Seth,
What Dean says is pretty valid and is often talked of. There has been more
success with putting distorted math equations into captcha images.
This is typically a first line of defense though. It is recommended that
you monitor the data submitted through the forms and then filter the data
submission for scripting attacks and a black list of keywords. The black
list approach can be very tedious and becomes adaptive over time.
Wordpress uses Akismet for spam protection and it works pretty well. (
http://akismet.com/)
Teddy
On 12/21/06, Dean H. Saxe <[EMAIL PROTECTED]> wrote:
details on breaking CAPTCHA:
http://www.webappsec.org/lists/websecurity/archive/2005-08/msg00058.html
This will give you details on the good/bad/ugly of CAPTCHA:
http://sam.zoy.org/pwntcha/
Is it completely busted? Nope. But its not going to stop all
spammers and other automated systems.
-dhs
Dean H. Saxe, CISSP, CEH
[EMAIL PROTECTED]
"To announce that there must be no criticism of the president, or
that we are to stand by the president right or wrong, is not only
unpatriotic and servile, but is morally treasonable to the American
public."
-- Theodore Roosevelt
On Dec 21, 2006, at 4:11 PM, Tepfer, Seth wrote:
> I know this has come up previously, but I don't know what to search
> for.
>
> I need to generate an image that has that skewed text on it, so
> that spammers can't read it, to validate the form submission is a
> human.
>
> 1) What do you CALL that thing?
>
> 2) Do you know if there is a tag or function out there somewhere
> (hopefully free) that auto generates it?
>
> Thanks
>
> seth
>
>
> -------------------------------------------------------------
> To unsubscribe from this list, manage your profile @
> http://www.acfug.org?fa=login.edituserform
>
> For more info, see http://www.acfug.org/mailinglists
> Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> List hosted by FusionLink
> -------------------------------------------------------------
-------------------------------------------------------------
To unsubscribe from this list, manage your profile @
http://www.acfug.org?falogin.edituserform
For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-------------------------------------------------------------
--
<cf_payne />
Adobe Certified ColdFusion MX 7 Developer
Atlanta CFUG (ACFUG): http://www.acfug.org
-------------------------------------------------------------
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform
For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-------------------------------------------------------------
