The CAPTCHA Continues As A Challenge

This month, we are again seeing evidence of recent security changes by Microsoft. We see signs of continued frustration, in the process of publishing comments - and publishing posts, as part of the Import process.

In the process of diagnosing an apparent comment publishing problem, I ventured into the comment publishing experience, yet again.

I temporarily tweaked commenting permissions for this blog, to allow anonymous comments and to require the CAPTCHA.

With CAPTCHA required, I published a test comment to my earlier post in this blog.

I did my best - which was not good enough.



CAPTCHA solving continues, as a challenge.

I entered a test comment, and made appropriate selections.

I got a challenge.

"Select all the food."

I did my best.

Apparently, my best was not enough.

"Select all images with a store front."

I tried again. Not all images here were completely obvious, either.

My second try was successful.



Hmm.

Select all the food.

Zoom in on the fourth image, above - and tell me which pictures, that I did not select, are food? To whom? Will zooming always improve chances of success?

CAPTCHA solving, as spam interdiction, will always lead to frustration.

There will be cultural issues - and resolution problems - with CAPTCHAs. This version of the CAPTCHA beats the one from several years ago - but still will cause frustration.

And need I again point out - will require proper filter tuning, on each computer used. Note that ongoing changes by Microsoft are currently affecting publishing comments - and publishing posts during the Import process.

And our experience may very, depending upon many different details, varying by blog, by computer, and by person. My sympathies to all who must deal with spam - and with spam interdiction.

---

The CAPTCHA continues to be an unavoidable element in comment publishing and other episodes of #Blogger life. And like life, some episodes are more pleasant than others.

"Nice Blog" Spam Is Not Random Garbage

Some time ago, I discovered an odd type of comment spam, which I termed "Nice Blog" spam.

Nice blog. I will keep visiting this blog very often.

This spam, from what I can tell, has been published by the millions, in various blog comments.

It's likely that this particular spam is being published as a very imaginative form of email address mining. The phrasing started out almost identical to the above example - but recently became rather imaginatively worded.

All that the spammer has to do is publish a "nice blog" spam comment, against a typical Blogger blog post, and select the option to "Send me replies".

Any comments published later against that post, and including the commenters actual email address, would be delivered directly to the spammers inbox. Knowing the email address - and the blog URL (how many comments do not include a link to a blog?) - the hacker would go straight to work.

Later, we would see forum reports.

I can't control my blog, any more - and somebody has filled it with spam!

This was a direct result of the former blog owner, having left a comment on somebody else's blog.

By eliminating our email addresses from our comments, Google is helping to protect our accounts and blogs, while letting us continue to comment on each others blogs - and to discourage one type of unnecessary spam from our blogs.

>> Top