6 messages in com.googlegroups.google-picasa-data-apiRe: How to deliberately cause a captc...
FromSent OnAttachments
Henrik28 Feb 2008 12:00 
Cameron Hinkle28 Feb 2008 12:06 
Ryan Boyd (Google)28 Feb 2008 12:09 
Cameron Hinkle28 Feb 2008 12:11 
Ryan Boyd (Google)28 Feb 2008 12:53 
Henrik29 Feb 2008 03:50 
Subject:Re: How to deliberately cause a captcha challenge?
From:Ryan Boyd (Google) (api.@google.com)
Date:02/28/2008 12:53:50 PM
List:com.googlegroups.google-picasa-data-api

On Thu, Feb 28, 2008 at 12:11 PM, Cameron Hinkle < gold@gmail.com> wrote:

A CAPTCHA challenge can also be issued after a valid password, right?

If you've already had a CAPTCHA challenge issued, then new requests (even with valid passwords), will cause the CAPTCHA to be re-issued.

While it's technically possible to have a CAPTCHA request issued on your first auth request with a valid password, it's not as likely.

Cheers, -Ryan

On Thu, Feb 28, 2008 at 12:09 PM, Ryan Boyd (Google) <api.@google.com> wrote:

Hi, There is an algorithm used to determine whether CAPTCHAs should be sent-- this algorithm is not public, as CAPTCHAs are intended to prevent abuse.

However, I've had success doing 30-50 bad passwords in a row generating CAPTCHAs. Note that the passwords you try each time should be different, so it looks like you're trying to attack an account.

Does this work for you?

Cheers, -Ryan

On Thu, Feb 28, 2008 at 12:00 PM, Henrik <henr@gmail.com> wrote:

Hi,

I'm trying to validate that my client's handling of a captcha challenge from the authentication API is correct, however I am failing to produce a captcha situation, thus failing to test the code to handle it! So, my question is: When is a captcha challenge actually issued? I've tried logging in with an incorrect password up to 20 times in quick succession, but still I only get the normal "BadAuthentication" error, and an attempt to login with the correct password following this will always succeed without any challenge.

Any tips? BR /Henrik

-- http://www.cameronhinkle.com/

"As systems developers, we have selected ourselves into the world of cool, calming, rational thought. Either our code compiles, or it doesn't. The compiler is never happy for us, nor mad at us. Perhaps this is why we tend to apply logic as our main device for resolving disputes." -Peopleware, 2nd Edition

"Babies...before we're done here...y'all be wearing gold-plated diapers." -Rock Legend Bruce Dickinson