KittenAuth Goes Prime Time

By Oli on Wednesday, 12th April 2006. More information. Comments.

Firstly the response to KittenAuth has been IMMENSE! The kind people (look to the right now) that have donated have helped me an amazing amount by allowing me to fend off the evil bandwidth bill that will be heading to me at the end of the month. Just to sum up some of the craziness that's

Firstly the response to KittenAuth has been IMMENSE! The kind people (look to the right now) that have donated have helped me an amazing amount by allowing me to fend off the evil bandwidth bill that will be heading to me at the end of the month.

Just to sum up some of the craziness that's been going on surrounding KittenAuth:
- We started off with Digg who gave us 1197 "diggs" (to date)
- In the first 48 hours this site got 4.2million hits (requests not visitors)
- I gave an interview with Mike Magee of The Inquirer and that's been published.
- It's been on the "popular links" section of b3ta twice now
- 3 days after publishing we had 335 Google results for "kittenauth"
- Today there are "about" 18000!
- I'm sorting out links with KittenWar and PuppyWar for source images for everyone.
- We even got a mention by the great Bruce Schneier

Crazy! Just crazy! Ok so the plan from here is to take this idea, improve it with the suggestions and re-make the result in a form that everyone can use. I'm currently laying the groundwork for a PHP version that will suit most people if they want to implement it in their blogs. I'll then backtrack and rehash my aspnet version.

Everything is starting up on KittenAuth.com (well my cat is guarding it for the time being) and I've made a buggy PHP version of KittenAuth that you can have a look at and test. It already implements some of the suggestions and should be a lot harder to hack - but currently just as easy to fluke.

I'll be the first to admit that I hate PHP. I could rant on all day why I believe its a kindergarten language but that's not the point of this.

Because of my vast ineptitude with PHP, I'm asking for help with this project. If you would like to help, please use your real email when you reply to this and state that you would like to help. Nobody apart from me will see your email address. I'll then email you back in a few days with details of my subversion hosting. And we can launch things off with a good discussion on what we're trying to do.

A public version should be available shortly after that.

One final note: Your donations really do make a big difference to me, however small (apart from the $0.11 one that Paypal demolished in Paypal-charges), so if you do have a spare dollar sitting in a paypal account that you're not going to use, please consider giving it to the kittens =) They'll love you forever. Thanks again to the kind people that have donated already and thank you in advance if you're going to donate.

Update: The Register just covered us: Miaow to kitten-based authentication

Grav

Written by Oli on Wednesday, 12 April 2006. Tagged with kittenauth, news, digg. Read 2268 times. If you liked it, please give it a digg.

1 to 10 of 14 < 1 2 >
#1 /* 3 years, 3 months ago */
Need some assistance with hosting? I've got about 400G of transfer a month spare these days... That would give you over 10G of traffic/day of room...

Anyhow... Something to think about anyway.
#2 — Author comment /* 3 years, 3 months ago */
Thinks are ok on the bandwidth front now I've been able to move people off to the KittenAuth.com server. The article content has to stay on ASPNET hosting though =)

Thanks for the offer, though.
#3 /* 3 years, 3 months ago */
Hmmm - sample page linked from FP doesn't have three kitten pics on it for me. (the one below is fine)
#4 /* 3 years, 3 months ago */
never mind - probably a "load issue." Problem seems to be intermittent.
#5 /* 3 years, 3 months ago */
Like the idea. The PHP demo never has three kittens on it for me, though...
#6 /* 3 years, 3 months ago */
Just want to say how brilliantly simple and logical KittenAuth is, I can't see spam bots ever finding a way to cicumvent KittenAuth without tapping into some backend exploit of the particular system using it (which wouldn't be a fault of KittenAuth anyway). Only suggestion I'd have is to be able to use any sort of pictures (I'm not a big cat person), which I would say makes the project more a PictureAuth rather than KittenAuth. Anyway, I'd love to see this tool ported to some open source CMS like Drupal. Keep up the great work...
#7 /* 3 years, 3 months ago */
The idea is interesting but as previously stated, I'm not sure that
would be so difficult for a computer vision software to recognize
images of kittens. Recent techniques in automatic image
classification/object recognition community are quite robust to
orientation, scale, and illumination changes as well as occlusion and
cluttered backgrounds. Papers in recent conferences like CVPR 2005 or
ICCV 2005 show nice systems doing the automatic classification of horses,
cows, dogs, ... with quite good recognition rates.

So I could imagine a system that:

- first collect manually from Google/Flickr a lot of images of kittens
and images of non-kittens. eventually, generates randomly cropped/rotated
versions of these with image processing techniques. there are also recent
scientific papers that automatically filters Google results.
- learn an automatic image classification model (with for example
the PiXiT software by Marée et al. http://www.montefiore.ulg.ac.be/~maree/pixit.html)
- interface it with a web proxy (like RabbIT
http://www.khelekore.org/rabbit/) that sends the image to the
classification model software and gets back if it is a kitten or not
with a certain score. this score could help to pick automatically images
of kittens.
- this could be useful by blind people too ;)

(this is a copy of my message on schneier.com blog because i just read you prefer to read comments on your website)
#8 /* 3 years, 3 months ago */
I had only seen this CAPTCHA mentioned one other place and didn't realize there was so much discussion about it, but I was able to defeat this in around an hour over the weekend. With exams and all I hadn't had a chance to post anything about it, but you can read about it now:

http://www.cryptosystem.org/archives/2006/04/bad-kitty/

Based on what you have said about the next version so far, this attack would still work against it.
#9 /* 3 years, 3 months ago */
Hi,

I really like your idea. Based on Bruce Schneier's readers' comments, I've come up with this alternate version that should be more difficult to defeat.
Of course, it's nowhere near as cute as kittens all the way ;)

It's at http://www.nextbbs.com/do_topic_id_573_post_3927

-Chris.
#10 /* 3 years, 3 months ago */
I'll help. Sounds like fun.
1 to 10 of 14 < 1 2 >

Don't just sit there like a lemon! Reply!

Got something to say? Now's the time to share it with the author and everybody else that reads this posting! Lemons need not apply.

edtBOX - xHTML: yes - bbcode:no
Home | Advertise | About | Contact | Legal © Oli Warner 2001—2007 Proud 9rules member