Hacker News Reader

"What does this mean for bots? Now bots can use an OCR tool to solve the information or require somebody to solve the image initially, post which, the bot can retain the cookies and continue scraping!"

They did not tried if this works though. I mean the team that implemented the new Google captcha won't be that dumb. They would have known this as a flaw..

View on HN

Sadly the idea that some set of people won't have been dumb enough to make a fundamental security mistake is almost never useful. Security is too complex, people are too prone to overlooking aspects other than what they're working on, and the likelihood of a group of developers or researchers spotting a flaw in their own work doesn't scale even close to linearly. It's a bit like presuming no-one needs prose copyedited because they'll pay attention - you'll overlook some mistakes in your own writing because you see what you know must be there, not what you actually typed.

Assuming people have written secure code because they're the kind of people who wouldn't make a mistake is a sucker bet.

Reply on news.ycombinator.com