Flaw In FunCaptcha System???

[krishnapramod]

I thought Funcaptcha is the best option against bots, but today I found a major flaw in Funcaptcha. In a normal Funcaptcha a user has to solve two or three images (moving the woman to center or rotating it to correct position) to claim. An hour ago I visited a faucet with Funcaptcha, I accidentally clicked the claim button just after solving one image and the claim was credited. I tried this on a couple of more faucets and the same result.

So basically you just need to solve 1 Funcaptcha image to claim

I visited a faucet with advanced Funcaptcha option (6 images to solve), but on this faucet I was not able to claim after solving one image which is good.

I believe Funcaptcha does prevent bot abuse, but solving just one image might make it a bit vulnerable.

Opting for advanced option might be annoying to users. Solving three images is more than enough, but Funcaptcha developers have to make sure the captcha is not validated till three images are confirmed

[FunCaptchaMatt]

I thought Funcaptcha is the best option against bots, but today I found a major flaw in Funcaptcha. In a normal Funcaptcha a user has to solve two or three images (moving the woman to center or rotating it to correct position) to claim. An hour ago I visited a faucet with Funcaptcha, I accidentally clicked the claim button just after solving one image and the claim was credited. I tried this on a couple of more faucets and the same result.

So basically you just need to solve 1 Funcaptcha image to claim

I visited a faucet with advanced Funcaptcha option (6 images to solve), but on this faucet I was not able to claim after solving one image which is good.

I believe Funcaptcha does prevent bot abuse, but solving just one image might make it a bit vulnerable.

Opting for advanced option might be annoying to users. Solving three images is more than enough, but Funcaptcha developers have to make sure the captcha is not validated till three images are confirmed

Hi krishnapramod,

The short answer is that FunCaptcha can vary from 1 to 5 challenges depending on the settings chosen by the website (the faucet) and the past history of the user. So, sometimes you have to pick the woman once, sometimes three times, sometimes five times before you can claim. When you've done enough challenges, the footer under FunCaptcha tells you that you're done. More is explained here:
http://support.funcaptcha.com/customer/en/portal/articles/1838700-why-do-i-sometimes-need-to-do-more-or-fewer-game-challenges-

A site can pick the "always enhanced" setting in their FunCaptcha dashboard to make sure the number of challenges never falls below 3. You also can contact us for even more advanced settings if you think you see bots getting through. We give a wide range of settings which at one extreme are always very easy for all users to complete fast, and at the other extreme are the very strongest protection against bots. We adjust it automatically for a site, but the site can request a different setting.

What you experienced was FC's setting in which you can solve just one image to pass. You must have at one point seen FunCaptcha with three challenges, then solved it, which improved your user history enough for FC to give you just one challenge the next time.

To experiment with this, come to https://www.funcaptcha.com/demo/ and try getting FC right a few times in a row, then wrong a few times in a row. You will see how the number of challenges goes as low as one or as high as five.

Last point: if FunCaptcha asks you to rotate a LOGO the right way up, instead of an animal, or to pick "your favourite", it does not matter how you answer. This is done on purpose for a few obscure reasons and never is counted as one of the challenges.

I hope this helps, and thanks for starting the discussion.

Matt
FunCaptcha creator

[krishnapramod]

I thought Funcaptcha is the best option against bots, but today I found a major flaw in Funcaptcha. In a normal Funcaptcha a user has to solve two or three images (moving the woman to center or rotating it to correct position) to claim. An hour ago I visited a faucet with Funcaptcha, I accidentally clicked the claim button just after solving one image and the claim was credited. I tried this on a couple of more faucets and the same result.

So basically you just need to solve 1 Funcaptcha image to claim

I visited a faucet with advanced Funcaptcha option (6 images to solve), but on this faucet I was not able to claim after solving one image which is good.

I believe Funcaptcha does prevent bot abuse, but solving just one image might make it a bit vulnerable.

Opting for advanced option might be annoying to users. Solving three images is more than enough, but Funcaptcha developers have to make sure the captcha is not validated till three images are confirmed

What you experienced was FC's setting in which you can solve just one image to pass. You must have at one point seen FunCaptcha with three challenges, then solved it, which improved your user history enough for FC to give you just one challenge the next time.

Thanks a lot for the explanation  ...All doubts cleared

[FunCaptchaMatt]

I thought Funcaptcha is the best option against bots, but today I found a major flaw in Funcaptcha. In a normal Funcaptcha a user has to solve two or three images (moving the woman to center or rotating it to correct position) to claim. An hour ago I visited a faucet with Funcaptcha, I accidentally clicked the claim button just after solving one image and the claim was credited. I tried this on a couple of more faucets and the same result.

So basically you just need to solve 1 Funcaptcha image to claim

I visited a faucet with advanced Funcaptcha option (6 images to solve), but on this faucet I was not able to claim after solving one image which is good.

I believe Funcaptcha does prevent bot abuse, but solving just one image might make it a bit vulnerable.

Opting for advanced option might be annoying to users. Solving three images is more than enough, but Funcaptcha developers have to make sure the captcha is not validated till three images are confirmed

What you experienced was FC's setting in which you can solve just one image to pass. You must have at one point seen FunCaptcha with three challenges, then solved it, which improved your user history enough for FC to give you just one challenge the next time.

Thanks a lot for the explanation  ...All doubts cleared

Always glad to talk about it 

[lelouch90]

Now i know why also with google captcha sometimes i just don't have to solve them because i just click on them and they are already solved or why sometimes i never can solve them at the first try.

The problem is that with google seems the opposite of your explanation because the first case usually happens when i'm away from home and so after some hours i have "free solved captchas" while if i use a lot of faucets in a short period of time i get the second case where i can't solve the captcha at the first try also if solution is right.

[Lucius]

On some faucet this captcha appears with a message "patent pending" and to work I must click audio button and come around to activate the visual captcha,why is this happening?

[FunCaptcha_James]

On some faucet this captcha appears with a message "patent pending" and to work I must click audio button and come around to activate the visual captcha,why is this happening?

Hi, I'm James from the FC team. It sounds like the FunCaptcha's you're seeing aren't loading fully. Which domains are you trying to use FunCaptcha on? Can you also send a screenshot so I can see what it looks like for you? It would probably be best if you sent them to support@funcaptcha.com.

Cheers!

[BTCforJoe]

On some faucet this captcha appears with a message "patent pending" and to work I must click audio button and come around to activate the visual captcha,why is this happening?

Hi, I'm James from the FC team. It sounds like the FunCaptcha's you're seeing aren't loading fully. Which domains are you trying to use FunCaptcha on? Can you also send a screenshot so I can see what it looks like for you? It would probably be best if you sent them to support@funcaptcha.com.

Cheers!

Hey James, if it helps any, I've only ever experienced the problem that Lucius is talking about on Firefox. Safari and Chrome don't seem to have this problem. And when I encounter this problem, it's usually when the faucet owner chooses to display the captcha in a popup window. Hope this information helps.

[FunCaptcha_James]

On some faucet this captcha appears with a message "patent pending" and to work I must click audio button and come around to activate the visual captcha,why is this happening?

Hi, I'm James from the FC team. It sounds like the FunCaptcha's you're seeing aren't loading fully. Which domains are you trying to use FunCaptcha on? Can you also send a screenshot so I can see what it looks like for you? It would probably be best if you sent them to support@funcaptcha.com.

Cheers!

Hey James, if it helps any, I've only ever experienced the problem that Lucius is talking about on Firefox. Safari and Chrome don't seem to have this problem. And when I encounter this problem, it's usually when the faucet owner chooses to display the captcha in a popup window. Hope this information helps.

Ah I see Joe, thanks for the heads up. I've forwarded this to our dev team and will keep an eye out. That combined with any further details from Lucius should help isolate any potential issues.

[Gifted]

some times it says refresh the page to make sure im not a spammer. When i refrsh it just says the same thing.. i come back in a few hours its back to normal. Any reason for this??

[FunCaptcha_James]

some times it says refresh the page to make sure im not a spammer. When i refrsh it just says the same thing.. i come back in a few hours its back to normal. Any reason for this??

Interesting! We don't actually have a verification process that requires you to refresh a page - we ask you to complete mini-games. Are there certain websites where this happens frequently?

[Gifted]

yes on my own faucet at http://bitcoinfaucetexchange.com so even after i refresh it wont let me do the verficataion either


The next time it happens ill take a screen shot

[FunCaptcha_James]

Great, thanks - sorry you're having issues. Are you able to send it to support@funcaptcha.com, just so I can be sure I receive it? Thanks.

[Lucius]

On some faucet this captcha appears with a message "patent pending" and to work I must click audio button and come around to activate the visual captcha,why is this happening?

Hi, I'm James from the FC team. It sounds like the FunCaptcha's you're seeing aren't loading fully. Which domains are you trying to use FunCaptcha on? Can you also send a screenshot so I can see what it looks like for you? It would probably be best if you sent them to support@funcaptcha.com.

Cheers!

Hello,yes I am using Firefox,latest version so that BTCforJoe is right about that problem.
I'm having this problem on several faucets,I make a list of problematic and send it to support.
It looks like this:

[Gifted]

Here is the error i was talking about http://bitcoinfaucetrelay.com/wp-content/uploads/2015/10/FUNCAPTHA-ERROR.jpg

When i refresh it just shows the same thing...It seems it happens when i stay on the page to long without doing the captcha or reloading the page without doing the captcha but i'm not sure what's making this happen and that is a big issue for my page.

I want people on my page as long as they want . If they want to do the faucet and collect they can do it at anytime not just right away.

[Gifted]

On some faucet this captcha appears with a message "patent pending" and to work I must click audio button and come around to activate the visual captcha,why is this happening?

Hi, I'm James from the FC team. It sounds like the FunCaptcha's you're seeing aren't loading fully. Which domains are you trying to use FunCaptcha on? Can you also send a screenshot so I can see what it looks like for you? It would probably be best if you sent them to support@funcaptcha.com.

Cheers!

Hello,yes I am using Firefox,latest version so that BTCforJoe is right about that problem.
I'm having this problem on several faucets,I make a list of problematic and send it to support.
It looks like this:

 @faucet owners using funcaptcha, take the code out of the header and put this in the footer and it should clear up your problem

<script src="https://funcaptcha.com/fc/api/" async defer></script>

Sometimes java lags the load for funcaptcha and holds up the load.

[examplens]

i have interesting situation with faucet and funcaptcha. I  have more solved captcha than started.
how it is  possible?

[tennozer]

some times it says refresh the page to make sure im not a spammer. When i refrsh it just says the same thing.. i come back in a few hours its back to normal. Any reason for this??

This is not all about fun captcha. I think this is about faucet which you tried to use. The owner of faucet try to do every claim hard and in addition try to avoid give your rewards too.