Wow, the India Post's official website has a captcha while tracking a package.

The funny thing is, the captcha is in a text format, meaning it can be copied (yes, ctrl + c works) and be pasted in the text field.

COMPLETELY DEFEATS THE WHOLE PURPOSE.

cheers to its developer.

Not really. Still stops "dumb" scrapers.

I have seen another captcha where you need enter the result of a sum. The funny thing is that the validation is done in the browser itself. One can easily reverse engineer it and find the correct answer and defeat the CAPTCHA.
I've even ranted about it in the past.

https://devrant.com/rants/1759159/...

@BlueSky the India post also has this kind of a captcha, and yes the validation is done in the browser itself.

Again, cheers to its developer.

Well, while it is definitely not as good and secure as it could be, this method at least stops most of the normal bots trying to spam the website.

@AndiLeni What you mean by normal bots. It is trivial to make a bot which can bypass this.

@BlueSky of course it is easy to create a bot to manipulate this target in particular.
But most of the spambots are more generic and are applied to a very wide range of websites. the more the better.
So a spambot which was not created for this specific case would not be successfull in its task.