CAPTCHA is a program that protects websites against bots by generating and grading tests that humans can pass but current computer programs cannot.
Questions tagged [captcha]
9 questions
86
votes
7 answers
How can robots beat CAPTCHAs?
I have a website e-mail form. I use a custom CAPTCHA to prevent spam from robots. Despite this, I still get spam.
Why? How do robots beat the CAPTCHA? Do they use some kind of advanced OCR or just get the solution from where it is stored?
How…

totymedli
- 1,299
- 1
- 13
- 27
16
votes
8 answers
Are captchas worth the decreased usability?
When is it useful to use a captcha? When is it an unnecessary hindrance? Is a captcha just a quick fix for the lazy/unexperienced programmer, or are they really the best way to prevent spam and bots?

Atomix
- 679
- 3
- 11
8
votes
9 answers
A new CAPTCHA using sentences?
I was just thinking about how recaptcha is getting harder when I thought about another posible solution. Images won't last forever so we will need something else some day - like human logic or emotion. Google and others are trying grouping images by…

Xeoncross
- 1,213
- 1
- 11
- 24
7
votes
3 answers
Best practices to avoid fake profiles?
When offering to create a profile (for example, login+pwd) for a web service, what are the best practices one should implement to avoid mass spamming/creation of fake profiles? I am thinking about email confirmation, captchas, etc... any other ideas…

Jérôme Verstrynge
- 736
- 7
- 18
3
votes
4 answers
Idea for CAPTCHA
CAPTCHAs have a lot of downsides, accessibility and user friendliness are two things that are often sacrificed.
I've thought of an idea that might work really well, has this ever been attempted before?
Prerequisites
The prerequisite for it is that…

Tom
- 681
- 6
- 15
2
votes
2 answers
Are sessions secure for captcha on failed login?
I don't like writing open-ended questions but I have a quick security question. I have a PHP login script that shows a CAPTCHA on the third failed login attempts. The way I'm counting failed logins is by using session data. Is this secure? Is there…

Brooke.
- 157
- 6
1
vote
1 answer
How can a CAPTCHA be integrated into a community?
I'm planning on making a simple discussion feature for a web framework I'm building.
It should:
allow anonymous posting
block spam bots
The obvious answer is to use a generic "captcha" plugin, however I think there are some creative…

Edward Tanguay
- 309
- 2
- 8
1
vote
1 answer
JS Captcha in contact form validation to avoid spam bots
I am looking for opinions about how bulletproof could his captcha system be to avoid spam in a contact form.
The form submit goes through ajax.
So I generate 2 random numbers with javascript.
The sum of those numbers must be correct.
On form…

kosmosan
- 123
- 6
1
vote
2 answers
How is it possible that facial recognition software can work, but a reCAPTCHA can't be solved by a computer
If software can be built to recognize faces and match those faces to names, then how is that CAPTCHA works? Recognizing letters seems a lot easier than matching faces.

Ryan
- 1,439
- 2
- 10
- 10