Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-16 Thread Brad Knowles
On 1/16/08, LuKreme wrote: >>> Are there plans to enhance the web subscription form with a type of >>> captcha, or other technique to discourage bots? >> >> There is no current plan. > > There really should be. CAPTCHAs don't work. The best mechanism I've found so far that does work is to m

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-16 Thread Stephen J. Turnbull
LuKreme writes: > On 6-Jan-2008, at 14:02, Mark Sapiro wrote: > >> Are there plans to enhance the web subscription form with a type of > >> captcha, or other technique to discourage bots? > > > > There is no current plan. > > > There really should be. Why? It's user-unfriendly and botne

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-16 Thread Steve Burling
--On January 16, 2008 11:21:41 AM -0700 LuKreme <[EMAIL PROTECTED]> wrote: > There really should be. To which I reply: It's open source. Start coding and submit a patch. -- Steve Burling University of Michigan, ICPSR

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-16 Thread LuKreme
On 6-Jan-2008, at 14:02, Mark Sapiro wrote: >> Are there plans to enhance the web subscription form with a type of >> captcha, or other technique to discourage bots? > > There is no current plan. There really should be. -- I mistoke thee for thy better Hamlet Act III scene 4 --

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Brad Knowles
On 1/6/08, Jeffrey Goldberg wrote: > I suspect that with a Confirm subscription policy (which is the > minimum anyone should run) there really isn't too much to worry about > in that we can always end up requiring approval for subscriptions (or > moderate) associated with domains that show a h

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Larry Stone
On 1/6/08 7:01 PM, Stephen J. Turnbull at [EMAIL PROTECTED] wrote: > (3) On the other hand, hard to read captchas are exactly that: hard to > read. For humans, too. So introducing captchas the score is Spammers > 2, Humans 0. Yes indeed. One that takes me two to three tries to match is annoying

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Jeffrey Goldberg
On Jan 6, 2008, at 7:01 PM, Stephen J. Turnbull wrote: > Jeffrey Goldberg writes: > >> [...] it is worth considering captchas. > > Captchas have been discussed, and were not considered worthwhile. [snip of explanation of the lack of effectiveness and annoyance of capchas] Thank you. I've alw

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Stephen J. Turnbull
Jeffrey Goldberg writes: > On the whole, I have found these things so rare that it hasn't been a > real problem. However, in principle lists could easily be targeted, > so it is worth considering captchas. Captchas have been discussed, and were not considered worthwhile. (1) There are ma

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Brad Knowles
On 1/6/08, Mark Sapiro wrote: >> Anyone else hit by this practice much? > > I've never seen it on lists with subscribe_policy of either Confirm or > Approve. I don't allow open subscribe. I've seen spammers (or bots) get subscribed to lists and try to spam, then unsubscribe. However, pretty

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Jeffrey Goldberg
On Jan 6, 2008, at 3:02 PM, Mark Sapiro wrote: > I've never seen it on lists with subscribe_policy of either Confirm or > Approve. I don't allow open subscribe. Years ago (2000?) I did see this happen with one or twice with lists with a Confirm policy. These were majordomo lists, but still the

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread steve
>Are there plans to enhance the web subscription form with a type of >captcha, or other technique to discourage bots? >Anyone else hit by this practice much? Human assisted registration is becoming more popular - apparently there is even setups where they auto farm-out the capcha recognition to

Re: [Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

2008-01-06 Thread Mark Sapiro
Matt Domsch wrote: >Several times this week I've received spam to my lists which are set >to allow postings only by list members. Upon review, something >(either bot or human, but I'm betting bot as they hit many lists at >once) subscribed the spam sender email to the lists via the web form, >sen