![[H]ard|Forum](/styles/hardforum/xenforo/logo_dark.png){kind=logo}
-
Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.
CAPTCHA's
- Thread starter majikman
- Start date
I didn't even know what a CAPTCHA was until the other day on another forum I was reading.
Has a list of most of the popular CAPTCHAs, and from that it looks like Passport is an excellent one. Although, I'm not quite sure where you get them from. =x
edit: Removed URL. Didn't even notice the image in there. =x
Has a list of most of the popular CAPTCHAs, and from that it looks like Passport is an excellent one. Although, I'm not quite sure where you get them from. =x
edit: Removed URL. Didn't even notice the image in there. =x
hrm... i saw that site. i dont' think passport is gonna hand over the algorithm for their captcha to me 
so what i've decided to do is an image captcha (vs. obscured text). i'm going to use have a program render 3d objects and take screen shots and have the user count or answer some kind of question on the 3d objects. since they're rendered, i could rotate the images and generate potentially hundreds if not thousands of unique images.
what do you guys think about that?
so what i've decided to do is an image captcha (vs. obscured text). i'm going to use have a program render 3d objects and take screen shots and have the user count or answer some kind of question on the 3d objects. since they're rendered, i could rotate the images and generate potentially hundreds if not thousands of unique images.
what do you guys think about that?
Lews_Therin
Weaksauce
- Joined
- Jul 1, 2005
- Messages
- 64
Jason Isom said:
WARNING!!! THAT SITE CONTAINS A SHOCK IMAGE!!
There's a neat list in the Wikipedia article. Maybe you already know those algorithms, tho.
It's quantity, not quality. To stop the spammers you have to prepare to abuse your power as the webmaster and piss off your legitimate visitors to the MAX:
Force the user into multiple different captcha systems at random. Auto Block IP's at random for short periods of time regardless of whether they are correctly filling out registration. Present 404/403 errors at every turn. Switch back and forth between SSL and non-SSL during registration. Modify the layout of your registration pages at random. Make your users underestimate you by putting a super-simple captcha system one day, and a completely different complicated one the next. Use AJAX and other browser specific javascript to try and verify that the user is actually clicking a browser. Toss error-riddin javascript at your users that's known to make their browsers crash (you'll find plenty of code for IE there); then, when that session suddenly drops and the same IP starts another session, THEY'RE GOOD! Also be narrow-minded and deny all IPs originating from Eastern Asia cause that's like the South Central of web-traffic, nothing good comes out of there (EDIT: japans cool though).
Now when it's all said and done, does the end justify the means? Hell no. But I'll be damned if I'm going to be another nameless spammer victim.
Force the user into multiple different captcha systems at random. Auto Block IP's at random for short periods of time regardless of whether they are correctly filling out registration. Present 404/403 errors at every turn. Switch back and forth between SSL and non-SSL during registration. Modify the layout of your registration pages at random. Make your users underestimate you by putting a super-simple captcha system one day, and a completely different complicated one the next. Use AJAX and other browser specific javascript to try and verify that the user is actually clicking a browser. Toss error-riddin javascript at your users that's known to make their browsers crash (you'll find plenty of code for IE there); then, when that session suddenly drops and the same IP starts another session, THEY'RE GOOD! Also be narrow-minded and deny all IPs originating from Eastern Asia cause that's like the South Central of web-traffic, nothing good comes out of there (EDIT: japans cool though).
Now when it's all said and done, does the end justify the means? Hell no. But I'll be damned if I'm going to be another nameless spammer victim.