[PLUG] False mailing list sign-ups

[Denis Heidtmann]

On Sat, Aug 3, 2013 at 6:07 AM, Rich Shepard <rshepard at appl-ecosys.com>wrote:

> On Sat, 3 Aug 2013, Brian Martin wrote:
>
> > I have a web-site where people can sign up to receive occasional e-mails.
> > When they sign up, my code sends an e-mail to the given address asking
> for
> > confirmation.  Of course, if the e-mail address is invalid the
> > confirmation bounces back to me as undeliverable.
>
> Brian,
>
>    Have you considered using captcha' on your site? That requires a human
> to
> copy obfuscated text to a text entry widget to validate the form has not
> been filled in by a bot.
>
> Rich


The ner-do-wells have figured a way around captcha'.  They divert some
random user's access to a site of interest, stick in the captcha' from your
site, then collect the user's response, and use it to access your site.
 How they do that is a mystery to me.

-Denis