Comments on: Has reCAPTCHA Been Defeated? http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/ Technology and Geek Stuff by Eric Burke Mon, 26 Jul 2010 14:36:32 -0400 http://wordpress.org/?v=2.8.6 hourly 1 By: william http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/comment-page-1/#comment-36901 william Sat, 23 May 2009 03:56:25 +0000 http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/#comment-36901 well seems clear that the bad guys found a way I have recaptcha running under a joomla 1.510 installation, I installed recaptcha to stop the spam, to my surprise it keeps coming but is an automatic atack with nonsense messages, here is an example This is an enquiry e-mail via http://tommydsonline.com/web/ from: b8llg m51bc 9LjbN, wtaaf , [url=http://www.df5tsrdym5y.com]ivweb[/url], http://www.yorv1rkky0.com 5pym8 I got the same message 10 times in 2 minutes Fri, May 22, 2009 at 9:57 PM the form does not track the sender IP i will track that.... well seems clear that the bad guys found a way I have recaptcha running under a joomla 1.510 installation, I installed recaptcha to stop the spam, to my surprise it keeps coming but is an automatic atack with nonsense messages, here is an example

This is an enquiry e-mail via http://tommydsonline.com/web/ from:
b8llg m51bc

9LjbN, wtaaf , [url=http://www.df5tsrdym5y.com]ivweb[/url], http://www.yorv1rkky0.com 5pym8
I got the same message 10 times in 2 minutes
Fri, May 22, 2009 at 9:57 PM
the form does not track the sender IP i will track that….

]]> By: It’s Just a Bunch of Stuff That Happens » Blog Archive » Spam Problems, I Need Help http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/comment-page-1/#comment-913 It’s Just a Bunch of Stuff That Happens » Blog Archive » Spam Problems, I Need Help Sun, 04 Nov 2007 17:06:36 +0000 http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/#comment-913 [...] I started seeing a handful of spams, now I receive at least 5 per day in my moderation queue. I first blogged about this a bit over a month [...] [...] I started seeing a handful of spams, now I receive at least 5 per day in my moderation queue. I first blogged about this a bit over a month [...]

]]> By: Justin http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/comment-page-1/#comment-56 Justin Fri, 21 Sep 2007 19:15:20 +0000 http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/#comment-56 Have you considered http://haacked.com/archive/2007/09/11/honeypot-captcha.aspx ? It seems like a better and more reliable approach. Have you considered http://haacked.com/archive/2007/09/11/honeypot-captcha.aspx ?
It seems like a better and more reliable approach.

]]> By: Matt http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/comment-page-1/#comment-51 Matt Fri, 21 Sep 2007 08:32:15 +0000 http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/#comment-51 CAPTCHA doesn't stop spam, it just proves whoever leaving the comment is a literate human, which happens to correlate highly with valid comments. It doesn't do anything for trackbacks, pingbacks, or human-entered spam comments. The latter becomes more common the more popular your blog becomes. CAPTCHA doesn’t stop spam, it just proves whoever leaving the comment is a literate human, which happens to correlate highly with valid comments. It doesn’t do anything for trackbacks, pingbacks, or human-entered spam comments. The latter becomes more common the more popular your blog becomes.

]]> By: Colin McMillen http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/comment-page-1/#comment-50 Colin McMillen Thu, 20 Sep 2007 14:49:35 +0000 http://stuffthathappens.com/blog/2007/09/20/has-recaptcha-been-defeated/#comment-50 I'm one of the engineers working on the reCAPTCHA project. To our knowledge, we've never been defeated by automated means, though we have seen at least one case of reCAPTCHAs being farmed out to humans in India. Is there any chance you can forward us more info on the couple of spam comments you've seen? If you can give us the IP addresses and approximate posting times of the spam comments, we can take a look at them and better analyze what happened. Since many sites worldwide are using reCAPTCHA, we have a global view of the system, and can probably find out more information about these attackers. I’m one of the engineers working on the reCAPTCHA project. To our knowledge, we’ve never been defeated by automated means, though we have seen at least one case of reCAPTCHAs being farmed out to humans in India. Is there any chance you can forward us more info on the couple of spam comments you’ve seen? If you can give us the IP addresses and approximate posting times of the spam comments, we can take a look at them and better analyze what happened. Since many sites worldwide are using reCAPTCHA, we have a global view of the system, and can probably find out more information about these attackers.

]]>