{"action":"created","issue":{"url":"https://api.github.com/repos/ecthros/uncaptcha2/issues/7","repository_url":"https://api.github.com/repos/ecthros/uncaptcha2","labels_url":"https://api.github.com/repos/ecthros/uncaptcha2/issues/7/labels{/name}","comments_url":"https://api.github.com/repos/ecthros/uncaptcha2/issues/7/comments","events_url":"https://api.github.com/repos/ecthros/uncaptcha2/issues/7/events","html_url":"https://github.com/ecthros/uncaptcha2/issues/7","id":396174721,"node_id":"MDU6SXNzdWUzOTYxNzQ3MjE=","number":7,"title":"Buster is a browser extension that uses this method to solve CAPTCHAs","user":{"login":"dessant","id":7513068,"node_id":"MDQ6VXNlcjc1MTMwNjg=","avatar_url":"https://avatars0.githubusercontent.com/u/7513068?v=4","gravatar_id":"","url":"https://api.github.com/users/dessant","html_url":"https://github.com/dessant","followers_url":"https://api.github.com/users/dessant/followers","following_url":"https://api.github.com/users/dessant/following{/other_user}","gists_url":"https://api.github.com/users/dessant/gists{/gist_id}","starred_url":"https://api.github.com/users/dessant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dessant/subscriptions","organizations_url":"https://api.github.com/users/dessant/orgs","repos_url":"https://api.github.com/users/dessant/repos","events_url":"https://api.github.com/users/dessant/events{/privacy}","received_events_url":"https://api.github.com/users/dessant/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2019-01-05T15:36:38Z","updated_at":"2019-01-05T18:58:08Z","closed_at":null,"author_association":"NONE","body":"I've made a browser extension last month that makes use of the same method.\r\n\r\nhttps://github.com/dessant/buster\r\n\r\nBuster is an accessibility tool that helps people solve difficult captchas. It works quite well, and you can select between several speech recognition services.\r\n\r\nWhat was your experience regarding the quality of these services? I've found the video model of the Google Cloud Speech API to be the most accurate. Do you know any speech recognition services that have a free API like Wit.ai? I'd like to have more choices besides Google and Wit.ai, without requiring users to sign up for different services themselves.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/ecthros/uncaptcha2/issues/comments/451681817","html_url":"https://github.com/ecthros/uncaptcha2/issues/7#issuecomment-451681817","issue_url":"https://api.github.com/repos/ecthros/uncaptcha2/issues/7","id":451681817,"node_id":"MDEyOklzc3VlQ29tbWVudDQ1MTY4MTgxNw==","user":{"login":"ecthros","id":14065974,"node_id":"MDQ6VXNlcjE0MDY1OTc0","avatar_url":"https://avatars0.githubusercontent.com/u/14065974?v=4","gravatar_id":"","url":"https://api.github.com/users/ecthros","html_url":"https://github.com/ecthros","followers_url":"https://api.github.com/users/ecthros/followers","following_url":"https://api.github.com/users/ecthros/following{/other_user}","gists_url":"https://api.github.com/users/ecthros/gists{/gist_id}","starred_url":"https://api.github.com/users/ecthros/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ecthros/subscriptions","organizations_url":"https://api.github.com/users/ecthros/orgs","repos_url":"https://api.github.com/users/ecthros/repos","events_url":"https://api.github.com/users/ecthros/events{/privacy}","received_events_url":"https://api.github.com/users/ecthros/received_events","type":"User","site_admin":false},"created_at":"2019-01-05T18:58:08Z","updated_at":"2019-01-05T18:58:08Z","author_association":"OWNER","body":"Hi @dessant! Thanks for letting us know about your extension. We're publishing this on Github partly because of our responsible disclosure timeline, and we wanted people to know that it's possible to carry out an attack so easily.\r\n\r\nYou might have better luck trying the Sphinx project (https://cmusphinx.github.io/), although I've always found Microsoft's and Google's Speech to Text to be more effective against ReCaptcha. Something that's interesting though is you might not need a Speech to Text engine at all.\r\n\r\nI've run unCaptcha2 thousands of times, and over time, I noticed that there were a few repeat captchas. I saved them all off, and found that they repeated captchas many times - I found some were repeated as many as 13 times. I'd estimate that the number of captchas ReCaptcha can actually choose from is only around 500-1000, which makes it very easy for someone to attack. If you're interested, I can send the captchas along to you - I was hoping to keep them off this repository until Google fixes the system. Shoot me an email at ghughey@umd.edu if you'd like it.\r\n\r\nThanks again!"}}
{"actor":{"display_login":"ecthros"}}