Skip site navigation (1) Skip section navigation (2)

Re: human validation on post comments

From: David Fetter <david(at)fetter(dot)org>
To: Dave Page <dpage(at)vale-housing(dot)co(dot)uk>
Cc: PostgreSQL WWW <pgsql-www(at)postgresql(dot)org>
Subject: Re: human validation on post comments
Date: 2006-03-21 16:45:14
Message-ID: (view raw, whole thread or download thread mbox)
Lists: pgsql-www
On Tue, Mar 21, 2006 at 08:12:05AM -0000, Dave Page wrote:
> > -----Original Message-----
> > From: pgsql-www-owner(at)postgresql(dot)org 
> > [mailto:pgsql-www-owner(at)postgresql(dot)org] On Behalf Of David Fetter
> > Sent: 21 March 2006 05:43
> > To: PostgreSQL WWW
> > Subject: Re: [pgsql-www] human validation on post comments
> > 
> > Actually, they've already got one, and here's how it works:
> > 
> > 1.  Put up a free porn site.
> > 2.  Present somebody else's capcha image as an entry.
> > 3.  Let the person see the porn if they've correctly cracked the
> >     capcha.
> > 4.  Spam site.
> > 
> > The sad part of this one is that they don't have to crack any
> > single capcha system.  Instead, they've cracked the entire capcha
> > process.
> Grrr, where's my baseball bat?
> Actually though that shouldn't be too much of a problem as long as
> the images timeout after a few minutes- and we still have all the
> normal moderation in place.

The porn thing works just fine no matter what the timeout is, as the
spam is queued up already and the capcha gets presented as soon as
it's generated.  The porn surfer will generally not dally when
presented with the capcha.

But apart from its ineffectiveness on spammers, as others have
mentioned, capcha excludes blind people. :(

David Fetter <david(at)fetter(dot)org>
phone: +1 415 235 3778        AIM: dfetter666
                              Skype: davidfetter

Remember to vote!

In response to

pgsql-www by date

Next:From: Dave PageDate: 2006-03-21 16:54:24
Subject: Re: human validation on post comments
Previous:From: Jim NasbyDate: 2006-03-21 14:50:01
Subject: FW: Undeliverable:Re: [PERFORM] Auto performance tuning?

Privacy Policy | About PostgreSQL
Copyright © 1996-2017 The PostgreSQL Global Development Group