full-disclosure - Comment Spam: new trends, failing counter-measures and why it's a big deal

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <43F0C35E.14863.1ACF07F3@nick.virus-l.demon.co.uk>
Date: Mon Feb 13 04:35:50 2006
From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Subject: Comment Spam: new trends,
	failing counter-measures and why it's a big deal

php0t wrote:

>   A big part of the problem you mention can be solved by requiring a
> Turing test for the actions that you don't want a bot to be able to do.

I guess you missed all the historic discussion of how cheap it is, in 
"Western" terms, to employ what passes as skilled labour in much of the 
third-world to solve "captcha-like" challenges???

Now, while I'm sure that approach would not be economically viable for 
most large-scale blog-spamming, depending on the blog and the spam, it 
may well be worthwhile for some especially targetted blog-spam, so 
shouldn't be expected to be a singularly successful solution.

Regards,

Nick FitzGerald