161–169 of 169 posts
I've seen one where it was always: "What is 2+4?"
Earlier quoted context omitted.
I was not talking about retyping the new password, but about requesting the old password before you can change it. The reason you do this is because even if you theoretically could hijack the session, you still can not hijack the account. But the priority seems a bit off when the password is more important then the account, which makes you believe that the people behind the sites only added the extra password validat…
Its to prevent people from being able to change your password if you step away from the computer for a few minutes to take a piss.
...or isn't it?
I don't see the problem. It's easy for people to see the word and type it in. Lightweight but not insignificant measure of protection. Compared with no protection, this form will receive less spam. There is no impact on the user except a better user experience. The corporate developer may have looked at the spam levels and decided that a basic measure would be fine considering the exposure to the page, or other reaso…
Why even bother adding the background image if you are just trying to stop dumb spam crawlers.
People must prove they are people. And spam crawlers don't need to prove anything. Turing wouldn't have liked his name associated with a test that humans fail often (needing to refresh the captcha), and a test that machines must fail in order to be effective.
Earlier quoted context omitted.
That's an interesting approach, but I guess as soon as it would become mainstream, the bots would adapt without many problems.
Depending on how the fields were hidden, they may need to render and reflow html, css and dom changes by javascript. None of which is all that difficult for a full size browser, but it may be prohibitively resource intensive for a high-volume spam bot.
Every expense was spared to give the impression that no expense had been spared. It's a credit report site; they want you to think they are secure.