unCaptcha: a low-resource defeat of recaptcha's audio challenge
Kevin W. Bock, Daven Patel, George Hughey, Dave Levin · 2017
CAPTCHAs are the Internet's first line of defense against automated account creation and service abuse. Google's reCaptcha, one of the most popular captcha systems, is currently used by hundreds of thousands of websites to protect against automated attackers by testing whether a user is truly human. This paper presents unCaptcha, an automated system that can solve re-Captcha's most difficult auditory challenges with high success rate. We evaluate unCaptcha using over 450 re-Captcha challenges from live websites, and show that it can solve them with 85.15% accuracy in 5.42 seconds, on average. unCaptcha combines free, public, online speech-to-text engines with a novel phonetic mapping technique, demonstrating that it requires minimal resources to mount a large-scale successful attack on the reCaptcha system.