Коментарі для запису: MoBiC-26 Bonus: XSS in Captcha! http://websecurity.com.ua/1588/ Mon, 06 Apr 2026 05:17:25 +0000 http://wordpress.org/?v=MustLive Edition від: Boriel http://websecurity.com.ua/1588/#comment-87855 Sat, 22 Dec 2007 22:21:40 +0000 http://websecurity.com.ua/1588/#comment-87855 Don't know why, but Firefox Warning is no longer appearing. :?: so users better install NoScript! extension. Regarding your Captcha, it is very unsecure, since it allows OCR attack (chars are easily recognisable by a program). Don’t know why, but Firefox Warning is no longer appearing. :? : so users better install NoScript! extension.

Regarding your Captcha, it is very unsecure, since it allows OCR attack (chars are easily recognisable by a program).

]]> від: Boriel http://websecurity.com.ua/1588/#comment-87840 Sat, 22 Dec 2007 21:54:18 +0000 http://websecurity.com.ua/1588/#comment-87840 Hi! As said here: http://www.boriel.com/2006/05/27/bye-bye-captcha/ Captcha! is bit unmaintaned (I will fix this today, anyway). This hack won't work for Firefox (at less on 2.0.0.11) users, as javascript submits will display a warning message and an "Ok" button. But maybe in IE, they will do. :!: Hi! As said here: http://www.boriel.com/2006/05/27/bye-bye-captcha/ Captcha! is bit unmaintaned (I will fix this today, anyway). This hack won’t work for Firefox (at less on 2.0.0.11) users, as javascript submits will display a warning message and an “Ok” button. But maybe in IE, they will do. :!:

]]>