Matt,

I did understand.  What I'm saying is that it doesn't always work.  To clarify, 
in addition to less sophisticated automated form fillers that would fill out 
all fields, there are also more sophisticated ones that use keystroke 
generators to fill out forms.  I just saw one in the public domain last month.  
CAPTCHA doesn't have this problem, would defeat those automated form fillers, 
and is therefore more reliable with similarly very little effort to implement.

Darin.


----- Original Message ----- 
From: Matt 
To: [email protected] 
Sent: Wednesday, April 09, 2008 11:45 AM
Subject: Re: [Declude.JunkMail] form spam filter




  No, I understood completely.  I've seen forms with fields hidden by DIVs 
still filled out.  Some of the less sophisticated spam form fillers I've seen 
used simply filled out every field.  They were not looking to see what was 
"visible" and what wasn't.
Actually this is the part that you misunderstood.  The DIV's with visibility 
hidden will never be filled out by real people, but they will get filled out by 
form spam sending robots.  So if they get filled out, you pretend the 
submission was successful, but you don't generate the E-mail.

It's a simple trick, and it works.

Matt

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to