[Lazarus] Forum under attack

[José Mejuto]

Hello Lazarus-List,

Tuesday, January 11, 2011, 10:26:44 PM, you wrote:

MML> How about a Capcha that was a coding problem?

Everything done by machines (like parsing) is done better by machines
:)

MML> When I worked for a mainframe company I sat a developer's aptitude test,
MML> and one of the questions showed a set of nested functions in a 
MML> Pascal-derived language with the question being what value does variable
MML> A have at point X. I wonder whether that type of problem could be turned
MML> out by software, and whether they could be chosen to be difficult enough
MML> to defy automated solution but not so difficult as to deter new users?

IMHO the "solution" is to personalize the captcha. The most simple
captcha is hard to be resolved by a computer if the captcha "style"
change everyday. This is not true for large sites like hotmail, yahoo,
and others, but for "small" sites a simple image recognition captcha
which changes its carrousell everyday is more than secure as specific
attack must be designed for low audiente.

Using ready packages in forum software is like putting "This is the
captcha model xxx, look for computer solution at your local captcha
resolver provider" :)

OCR is a quite mature technology, so anything based in text is not
usefull, computer vision is a different thing, post a photo of a park
and ask for the amount of bikes ;) blonde girls, trees, etc... or even
better enforce the user to mouse click over the image for each bike.

-- 
Best regards,
 José