141–150 of 169 posts
Earlier quoted context omitted.
I still loathe reCAPTCHA more than any other captcha out there. I've given up hopes of logging in on many occasions simply because of it. Looks like it's designed for not to be deciphered either by humans or computers.
I totally agree, see this recaptcha which is upside down, how are we supposed to read it http://postimg.org/image/7xgovvhij/
One of my buddies worked in the accounting department at our state government. He needed to get a bunch of documents from another agency (like hundreds every month) to process claims. Well this other agency requires everyone to go through their website and download each document one at a time. They said it was to prevent abuse. For some reason they couldn't just send a batch of them to us, even a fellow state agency.…
Isn't that one ambitious DA away from being a felony these days?
One of my buddies worked in the accounting department at our state government. He needed to get a bunch of documents from another agency (like hundreds every month) to process claims. Well this other agency requires everyone to go through their website and download each document one at a time. They said it was to prevent abuse. For some reason they couldn't just send a batch of them to us, even a fellow state agency.…
Isn't that one ambitious DA away from being a felony these days?
Earlier quoted context omitted.
It's not an uncommon strategy (eg: fill up a comment form with hidden but obviously named form fields) and since people won't be filling in those hidden fields then bots will have revealed themselves. This isn't by any means a complete solution however it does catch 90% of drive-by spam.
That's an interesting approach, but I guess as soon as it would become mainstream, the bots would adapt without many problems.
None of which is all that difficult for a full size browser, but it may be prohibitively resource intensive for a high-volume spam bot.
Earlier quoted context omitted.
It doesn't matter though. This isn't just a 'stupid mistake' made by a dev rushed for time, this is literally 'not a captcha.' It's not. Not even a poorly designed and incompetently executed captcha... it just isn't even one at all. It doesn't take long to find out that best practices exist for captchas, what they are, what the typical vulnerabilities are, and then pick one from the top shelf of existing solutions on…
With hindsight, sure. But that's not looking at the whole picture. The problem is not how much effort to stop this one mistake, the problem is how much effort to stop every potential mistake of similar importance to this . Or worse, perhaps they did get this from a shelf of existing solutions.
I'd like to believe that was impossible but of course given how irrational it would be to go through the trouble of making this, it's probably likely. Though I don't know why you'd necessarily skip over recaptcha and securimage and how far down the list you'd have to go to get to this sort of thing... but ZeljkoS has a couple more examples like it on his site. So apparently it's a captcha anti-pattern.
This should give you a really good idea what it's like trying to get a DUNS number (a requirement for doing contract work with the government as a business). Their entire business is basically the front-end to a scam. Somebody pulled a network contact to wedge their company in between businesses and the federal government. You are guaranteed to get scammy-sounding emails and phone calls from D&B after signing up. Ema…
The startup crowd doesn't see it much, but D&B is a critical component of how non-technical medium to large businesses vet each other and prevent fraud. They are effectively the Better Business Bureau for B2B.
This should give you a really good idea what it's like trying to get a DUNS number (a requirement for doing contract work with the government as a business). Their entire business is basically the front-end to a scam. Somebody pulled a network contact to wedge their company in between businesses and the federal government. You are guaranteed to get scammy-sounding emails and phone calls from D&B after signing up. Ema…
This is a cpf (something like social security number in brazil) validator from this site: http://via7solucoes.com.br/curriculos/cadastro.asp