Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-16 Thread LuKreme
On 6-Jan-2008, at 14:02, Mark Sapiro wrote: Are there plans to enhance the web subscription form with a type of captcha, or other technique to discourage bots? There is no current plan. There really should be. -- I mistoke thee for thy better Hamlet Act III scene 4

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-16 Thread Steve Burling
--On January 16, 2008 11:21:41 AM -0700 LuKreme [EMAIL PROTECTED] wrote: There really should be. To which I reply: It's open source. Start coding and submit a patch. -- Steve Burlingmailto:[EMAIL PROTECTED] University of Michigan, ICPSR

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-16 Thread Stephen J. Turnbull
LuKreme writes: On 6-Jan-2008, at 14:02, Mark Sapiro wrote: Are there plans to enhance the web subscription form with a type of captcha, or other technique to discourage bots? There is no current plan. There really should be. Why? It's user-unfriendly and botnet-friendly

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-16 Thread Brad Knowles
On 1/16/08, LuKreme wrote: Are there plans to enhance the web subscription form with a type of captcha, or other technique to discourage bots? There is no current plan. There really should be. CAPTCHAs don't work. The best mechanism I've found so far that does work is to moderate (or

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Mark Sapiro
Matt Domsch wrote: Several times this week I've received spam to my lists which are set to allow postings only by list members. Upon review, something (either bot or human, but I'm betting bot as they hit many lists at once) subscribed the spam sender email to the lists via the web form, sent

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread steve
Are there plans to enhance the web subscription form with a type of captcha, or other technique to discourage bots? Anyone else hit by this practice much? Human assisted registration is becoming more popular - apparently there is even setups where they auto farm-out the capcha recognition to

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Brad Knowles
On 1/6/08, Mark Sapiro wrote: Anyone else hit by this practice much? I've never seen it on lists with subscribe_policy of either Confirm or Approve. I don't allow open subscribe. I've seen spammers (or bots) get subscribed to lists and try to spam, then unsubscribe. However, pretty much

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Stephen J. Turnbull
Jeffrey Goldberg writes: On the whole, I have found these things so rare that it hasn't been a real problem. However, in principle lists could easily be targeted, so it is worth considering captchas. Captchas have been discussed, and were not considered worthwhile. (1) There are many

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Jeffrey Goldberg
On Jan 6, 2008, at 7:01 PM, Stephen J. Turnbull wrote: Jeffrey Goldberg writes: [...] it is worth considering captchas. Captchas have been discussed, and were not considered worthwhile. [snip of explanation of the lack of effectiveness and annoyance of capchas] Thank you. I've always

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Larry Stone
On 1/6/08 7:01 PM, Stephen J. Turnbull at [EMAIL PROTECTED] wrote: (3) On the other hand, hard to read captchas are exactly that: hard to read. For humans, too. So introducing captchas the score is Spammers 2, Humans 0. Yes indeed. One that takes me two to three tries to match is annoying.

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Brad Knowles
On 1/6/08, Jeffrey Goldberg wrote: I suspect that with a Confirm subscription policy (which is the minimum anyone should run) there really isn't too much to worry about in that we can always end up requiring approval for subscriptions (or moderate) associated with domains that show a