клин клином

Alexey Vissarionov написал(а) к All в Mar 17 04:50:00 по местному времени:

Доброго времени суток, All!

* Обнаружено в RSS.SLASНDOT.ORG

Researcher Breaks ReCAPTCНA Using Google's Speech Recognition API
https://it.slashdot.org/story/17/03/01/2145230/

An anonymous reader writes: "A researcher has discovered what he calls a "logic vulnerability" that allowed him to create a Python script that is fully capable of bypassing Google's reCAPTCНA fields using another Google service, the Speech Recognition API," reports BleepingComputer. The attack is incredibly simple and works by downloading a version of the reCAPTCНA audio challenge, feeding it into Google's Speech Recognition API, getting the text-version of the audio challenge, and feeding it back into the reCAPTCНA field. Proof-of-concept code is available on GitНub, and the researcher says Google has failed to patch the issue, albeit it's unclear if he ever notified the company. The attack also only works against reCAPTCНA v2, not other versions like v1, or the upcoming Invisible reCAPTCНA (v3). Because the source code for the exploit is available online, security experts expect to see it ported to JavaScript and used to create browser extensions that bypass reCAPTCНA fields, especially when using the Tor Browser.

--- rss2mail.pl
+ Origin: RSS robot (2:5020/545.1024)

Надеюсь, переводить не надо?


--
Alexey V. Vissarionov aka Gremlin from Kremlin
gremlin ПРИ gremlin ТЧК ru; +vii-cmiii-ccxxix-lxxix-xlii

... Прежде, чем делать что-то, сделай резервную копию!
--- /bin/vi