Text-based Captchas have been widely deployed across the Internet to defend against undesirable or malicious bot programs. Many attacks have been proposed; these fine prior art advanced the scientific understanding of Captcha robustness, but most of them have a limited applicability. In this paper, we report a simple, low-cost but powerful attack that effectively breaks a wide range of text Captchas with distinct design features, including those deployed by Google, Microsoft, Yahoo!, Amazon and other Internet giants. For all the schemes, our attack achieved a success rate ranging from 5% to 77%, and achieved an average speed of solving a puzzle in less than 15 seconds on a standard desktop computer (with a 3.3GHz Intel Core i3 CPU and 2 GB RAM). This is to date the simplest generic attack on text Captchas. Our attack is based on Log-Gabor filters; a famed application of Gabor filters in computer security is John Daugman's iris recognition algorithm. Our work is the first to apply Gabor filters for breaking Captchas.

CAPTCHA is now a standard security technology for differentiating between computers and humans, and the most widely deployed schemes are text-based. While many text schemes have been broken, hollow CAPTCHAs have emerged as one of the latest designs, and they have been deployed by major companies such as Yahoo!, Tencent, Sina, China Mobile and Baidu. A main feature of such schemes is to use contour lines to form connected hollow characters with the aim of improving security and usability simultaneously, as it is hard for standard techniques to segment and recognize such connected characters, which are however easy to human eyes. In this paper, we provide the first analysis of hollow CAPTCHAs' robustness. We show that with a simple but novel attack, we can successfully break a whole family of hollow CAPTCHAs, including those deployed by all the major companies. While our attack casts serious doubt on the viability of current designs, we offer lessons and guidelines for designing better hollow CAPTCHAs.

Men who have sex with men (MSM) have recently accounted for an alarmingly increasing proportion of HIV-1 transmission in China. In order to investigate the immune status as a result of CRF01_AE infection and CXCR4 co-receptor usage in a young Shanghai-based HIV-1-infected MSM population in Shanghai, 364 HIV-1-infected MSM with average age of 22.7 years old, newly diagnosed between Jan 2009 and Jul 2013 were analyzed for CD4+T cell count, subtyping using phylogenetic analysis, and viral co-receptor tropism using Geno2pheno and webPSSM in combination. A total of 276 individuals were identified as recently infected. Subtype assignment were as follows: 176 (63.8%) CRF01_AE, 77 (27.9%) CRF07_BC, and 23 (8.3%) subtype B. Besides, 24 second-generation recombinant strains were identified. A lower CD4+T cell count at baseline survey was observed among CRF01_AE strain-infected individuals, compared to those who were infected with CRF07_BC (P<0.01). The frequency of baseline CD4+T cell count <200 was higher and the frequency of CD4 T counts >500 lower in CRF01_AE infection than CRF07_BC infection. It is worth noting that 32.4%–40.9% of CRF01_AE strain-infected individuals were predicted to carry CXCR4-tropic viruses whereas none of CRF07_BC and subtype B were found to be as CXCR4-tropic viruses (P<0.001). As could be expected CXCR4 tropism was associated with lower CD4 T counts. This study revealed that CRF01_AE strains with high frequency of CXCR4 tropism are prevailing in the young MSM population in China and could potentially cause a severe loss of CD4+T cell count and rapid disease progression. A regular surveillance of HIV-1 subtypes, CD4+T cell count and viral co-receptor usage would be greatly beneficial for effectively monitoring disease progression, improvement of antiretroviral therapy strategy and prompt intervention of transmission.

The HIV-1 epidemic among men who have sex with men (MSM) has been spreading throughout China. Shanghai, a central gathering place for MSM, is facing a continuously increasing incidence of HIV-1 infection. In order to better understand the dynamics of HIV-1 diversity and its influence on patient’s immune status at baseline on diagnosis, 1265 newly HIV-1-infected MSM collected from January 2009 to December 2013 in Shanghai were retrospectively analyzed for genetic subtyping, CD4+T cell counts, and viral loads. HIV-1 phylogenetic analysis revealed a broad viral diversity including CRF01_AE (62.13%), CRF07_BC (24.51%), subtype B (8.06%), CRF55_01B (3.24%), CER67_01B (0.95%), CRF68_01B (0.4%), CRF08_BC (0.08%) and CRF59_01B (0.08%). Twenty-four unique recombination forms (URFs) (1.98%) were identified as well. Bayesian inference analysis indicated that the introduction of CRF01_AE strain (1997) was earlier than CRF07_BC strain (2001) into MSM population in Shanghai based on the time of the most recent common ancestor (tMRCA). Three epidemic clusters and five sub-clusters were found in CRF01_AE. Significantly lower CD4+T cell count was found in individuals infected with CRF01_AE than in those infected with CRF07_BC infection (P<0.01), whereas viral load was significantly higher those infected with CRF01_AE than with CRF07_BC (P<0.01). In addition, the patients with >45 years of age were found to have lower CD4+T cell counts and higher viral loads than the patients with <25 years of age (P<0.05). This study reveals the presence of HIV-1 subtype diversity in Shanghai and its remarkable influence on clinical outcome. A real-time surveillance of HIV-1 viral diversity and phylodynamics of epidemic cluster, patient’s baseline CD4+T cell count and viral load would be of great value to monitoring of disease progression, intervention for transmission, improvement of antiretroviral therapy strategy and design of vaccines.