security - CAPTCHA Alternatives: What can spambots do? -
after deciding not use captcha site, added [input=range] register page in place of submit button must slid maximum value submit. spambot able bypass measure? if so, there other alternatives?
spambots in general can beat requires submitting value server can determined examining code. key require value human can recognize bot not.
for example, slide idea (not bad way), rather having them slide maximum (which easy bot imitate), show them 3 pictures , ask them slide 1 "makes them cold." show picture of arctic wasteland, sahara desert, , furnace (this example of course). spambot resistant controls.
the things you'll have watch out predictability , repeatability. if ask same question, or if have few different questions, easy attackers enumerate possible results attack script , beat control.
the limit creativity , requirement difficult code, easy humans.
Comments
Post a Comment