Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Perhaps as an experiment try "enter the first character of your post/comment". That would kill any remote human captcha solvers (since they don't actually know the post content), and likely require some rewriting of the spamming software, assuming that is automated.

Of course, this is not a long term perfect solution against motivated adversaries, but it's a way to see how the current spammers work.

Another: Add a keydown handler to your message-textarea and log (to a hidden form field) how many key presses are being used per post. If the spam software is setting the content field programmatically, you then know how to detect them.



That is a great idea... much simpler than I had imagined. I will implement this tomorrow to base off results from today


They're both good ideas, but bear in mind that the keydown detection may trigger under other conditions (eg I use a plugin to let me edit text fields in external vim. People pasting quotes/urls could also be odd keystroke numbers)


I could just check for 1 or greater. I wouldn't have to check for an equal amount




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: