http://www.jpcert.or.jp/wr/2008/wr080201.html

http://www.gi-ev.de/fachbereiche/sicherheit/fg/sidar/imf/imf2008/index.html

http://network-security-research.blogspot.com/2008/01/yahoo-captcha-is-broken.html