New answers tagged

0

Instead of trying to fine-tune the behavior of CAPTCHAs on a form, consider that most users hate CAPTCHAs and you should look instead to solve the problem you are really trying to solve. Perhaps you can eliminate the CAPTCHAs entirely, which would make your users much happier than slightly less confusing CAPTCHA behavior. CAPTCHAs are primarily used to ...


2

I don't see how there could possibly be a security risk or other vulnerability as a result of implementing the feature you suggest. The reason is simple: since there is no security risk or other vulnerability to not having a CAPTCHA in the first place (with the possible exception of a DOS attack if the action the CAPTCHA protects is a slow action), any ...


2

I don't see how this could work. The first step is to have the user rate comments as constructive or unconstructive. At this stage, there is no way of knowing if the user is a bot or not - remember, the premise is that ordinary CAPTCHAS are broken. (And if there was a way to distinguish bots from human here, then what would be the point of this whole ...


3

Captchas usually work fine for the most part, only in some instances it's hard to guess the captcha correctly. As an example: Google uses pictures of house numbers. They gathered those pictures with their streetview cars and use the user input to get better results for navigation. (same goes for re-Captcha, which uses parts of books to recognize vague ...


3

Remember the actual objective of spam bots. Their purpose is to advertise a website, either directly or indirectly through search engine spamming. A constructive contribution to a website which also includes an advertisement for some product might get annoying. But annoying posts would get downvoted by other users and thus fail the test, so the bots need to ...



Top 50 recent answers are included