captcha

Captchas to force user interaction?

I'm currently working on a program that has many of those "the user SHOULD read it but he'll click OK like a stupid monkey" dialogs... So I was thinking of adding something like a captcha in order to avoid click-without thinking... My ideas were: Randomly change buttons Randomly position buttons somewhere on the form The user must cli...

Are there any alternatives to recaptcha.net, for stopping spam?

A member of my company in greater ranking than myself refuses to use recaptcha.net on his website to thwart spam off of a public form. He thinks it would be difficult for anyone coming to our site to enter their information since the Turing Tests are "so darn hard to read". Is there an alternative to using this method? That doesn't co...

How to break CAPTCHA ?

What are the methods, algorithms used to break CAPTCHA ? ...

Implementing captcha in a stateless REST web-service environment

The project I'm working on is a piece of static HTML with some inline JavaScript that will call a REST web-service, which I'm creating myself using .NET 3.5 WCF. The JavaScript will grab some details from the user including an email address, then send those details off to the web-service through Ajax. The web-service will then store the...

Best way to limit (and record) login attempts

Obviously some sort of mechanism for limiting login attempts is a security requisite. While I like the concept of an exponentially increasing time between attempts, what I'm not sure of storing the information. I'm also interested in alternative solutions, preferrably not including captchas. I'm guessing a cookie wouldn't work due to ...

Implementing CAPTCHA after 50% of Article

We are planning to put large number of Business Research Reports and Articles from our intranet on to the Internet. However, we don't want others to copy the content and host it on their own. I read about protection by CAPTCHA and was wondering if this is possible. Readers should be able to read 50% of the article for FREE after which a...

Limiting user login attempts in PHP

Hi there, I'm seeing web apps implementing limitations for user login attempts. Is it a security necessity and, if so, why? For example: you had three failed login attempts, let's try again in 10 minutes!! thanks :) ...

idea for morphing captcha

I've been thinking of a dynamic way of creating a CAPTCHA that uses morphing shapes or dynamic colors. My first idea is to have a graphic, flash or something, that gradually changes from, say a square into a sphere. The user will be required to click the button when it becomes spherical enough. Second idea is to have an area of colo...

What is the best/recomended CAPTCHA component for ASP.NET

Hi there, Does anyone have any recommendations for CAPTCHA components for use in ASP.NET projects? Cheers! ...

Implementing CAPCHAs into a n-tier arcitechture?

Hi all I got a 3-tier framework, that looks something like this: Web-tier: Presentation and the likes Core-tier: Entities, procedures, business logic Data-tier: DAL'ing Now, should my CAPTCHA's go into the web-tier? I'm thinking of 2 levels of validation: Image based CAPTCHA and a SMS-based CAPTCHA. The image based one will obviousl...

What are best practices to reduce junk mail using PHP and captcha?

My site has the following code to send email. if($_SESSION["captcha"]==$_POST["captcha"]) { $msg="Require Services :\t$_POST[service]\n"; $msg="Name :\t$_POST[name]\n"; $msg.="Company Name :\t$_POST[co_name]\n"; $msg.="Address :\t$_POST[address]\n"; $msg.="Mobile :\t$_POST[mobile]\n"; $msg.="Phone :\t$_POST[phone]\n"; $msg.="E-mail :\...

Using kaptcha with JSF

I'm trying to use http://code.google.com/p/kaptcha/ which looks like a very easy way to include CAPTCHA. My demo app is JSF and although the instructions are simple for JSP, I don't know how to use them in JSF. How do I translate this in JSF? In your code that manages the submit action: String kaptchaExpected = (String)request....

StackOverflow CAPTCHA Triggers

Normally whenever a CAPTCHA might be needed I always present it to the user apriori but the StackOverflow approach is much better, it only shows me the CAPTCHA when it thinks I might be a bot. I'm interesting in learning the requirements and how I could implement a similar system on my projects. What are the actions that make SO believe...

Sitefinity Using built in Captcha

Does anyone know how to tie a custom control (simple ASP.net Form) with sitefinity's Captcha control? Can't seem to find the control (in the drag and drop sense) in amongst the SiteFinity.Web.UI ...

Recommendations for java captcha libraries

I'm looking for a replacement for JCaptcha, which doesn't seem to be maintained any more, and isn't very good to begin with. The replacement has to integrate nicely with JavaEE webapps. As I can see it, there are three options: JCaptcha - No longer maintained, crude API SimpleCaptcha - much nicer API, nicer captchas, but seems to be J...

how to do automated testing on forms using captcha ?

how to do automated testing on forms using captcha ? I am using selenium to create tests ..I got to go past a captcha test and verify the next page that comes....... ...

Why do people post their captchas publicly? Captcha: somerandomword

I'm implementing a website with a CAPTCHA on the registration form; my first. I've read dozens of posts on the arguments for and against, and of all the various implementations out there. I'm happy with all that but it's a necessary evil in my case. What I don't understand is why people post the random captcha characters in their posts,...

PHP: Reloading the captcha image from javascript

I have a user registration form in PHP .I put captcha image check in the page.I used it like this <img src="captcha.php" alt="Enter this text in the adjacent text box" id="imgCaptcha" /> and in my javascript i will validate this with the same number which is generated in the image (from captcha.php page) . That number was set in a se...

Captcha algorithm

I've notised that Stack Overflow only presents me with a captcha occasionally. Does anyone know if it has a good algorithm for sensing if I might be a robot or, instead if it's just random. Reducing reliance on captchas is obviously a good thing. ...

Avoiding graphical CAPTCHA by checking against OpenStreetMap

I am writing a subscription app for a rallye site. As the subscription doesn't need former registration, a captcha should be useful. The subscription is team-based. One team include 1 to 3 person. for each person an postal address must be provided. Now I wonder, if it makes sense to check if the city exists and the provided street is ...