Captcha in mobile application and web application

Question

I have read some web site that captcha is not needed in mobile application.

I have some doubts.

Why captcha is needed in a web application and not needed in a mobile that access the same application?

Indication

BTW: You read this somewhere. Did the source not give a hint as to why? – Univocal

links please i also need ?? – Lancewood

Answer 1

First off, it is relatively simple to create a bot to crawl the web (including web applications) and submit forms. This is where a classic CAPTCHA solution comes in.

It is comparatively harder to automate data submission within native apps. This is due to the fact that you cannot just write an automated script to discover <form> elements within the source code and then mimic form submission. Also, you'll need to (purchase and) install the application (on a physical device or in a simulator).

As a side note: web applications for mobile devices can do a lot to make the CAPTCHA process simpler. Different versions of slider CAPTCHA's come to mind.

Univocal

That's incorrect. It's much easier to do it for a mobile app as they usually talk to a REST API (or some other well-defined API), you don't even need a scraper. – Enloe

@AlexB a little old now but still relevant, can you not send a post the same way one would use a restful api? I don't see how it's easier... A salted hash of the form information would prevent the risk of rest replay. – Charcot

@Tohid I'm still looking for one! – Enloe