Shoutbox

[split] captcha useless - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: [split] captcha useless (/showthread.php?tid=96346)

RE: Anyway to backup contacts? WLM 2011 by Hank on 01-15-2011 at 10:16 PM

quote:
Originally posted by CookieRevised
They wont remove it.

The captcha is to prevent spammers from adding massive loads of emails at a time.

Captcha is useless Cooks, spammers can get passed it. http://www.allspammedup.com/2010/01/google-recaptcha-cracked/
RE: [split] captcha useless by Mike on 01-15-2011 at 11:34 PM

Last time I checked, Microsoft didn't use reCAPTCHA. They may have switched since then, but I doubt it.


RE: [split] captcha useless by Hank on 01-15-2011 at 11:52 PM

depends what form of Captcha you use i guess. but at the end of the day spammers can still get through it.


RE: [split] captcha useless by Mike on 01-16-2011 at 12:12 AM

Everyone should start using Asirra: http://research.microsoft.com/en-us/um/redmond/projects/asirra/


RE: [split] captcha useless by Hank on 01-16-2011 at 12:24 AM

i got a Feeling Fedoraforum uses that, but Mike spammers still get in.  only way to stop them, and thats to Moderate peoples First posts . if you knew how much a spammer can Make , you'd have pretty good bots  to bypass that crap


RE: [split] captcha useless by Mike on 01-16-2011 at 12:38 AM

Just checked, FedoraForum does not use exactly that.


RE: [split] captcha useless by Hank on 01-16-2011 at 12:49 AM

well no but again i aint seen any other sites using Microsofts asirra


RE: [split] captcha useless by MeEtc on 01-16-2011 at 12:50 AM

Since this is a messenger-based service, send the registrantion link in a conversation message. This is what I do for registration for one of my plus scripts, and works great. Its not overly popular, but I've also had zero spam and zero fake registrations.


RE: [split] captcha useless by CookieRevised on 01-17-2011 at 05:54 AM

quote:
Originally posted by Alias
depends what form of Captcha you use i guess. but at the end of the day spammers can still get through it.
It's not about preventing 100% of spammers. Nothing can (without sacrificing a great deal of user friendlyness) and nobody claims it will do it.

It's about discouraging most of the human ones and making it harder for automated systems to bypass it. And quite frankly, even the simpliest forms of captcha will discourage many of the human spammers. Bottom line is that using a captcha is not useless at all and it does prevent some human and automated spammers from abusing a service.
RE: [split] captcha useless by Hank on 01-17-2011 at 06:05 AM

they'll abuse it anyhow they can, spamming earns money to that spammer.  hell you could buy a New PC just from spamming


RE: [split] captcha useless by CookieRevised on 01-17-2011 at 06:17 AM

A smart spammer, or one who needs to earn a living from it, will avoid captcha's as much as possible, even if they are breakable.

Because captcha's also create an extra overhead, which means loss of time. Which means that they could make more money spamming an unprotected service than a protected one. Because for even a simple captcha, it still takes extra resources and time to bypass it (being done automated or not)...

But no, ofcourse captcha's aren't 100% suitable for everything (eg: once sign up on a forum, you can usually make as many posts as you want), but for certain things it is effective (eg: password guessing - MS uses a captcha after x failed attempts, making brute forcing them a whole lot harder and more time and resource consuming).


RE: [split] captcha useless by Hank on 01-17-2011 at 06:22 AM

im sure with plenty of spammers making New and much better bot scripts to spam they'll spare that time, if it means making money  et the end of the day they'll do it.


RE: [split] captcha useless by CookieRevised on 01-17-2011 at 06:27 AM

Yes, but again, they are mostly used to discourage the vast majority of spammers, not the 1% of pro-spammers.

Most spam does not come from 'expert' spammers, but from people like you and me.... well, not exactly like you and me, but I mean the casual user or casual would-be spammer, people like script-kiddies: spam-kiddies so to speak...

Which is also the reason why MS uses captcha when you add x amount of contacts which was the whole point of that original thread and the remark done by the OP and why I said what I said.

It's the very same discussion with encryption. Many encryption methods are breakable in one way or the other. Take MD5 for example. Yet it is still the most used hashing method today. And does that protect like 99% of the stuff it needs to protect. Yes it does. Not because it is failproof, but because it discourages 99% of (would-be) hackers/crackers.

The point is that it is not about 100% protection. Claiming it is, or discussing it like that by saying all captcha's are useless so let's not use them at all, is besides the point, or at least getting things out-of-context  imo.


RE: [split] captcha useless by Hank on 01-17-2011 at 06:49 AM

Cooks, have you ever been a Moderator of a Forum that has had to ban spammers etc? my guess is no, so this is all theory of yours.  there are a hell of a lot of "pro-spammers" out there  the only script kiddies i can think of are some that write scripts from this forum and maybe others.  i know a certain someone on this forum that can bypass Bans, i wont name who that is,

you talk about MD5sum, Mozilla had a recent problem with that. infact if you have a look in wikipedia you can see how easy it is to  encrypt and decrypt MD5sum.  or was that sha256?  i'll have to have a look, im sure i posted about it on the fedoraforum.

http://www.neowin.net/news/mozilla-inadvertently-...00-users-passwords


http://forums.fedoraforum.org/showpost.php?p=1430818&postcount=4

that stevea knows his stuff since he is a kernel hacker


RE: RE: [split] captcha useless by CookieRevised on 01-17-2011 at 07:50 AM

quote:
Originally posted by Alias
Cooks, have you ever been a Moderator of a Forum that has had to ban spammers etc? my guess is no, so this is all theory of yours.
your guess is wrong. I have been, and still am.... And no, this isn't just theory, research has been done about it and papers published. And in practice I have seen it from happening myself, that is: a simple, easy breakable, captcha beeing used to stop all spamming (thus far) just because it discouraged the spammers.

Second, you're focussing on forums only. Captcha's are used for more than just registering on forums. More infact, the original thread you replied on (and got split into this one) didn't had anything to do with registering or even forums at all.

And see one of my previous posts where I acknowledged that once a spammer has passed the captcha to register on a forum he usually can spam all he wants (until modded), but that is only a small portion of captcha usage. Focussing on that only and coming to the conclusion that captcha's in general are useless is a leap too far.

quote:
Originally posted by Alias
you talk about MD5sum, Mozilla had a recent problem with that. infact if you have a look in wikipedia you can see how easy it is to  encrypt and decrypt MD5sum.  or was that sha256?  i'll have to have a look, im sure i posted about it on the fedoraforum.

http://www.neowin.net/news/mozilla-inadvertently-...00-users-passwords

http://forums.fedoraforum.org/showpost.php?p=1430818&postcount=4

that stevea knows his stuff since he is a kernel hacker
Yes, but what is the point of that in regards to what I've said?
RE: [split] captcha useless by Hank on 01-17-2011 at 08:50 AM

compiz.org check that out, they have a twiitter thing there, it gets spammed yet they  do stuff all about it.  but in general twitter can be spammed to. so can facebook accounts.  the fact is Cooks, spammers know how to use Proxies well enough to create account after account to make new spam .  its like a chat i used to use called voodoochat.com , im banned from that but nore do i care to get back in it cause there losers in it. nore am i despewrate enough to get back in it, however i know someone that can bypass the owners bans.