ietf-asrg
[Top] [All Lists]

Re: [Asrg] Its all over for Challenge Response

2004-01-28 09:07:11
Hallam-Baker, Phillip wrote:
spammers have found a way to break C/R schemes that have a 'turing test'
component.
You simply set up a free porn web site and get people to crack the turing
tests in return for seeing the porn.

http://yro.slashdot.org/article.pl?sid=04/01/28/1344207&mode=flat&tid=111&ti
d=126&tid=172&tid=95&threshold=1

We have seen this mentioned here before. This approach to C/R by spammers does have one beneficial side-effect: they must ensure that the challenge gets back to a useful address. Thus, they can no longer forge everything and expect mail to get through.

Perhaps we should start sending out fake challenges to spammers with problems that no one would reasonably be able to solve, like asking for proofs of various open problems in mathematics. :-)

Philip Miller

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg