Questions tagged [captcha]

CAPTCHA is a program that protects websites against bots by generating and grading tests that humans can pass but current computer programs cannot.

9 questions
86
votes
7 answers

How can robots beat CAPTCHAs?

I have a website e-mail form. I use a custom CAPTCHA to prevent spam from robots. Despite this, I still get spam. Why? How do robots beat the CAPTCHA? Do they use some kind of advanced OCR or just get the solution from where it is stored? How…
totymedli
  • 1,299
  • 1
  • 13
  • 27
16
votes
8 answers

Are captchas worth the decreased usability?

When is it useful to use a captcha? When is it an unnecessary hindrance? Is a captcha just a quick fix for the lazy/unexperienced programmer, or are they really the best way to prevent spam and bots?
Atomix
  • 679
  • 3
  • 11
8
votes
9 answers

A new CAPTCHA using sentences?

I was just thinking about how recaptcha is getting harder when I thought about another posible solution. Images won't last forever so we will need something else some day - like human logic or emotion. Google and others are trying grouping images by…
Xeoncross
  • 1,213
  • 1
  • 11
  • 24
7
votes
3 answers

Best practices to avoid fake profiles?

When offering to create a profile (for example, login+pwd) for a web service, what are the best practices one should implement to avoid mass spamming/creation of fake profiles? I am thinking about email confirmation, captchas, etc... any other ideas…
3
votes
4 answers

Idea for CAPTCHA

CAPTCHAs have a lot of downsides, accessibility and user friendliness are two things that are often sacrificed. I've thought of an idea that might work really well, has this ever been attempted before? Prerequisites The prerequisite for it is that…
Tom
  • 681
  • 6
  • 15
2
votes
2 answers

Are sessions secure for captcha on failed login?

I don't like writing open-ended questions but I have a quick security question. I have a PHP login script that shows a CAPTCHA on the third failed login attempts. The way I'm counting failed logins is by using session data. Is this secure? Is there…
Brooke.
  • 157
  • 6
1
vote
1 answer

How can a CAPTCHA be integrated into a community?

I'm planning on making a simple discussion feature for a web framework I'm building. It should: allow anonymous posting block spam bots The obvious answer is to use a generic "captcha" plugin, however I think there are some creative…
Edward Tanguay
  • 309
  • 2
  • 8
1
vote
1 answer

JS Captcha in contact form validation to avoid spam bots

I am looking for opinions about how bulletproof could his captcha system be to avoid spam in a contact form. The form submit goes through ajax. So I generate 2 random numbers with javascript. The sum of those numbers must be correct. On form…
kosmosan
  • 123
  • 6
1
vote
2 answers

How is it possible that facial recognition software can work, but a reCAPTCHA can't be solved by a computer

If software can be built to recognize faces and match those faces to names, then how is that CAPTCHA works? Recognizing letters seems a lot easier than matching faces.
Ryan
  • 1,439
  • 2
  • 10
  • 10