Dear computer hackers: GOTCHA!

A new test to prevent hacking could replace CAPTCHAs

Topics: MIT Technology Review, captcha, gotcha, Hacking, Computers, Engineering, protection, robots, ,

Dear computer hackers: GOTCHA! (Credit: Maksym Dykha/Shutterstock)

Distorted pieces of text are often used to prevent computers getting unauthorized access to websites. Now a team of computer scientists think they can do better with inkblot tests instead.

Most people who use the Internet will be familiar with the Completely Automated Public Turing test to tell Computers and Humans Apart, otherwise known as CAPTCHA. These are the distorted pieces of texts that you are regularly asked to identify to prove that you are human. Their goal is to prevent bots from accessing websites, to prevent them leaving spam, for example.

CAPTCHAs have been hugely successful since they were introduced in 2000 by Luis von Ahn and pals at Carnegie Mellon University in Pittsburgh. But in the cat and mouse game of computer security, it was always inevitable that the bad guys would spend significant resources attempting to break the system.

And indeed exactly that has happened. Since there can be only a limited number of distorted texts stored on a given hard disk, it is possible to employ people to crack them in sweatshop conditions. Another possibility is to repost the CAPTCHAs on another website for unsuspecting visitors who complete them thinking they are accessing a legitimate site. Instead, the solutions are used in real time to enter another site illegitimately.

So computer scientists have been thinking hard about how to improve this mechanism to once again thwart hackers. Today, Jeremiah Blocki and pals at Carnegie Mellon University say they’ve come up with a way to do it based on inkblot patterns.

The new approach is straightforward and relies on a user answering a number of questions when he or she first signs up for access to a website. It begins by generating a set of simple inkblot pictures by randomly positioning different colored ink spots in a small area of the screen.

As part of the signup process, the user is asked to write a short phrase that describes each of these pictures.

When the users return to access the site with a password, they are also shown the inkblot patterns and the set phrases that describe them. Their task is then to allocate the correct phrase to each pattern.

They call their new test a GOTCHA (Generating panOptic Turing Tests to Tell Computers and Humans Apart).

Blocki and pals say this ought to foil an automated attack. “We argue that the adversary who wishes to mount a cost effective offline attack needs to obtain constant feedback from a human,” they say.



That’s because only a human can consistently recognize the patterns and thereby link to the phrases on display — at least that’s their hypothesis.

That’s an interesting idea. The human ability to recognize patterns far outstrips anything that computers can do and matching this with the user’s interpretation of random patterns is clever. There is plenty of evidence that pattern recognition is easier than remembering passwords.

But it does raise the question of how well people will remember their original interpretation of an inkblot. This may well be highly dependent on their state of mind at the time which in turn which could be influenced by all kinds of local and temporary variables.

To test this, Blocki and co. tested the idea using Amazon’s Mechanical Turk. They invited 70 Turkers to view a number of inkblot patterns and write identifying phrases, paying them $1 to complete the task. Then, 10 days later, they asked the same Turkers to re-associate their phrases with the inkblot patterns, again for a payment of $1.

The results are not entirely comforting. “Seventeen of our participants correctly matched all ten of their labels, and 69% of participants matched at least 5 out of ten labels correctly,” they say.

Blocki and co. say that the data indicates that a significant fraction of the population could use GOTCHAs. “It also means that the use of our GOTCHA would have to be voluntary so that users who have difficulty won’t get locked out of their accounts,” they add sheepishly.

It’s possible that the tests with Turkers was not representative the way ordinary people would use GOTCHAs. For example, the Turkers may have rushed through the first phase of the tests to earn their money more quickly.

And it may also be possible to improve the recognition rate, perhaps by allowing users to reject images that they find confusing.

That looks to be a clear and necessary improvement if GOTCHAs are to become a common feature of internet security.

Ref:  arxiv.org/abs/1310.1137 : GOTCHA Password Hackers!

View “Will GOTCHAs Replace CAPTCHAs?” and find more technology news from MIT Technology Review.

© 2013 MIT Technology Review

More Related Stories

Featured Slide Shows

  • Share on Twitter
  • Share on Facebook
  • 1 of 14
  • Close
  • Fullscreen
  • Thumbnails

    13 of "Girls'" most cringeworthy sex scenes

    Hannah and Adam, "Pilot"

    One of our first exposures to uncomfortable “Girls” sex comes early, in the pilot episode, when Hannah and Adam “get feisty” (a phrase Hannah hates) on the couch. The pair is about to go at it doggy-style when Adam nearly inserts his penis in “the wrong hole,” and after Hannah corrects him, she awkwardly explains her lack of desire to have anal sex in too many words. “Hey, let’s play the quiet game,” Adam says, thrusting. And so the romance begins.

    13 of "Girls'" most cringeworthy sex scenes

    Marnie and Elijah, "It's About Time"

    In an act of “betrayal” that messes up each of their relationships with Hannah, Marnie and Elijah open Season 2 with some more couch sex, which is almost unbearable to watch. Elijah, who is trying to explore the “hetero side” of his bisexuality, can’t maintain his erection, and the entire affair ends in very uncomfortable silence.

    13 of "Girls'" most cringeworthy sex scenes

    Marnie and Charlie, "Vagina Panic"

    Poor Charlie. While he and Marnie have their fair share of uncomfortable sex over the course of their relationship, one of the saddest moments (aside from Marnie breaking up with him during intercourse) is when Marnie encourages him to penetrate her from behind so she doesn’t have to look at him. “This feels so good,” Charlie says. “We have to go slow.” Poor sucker.

    13 of "Girls'" most cringeworthy sex scenes

    Shoshanna and camp friend Matt, "Hannah's Diary"

    We’d be remiss not to mention Shoshanna’s effort to lose her virginity to an old camp friend, who tells her how “weird” it is that he “loves to eat pussy” moments before she admits she’s never “done it” before. At least it paves the way for the uncomfortable sex we later get to watch her have with Ray?

    13 of "Girls'" most cringeworthy sex scenes

    Hannah and Adam, "Hard Being Easy"

    On the heels of trying (unsuccessfully) to determine the status of her early relationship with Adam, Hannah walks by her future boyfriend’s bedroom to find him masturbating alone, in one of the strangest scenes of the first season. As Adam jerks off and refuses to let Hannah participate beyond telling him how much she likes watching, we see some serious (and odd) character development ... which ends with Hannah taking a hundred-dollar bill from Adam’s wallet, for cab fare and pizza (as well as her services).

    13 of "Girls'" most cringeworthy sex scenes

    Marnie and Booth Jonathan, "Bad Friend"

    Oh, Booth Jonathan -- the little man who “knows how to do things.” After he turns Marnie on enough to make her masturbate in the bathroom at the gallery where she works, Booth finally seals the deal in a mortifying and nearly painful to watch sex scene that tells us pretty much everything we need to know about how much Marnie is willing to fake it.

    13 of "Girls'" most cringeworthy sex scenes

    Tad and Loreen, "The Return"

    The only sex scene in the series not to feature one of the main characters, Hannah’s parents’ showertime anniversary celebration is easily one of the most cringe-worthy moments of the show’s first season. Even Hannah’s mother, Loreen, observes how embarrassing the situation is, which ends with her husband, Tad, slipping out of the shower and falling naked and unconscious on the bathroom floor.

    13 of "Girls'" most cringeworthy sex scenes

    Hannah and the pharmacist, "The Return"

    Tad and Loreen aren’t the only ones to get some during Hannah’s first season trip home to Michigan. The show’s protagonist finds herself in bed with a former high school classmate, who doesn’t exactly enjoy it when Hannah puts one of her fingers near his anus. “I’m tight like a baby, right?” Hannah asks at one point. Time to press pause.

    13 of "Girls'" most cringeworthy sex scenes

    Hannah and Adam, "Role-Play"

    While it’s not quite a full-on, all-out sex scene, Hannah and Adam’s attempt at role play in Season 3 is certainly an intimate encounter to behold (or not). Hannah dons a blond wig and gets a little too into her role, giving a melodramatic performance that ends with a passerby punching Adam in the face. So there’s that.

    13 of "Girls'" most cringeworthy sex scenes

    Shoshanna and Ray, "Together"

    As Shoshanna and Ray near the end of their relationship, we can see their sexual chemistry getting worse and worse. It’s no more evident than when Ray is penetrating a clothed and visibly horrified Shoshanna from behind, who ends the encounter by asking if her partner will just “get out of me.”

    13 of "Girls'" most cringeworthy sex scenes

    Hannah and Frank, "Video Games"

    Hannah, Jessa’s 19-year-old stepbrother, a graveyard and too much chatting. Need we say more about how uncomfortable this sex is to watch?

    13 of "Girls'" most cringeworthy sex scenes

    Marnie and Desi, "Iowa"

    Who gets her butt motorboated? Is this a real thing? Aside from the questionable logistics and reality of Marnie and Desi’s analingus scene, there’s also the awkward moment when Marnie confuses her partner’s declaration of love for licking her butthole with love for her. Oh, Marnie.

    13 of "Girls'" most cringeworthy sex scenes

    Hannah and Adam, "Vagina Panic"

    There is too much in this scene to dissect: fantasies of an 11-year-old girl with a Cabbage Patch lunchbox, excessive references to that little girl as a “slut” and Adam ripping off a condom to ejaculate on Hannah’s chest. No wonder it ends with Hannah saying she almost came.

  • Recent Slide Shows

Comments

Loading Comments...