Page 2 of 4
Posted: Mon Dec 03, 2007 11:25 am
by toTOW
Posted: Mon Dec 03, 2007 3:56 pm
by toTOW
Posted: Mon Dec 03, 2007 9:23 pm
by toTOW
Bots
Posted: Tue Dec 04, 2007 2:06 am
by v00d00
Posted: Tue Dec 04, 2007 3:01 am
by Cprossu
Posted: Tue Dec 04, 2007 10:55 am
by v00d00
Its a pity we couldnt use this CAPTCHA system.
http://www.defectiveyeti.com/iacaptchas/
Posted: Tue Dec 04, 2007 11:46 am
by toTOW
As I said before, this mod may help :
http://phpbb.mwegner.de/english/phpbb2/ ... stion-mod/
Or the one that were included in phpBB plus used on the FCF ... sorry I don't read german, but i think this could help : phpbb plus website :
http://www.phpbb2.de/ ... and the two first mods here
http://www.cback.de/cback_software/phpbb2mods.php
Posted: Tue Dec 04, 2007 2:03 pm
by toTOW
Posted: Tue Dec 04, 2007 4:42 pm
by 7im
I just read where a company is selling software that can OCR the captcha text, and bot their way in to any site.
I also read the next iteration of captcha will be to identify objects instead of letters and numbers. For instance, they will show a picture of a kitten, and you have to enter "kitten" to get in. I suppose "cat" would also be accepted.
hack, fix, hack, fix...
Posted: Tue Dec 04, 2007 4:46 pm
by uncle_fungus
Using a RAC (registration authorisation code) + the captcha is by far the most difficult to hack, especially if we change the RAC regularly. And the RAC can be the answer to a question (which would require a human to read it), it would be nigh on impossible for a bot to register.
Posted: Tue Dec 04, 2007 6:08 pm
by toTOW
Even with the visual confirmation activated, the bots can register ... as phpbb is opensource and widespread, they bypass most of the protection ...
I don't know how they do, but they're very hard to stop ... as you can see, they're a lot on the forum
this one has just registered :
http://foldingforum.org/profile.php?mod ... file&u=277
Posted: Tue Dec 04, 2007 6:15 pm
by uncle_fungus
Yeah, every so often I'm going through the recent registrations and removing the spam bots.
Once we get things sorted with server permissions etc. Bruce and I can start fixing things like this.
Posted: Tue Dec 04, 2007 8:04 pm
by Cprossu
Posted: Tue Dec 04, 2007 9:55 pm
by bruce
I'm not fully convinced that this user can be considered a spammer. They do have a web-page that is commercial site, but it's in russian and there were several legitimate russian members of FCF.org. I'll remove the WWW entry and see what happens.
Many of the other, more obvious spammers have been removed, and we'll continue to fight them until we can get some mods installed on the board to block them.
EDIT: Never mind. On closer inspection it's not a FAH person, so I deleted them.
Posted: Tue Dec 04, 2007 10:42 pm
by Cprossu