At s clients

I can see a use of this type of attack for getting around captchas. If I host a web page that gives you access to download free mp3s, and all you have to do is complete a captcha to get it, what if I get that captcha from another site?

See the rest here:
SSH Captchas and Man In The Middle Attacks | rootninja