我经常听到有关验证码的讨论，它的用途是什么？
我经常听到有关验证码的讨论，它的用途是什么？ 我的意思是基本上它只是生成随机字符串的位图图像并从用户那里验证它。 还不止这些吗？ 构建这样一个系统我们面临什么问题？我曾使用 .NET 开发过这样一个系统，它非常通用，还有其他我们必须记住的事情吗？
I hear all this buzz about Captcha a lot, what is it for?
I mean basically it's just generating bitmap images of a random string and validating it from a user.
Is it more than that?
Any problems that we face building such a system? I had worked on such a system using .NET and it was quite general, are there any other things that we have to keep in mind as well?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
问题在于古老的“我可以建造能够承受任何炮弹的装甲”与“我可以建造可以穿透任何装甲的炮弹”之间的冲突。
诀窍是制作对人类来说容易但对机器人来说难以阅读的验证码。
目前，坏人现在使用“群体智慧”攻击，通过重定向到其他网站并要求人类解释它们来破解验证码，以便他们可以使用这些答案进入目标网站。
就我个人而言，我觉得它们很麻烦，但如果它能降低滥用的程度，我愿意与它们一起生活。
The problem is that of the age old "I can build armor that withstands any shell" vs "I can build shells that pierce any armor" conflict.
The trick is to make captchas which are easy for humans and hard for bot to read.
Currently the bad guys now use "wisdom of the crowd" attacks to break captcha's by redirecting to other sites and asking humans to interprete them, so they can use those answers to get into their target site.
Personally I find them a nuisance, but if it keeps the level of misuse down, I am willing to live with them.
它被称为CAPTCHA，代表“完全自动化的公共图灵测试来区分计算机和人类”。真是一口啊！
它的用途是什么——嗯，是为了区分计算机和人类。例如，想象一下论坛软件。如果没有验证码，大多数论坛都会淹没在垃圾邮件中，因为垃圾邮件发送者可以使用自动化工具（“机器人”）同时发布大量消息。验证码是一种垃圾邮件过滤器。
It’s called CAPTCHA and it stands for “Completely Automated Public Turing test to tell Computers and Humans Apart”. It’s a mouthful!
What is it for — well, it’s to tell computers and humans apart. Imagine a forum software, for example. Without a captcha, most forums will drown in spam because spammers can use automated tools (“bots”) to post massive numbers of messages at once. The captcha is a kind of spam filter.