ietf-asrg
[Top] [All Lists]

Re: [Asrg] A CAPTCHA that automatically detects and neutralizes attacks.

2005-06-01 11:30:11
My policy is to answer all [C/R challenges]
Whereas I never reply to any of them concluding, rather
egotistically, that it is their loss not mine.
My goal here is to minimize annoyance -- once you answer someone's
challenge, his challengebot shuts up.  If you don't, every time he
gets another forged spam with your address in it, you get another
challenge.

I "minimize annoyance" by simply blocking chronic offenders outright.
(Strictly, this doesn't quite minimize annoyance; I accept slightly
increased annoyance potential in the hope of actually fixing the
problem.  But anyone who continues after three or four complaints to
the site's postmaster, or which challenges postmaster mail, gets
blocked entirely.)

[ insert standard info on abusiveness and futility of C/R ]

Exactly.  I'm willing to deal with a little annoyance in the hope of
getting the actual problem - the futile abusive behaviour - stopped.

But not more than a little.  It doesn't take too many challenges
without action before the blocks go up.

/~\ The ASCII                           der Mouse
\ / Ribbon Campaign
 X  Against HTML               
mouse(_at_)rodents(_dot_)montreal(_dot_)qc(_dot_)ca
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg