Re: CAPTCHA

That sort of thing tends to work well as a one-off solution to the
problem (for a single site) but fails when widely adopted.  The people
who write the spam bots can't be bothered to modify their scripts for a
small number of sites but can easily adapt their scripts to defeat a
widely-used test.  

There are open source CAPTCHA tools that offer fairly strong protection
but they tend to be either compute-intensive or hardware dependent (A
package I was thinking about using for the TriJUG Jobs app had a
dependency on the graphics card on the server machine.)  I wound up
writing my own not particularly strong test.  It's lightweight and easy
to deploy and even a very strong captcha test can be defeated by a
script that recruits a human to solve it on a different site (usually
to access the naughty bits on a porn site).

Lee  
--- "Richard O. Hammer" <[email protected]> wrote:

> Karen Collins wrote:
> > You know, I have a friend who was getting lots of spam on the
> > Ruby-on-Rails site he made for his wedding. He has a solution that
> I
> > thought was interesting.
> > 
> > He is registering javascript events on his inputs now. (Checking
> for
> > onblur I think) The scripts that were spamming him don't trigger
> them.
> > If no event is triggered, the submission is ignored.
> > 
> > What do you think of his solution?
> 
> I guess this solution will work, unless and until spammers figure it
> out 
> and adjust their scripts accordingly.
> 
> Rich Hammer
> 
> _______________________________________________
> Juglist mailing list
> [email protected]
> http://trijug.org/mailman/listinfo/juglist_trijug.org
> 



      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ