CAPTCHAs are used to prevent automated software from
performing actions which degrade the quality of service of a given
system and/or to protect the service from attackers trying to hack login credentials using brute-force attacks.Until now, I never had to test CAPTCHAs but thinking about it, testing CAPTCHAs automatically is impossible if testability isn't considered at all. Testability here could mean for the roboter to offer a backdoor which contains the correct clear-text. Of course such information should only be available to the script and de-activated when deployed live. Sometimes, even I struggle to identify the clear-text of the CAPTCHA, and I am NOT a roboter...

No comments:
Post a Comment