Captcha No More

Since I wrote about my sweary run-in with Captchas - those squiggly things at the bottom of forms that can only easily be read after too much coffee/beer - a week or so ago, I've been paying more attention to this technology.

And with good reason, too. My friend Michelle, who brought to light the original howler at the credit union forwarded me an article in today's guardian.co.uk, reporting that if the automated technology can't crack a captcha, then there are alternatives,

Another option is to pay. Spammers have employed large teams of temporary staff to solve Captchas, effectively "rooms of people", usually in a third world country, sitting at a computer and solving Captchas.

reCaptcha swearing The article goes on to suggest that OpenID or Microsoft's CardSpace might be viable alternatives. Surely, though, they'll suffer from exactly the same kind of verification problems. If a potential spammer controls an email address and can by-pass Captchas on a mass scale, the only defence will be to analyse behavioural patterns to handle the problem.

300 registrations in 10 minutes from one IP address. Up to no good methinks. As Matt Mullenweg from Wordpress suggests, if the spammers are using 'humans' the moderators will need to follow suit,

"Ultimately Captchas are useless for spam because they're designed to tell you if someone is 'human' or not, but not whether something is spam or not. Just because something came from a real human being doesn't mean it isn't spam, which is why content-based solutions like Akismet are the only long-term solution to the spam problem."

So, keep your eyes peeled on those blog comments and registration forms. Here's hoping for some hefty vigilance at the webmail providers, or we're all doomed!

28 August 2008 by Sam Michel
Sam Michel

Sam Michel is the founder of Chinwag and blogs here for work, and more randomly at Toodlepip. He runs Chinwag Jobs, Digital Mission and tends to focus on murky place where technology, community and marketing collide. You'll find him on twitter @toodlepip.

«
The Guardian buys Madeleine McCann
»
Digital Mission to NYC in map form

Comments

Caught ya...

Submitted by Benjamin on Thu, 28/08/2008 - 2:56pm.
An opportunity for a block-list type service, which is essentially what Automattic provide with Akismet... Interestingly, as most blogs have their own little community, auto-approving comments from people who have already commented works well (again, another a WordPress feature). I think Matt & co are on the right lines :)

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <p> <br>
  • Web page addresses and e-mail addresses turn into links automatically.
  • HTML tags will be transformed to conform to HTML standards.
  • Each email address will be obfuscated in a human readable fashion or (if JavaScript is enabled) replaced with a spamproof clickable link.

More information about formatting options

Type the characters you see in this picture. (verify using audio)
Type the characters you see in the picture above; if you can't read them, submit the form and a new image will be generated. Not case sensitive.