[tbb-bugs] #18361 [Tor Browser]: Issues with corporate censorship and mass surveillance

[Tor Bug Tracker & Wiki]

#18361: Issues with corporate censorship and mass surveillance
------------------------------------------+--------------------------
 Reporter:  ioerror                       |          Owner:  tbb-team
     Type:  enhancement                   |         Status:  new
 Priority:  High                          |      Milestone:
Component:  Tor Browser                   |        Version:
 Severity:  Critical                      |     Resolution:
 Keywords:  security, privacy, anonymity  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:  None
------------------------------------------+--------------------------
Changes (by saint):

 * cc: saint (added)


Comment:

 Replying to [comment:173 polyclef]:
 > Cloudflare is using recaptcha.  Recaptcha has been broken for years.
 >
 > http://bitland.net/captcha.pdf describes how to defeat captchas in
 general and a prior version of recaptcha in particular.
 >
 > Many challenges are overly simple and can be broken with existing tools
 that require no further modification.


 In the thread someone mentions that it's possible to derive the answer for
 the old-style street number captchas using tesseract [1]. Interestingly,
 there is a version of tesseract in javascript [1]. This is probably not
 especially useful for the current "select all boxes that contain one pixel
 of street sign" Recaptcha system, but if there were a way to trigger the
 old behavior, these techniques could be used together.

 [1] http://tesseract.projectnaptha.com/

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18361#comment:202>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online