.Dupa adaugarea extensiei, trebuie sa mai fac ceva? Quote
uhm Posted January 27, 2015 Report Posted January 27, 2015 A Firefox (>34) extension that breaks rotld.ro's audio CAPTCHA, with 100% accuracy.Nu am auzit in viata mea de extensii XPI din cauza asta am mentionat. Stiu ce a scris nenea in descriere. Am mentionat doar ca XPI merg doar in Firefox, ca sa vada si altul care nu a mai auzit de extensia XPI sau nu l-a interesat vre-odata. Am inteles ca nenea Silviu a facut aceasta extensie pentru Firefox de prima data, eu doar am mentionat o informatile utila si altor necunoscatori ca mine. Ce mare cacat? Quote
Silviu Posted January 27, 2015 Author Report Posted January 27, 2015 Nu am auzit in viata mea de extensii XPI din cauza asta am mentionat. Stiu ce a scris nenea in descriere. Am mentionat doar ca XPI merg doar in Firefox, ca sa vada si altul care nu a mai auzit de extensia XPI sau nu l-a interesat vre-odata. Am inteles ca nenea Silviu a facut aceasta extensie pentru Firefox de prima data, eu doar am mentionat o informatile utila si altor necunoscatori ca mine. Ce mare cacat?Nu am facut eu extensia. xpi e formatul extensiilor pentru Firefox, asa cum e .exe pentru Windows. Oricum, omul care a facut-o a mentionat ca e pentru Firefox, cum zicea si @Gecko mai sus. Quote
Gushterul Posted January 28, 2015 Report Posted January 28, 2015 I-ai terminat pe aia la ROTLD, o sa le ia doi ani sa fixeze... Quote
