Zbr wrote at 2007-07-07 22:37:

This is a test comment.

Andrey wrote at 2007-07-08 00:16:

Wow, nice minimalistic captcha.

Natalie wrote at 2007-07-08 01:19:

That's the matter :-)

It's clear now, why you haven't gone to LUXOR on 'Transformers' tonight. It's rather worthy reason. :)

Anonymous wrote at 2007-07-08 05:14:

This is one of my favorite blogs ... keep it coming :-)

grange wrote at 2007-07-08 11:37:

yo man, finally! and you made me run bc(1) (:

Paolo wrote at 2007-07-09 15:52:

Very nice, I'm used to read your post via RSS and now I comment when I feel the need. Well done.

Paul wrote at 2007-07-11 05:18:

Cool. But perhaps you want to put the captcha directly above the comment form instead of above all the comments?

Zbr wrote at 2007-07-11 13:06:

Yep, I've put captcha down after comments.

Thanks everyone for reading this rambling thoughts.

valyala wrote at 2007-07-12 19:11:

grange, here is a simple script developed specially for you:

javascript:void(document.forms[0].rcap.value=eval(document.getElementsByTagName('font')[0].innerHTML))

Just put it into browser's address bar and you won't need to run bc.

valyala wrote at 2007-07-12 19:26:

And here is yet another helpful script url, which even doesn't solve captcha:

javascript:f=document.forms[0];f.rhash.value='b6d767d2f8ed5d21a44b0e5886680cb9';void(f.rcap.value=22)

Zbr wrote at 2007-07-12 19:56:

So what? Even with zero scripting knowledge this is trivial to solve. Now captcha is time bound, so second script will not work after one minute. I can also generate graphics, add javascript run-time secret generation, which would be included into hash and so on. Attacker can not win in this game.