Re: [Templates] Captchas

2009-02-18 Thread Darren Chamberlain
On Tue, Feb 17, 2009 at 19:02, Kelly Thompson wrote: > So if I don't use captchas (having tons of trouble with all of them, due to > dependencies, and being on a shared host) what is a good "text" method? I like Brian McCallister's spam-prevention technique; see it at, e.g., http://kasparov.skife

Re: [Templates] Captchas

2009-02-18 Thread Johan Vromans
Andy Wardley writes: > > Enter text in this field if you are a spammer > > a. Do not hide from the html. The bots are smarter than that. Hide from the css. b. Give the field an attractive name, e.g. 'age' or 'occupation'. No bot can withstand filling in a field named li

Re: [Templates] Captchas

2009-02-17 Thread Andy Wardley
Kelly Thompson wrote: > So if I don't use captchas (having tons of trouble with all of them, due > to dependencies, and being on a shared host) what is a good "text" method? > Or any method actually that will help with spam, and DOS attacks... Another approach is to put a honeypot field in the fo

Re: [Templates] Captchas

2009-02-17 Thread Josh Rosenbaum
Kelly Thompson wrote: > So if I don't use captchas (having tons of trouble with all of them, due > to dependencies, and being on a shared host) what is a good "text" method? > Or any method actually that will help with spam, and DOS attacks... > > Currently you have to register and then click a l

Re: [Templates] Captchas

2009-02-17 Thread Ask Bjørn Hansen
On Feb 17, 2009, at 15:01, Josh Rosenbaum wrote: > The image captcha method still has the drawbacks of being harder to > read than plain text and not as accessible, though. recaptcha.net > also comes with the added drawback of relying on 3rd party servers > for the captcha to work along wit

Re: [Templates] Captchas

2009-02-17 Thread Bill Ward
One thing to consider is what happens on the server end when a lot of requests come in? Do you create a session entry in your database or filesystem for non-registered users? If so, there might be DOS or even security (race condition) vulnerabilities to exploit. The email confirmation thing help

Re: [Templates] Captchas

2009-02-17 Thread Kelly Thompson
So if I don't use captchas (having tons of trouble with all of them, due to dependencies, and being on a shared host) what is a good "text" method? Or any method actually that will help with spam, and DOS attacks... Currently you have to register and then click a link in your email that we send, t

Re: [Templates] Captchas

2009-02-17 Thread Bill Ward
On Tue, Feb 17, 2009 at 3:09 PM, Bill Ward wrote: > On Tue, Feb 17, 2009 at 3:01 PM, Josh Rosenbaum wrote: >> I just prefer the minimum amount of interference to users on all websites. >> Clearly for huge websites that demands an image/audio captcha, but often I >> find they are overkill and ju

Re: [Templates] Captchas

2009-02-17 Thread Bill Ward
On Tue, Feb 17, 2009 at 3:01 PM, Josh Rosenbaum wrote: > Ask Bjørn Hansen wrote: >> On Feb 17, 2009, at 12:11, Josh Rosenbaum wrote: >>> If this doesn't work for you, you've lost maybe 10-20 minutes of time, >>> so no big deal. >> >> Setting up a recaptcha.net captcha will likely not be more than

Re: [Templates] Captchas

2009-02-17 Thread Josh Rosenbaum
Ask Bjørn Hansen wrote: > On Feb 17, 2009, at 12:11, Josh Rosenbaum wrote: >> If this doesn't work for you, you've lost maybe 10-20 minutes of time, >> so no big deal. > > Setting up a recaptcha.net captcha will likely not be more than 20 > minutes of time, either, and with that you're "done".

Re: [Templates] Captchas

2009-02-17 Thread Ask Bjørn Hansen
On Feb 17, 2009, at 12:11, Josh Rosenbaum wrote: > If this doesn't work for you, you've lost maybe 10-20 minutes of > time, so no big deal. Setting up a recaptcha.net captcha will likely not be more than 20 minutes of time, either, and with that you're "done". :-) - ask -- http://deve

Re: [Templates] Captchas

2009-02-17 Thread Josh Rosenbaum
Kelly Thompson wrote: > I am trying to include a Captcha for our registration page, and was just > wonder if anyone on here, is familiar with a good Captcha mod for use > with TT. > > I am playing with the Authen::Captcha right now, but I'm having lot's of > problems...and noticed that on the C

Re: [Templates] Captchas

2009-02-16 Thread Randal L. Schwartz
> "Andy" == Andy Wardley writes: >> There's a module that implements the (very simple) API. Andy> http://search.cpan.org/~andya/Captcha-reCAPTCHA-0.92/lib/Captcha/reCAPTCHA.pm Andy> +1 from me. I used that for insightcruises.com to keep the "send me more info" page, and it has really help

Re: [Templates] Captchas

2009-02-16 Thread Andy Wardley
Ask Bjørn Hansen wrote: > recaptcha.net makes Captchas that aren't completely impossible to use > (and have audio support etc) and at the same time they have strong > security. They also have the benefit of helping to digitise books in the process. http://recaptcha.net/learnmore.html > Ther

Re: [Templates] Captchas

2009-02-16 Thread Ask Bjørn Hansen
On Feb 16, 2009, at 12:54, Kelly Thompson wrote: > I am trying to include a Captcha for our registration page, and was > just wonder if anyone on here, is familiar with a good Captcha mod > for use with TT. recaptcha.net makes Captchas that aren't completely impossible to use (and have aud

Re: [Templates] Captchas

2009-02-16 Thread Mihai Bazon
I played with GD::SecurityImage and am pretty fond of it. Here's a sample here: http://code.xuheki.com/hgwebdir.cgi/Xuheki/file/7a00a8ef0f12/perl/XHK/Captcha.pm It has nothing to do with TT though. ;-) Cheers, -Mihai Kelly Thompson wrote: > I am trying to include a Captcha for our registratio

[Templates] Captchas

2009-02-16 Thread Kelly Thompson
I am trying to include a Captcha for our registration page, and was just wonder if anyone on here, is familiar with a good Captcha mod for use with TT. I am playing with the Authen::Captcha right now, but I'm having lot's of problems...and noticed that on the CPAN forum for that mod there is a que