It seems that Captcha can do little to prevent a malicious robot that tells "I don't want to say right now" when registering.
How can this be possible? I tried to blur the image so much than even human cannot read it, but this f.. robot does.

Comments

soxofaan’s picture

soxofaan commented
Status: Active » Postponed (maintainer needs more info)

Please provide more information.
Where are you using CAPTCHA (I guess the standard user registration form or do you have customization there)?
Which type (I guess the Image CAPTCHA)?
Where was "I don't want to say right now" entered? And how did you observe this?
If you try yourself, can you successfully submit with a correct answer and are you blocked with a wrong answer?

jvieille’s picture

jvieille commented

Yes, I use Image Captcha.

I use the standard registration form with mandatory profile fields, one is a single line asking for a member id, the other is a multiple line field asking for a motivation statement.

I receives subscription attempts that always fill up "NA" for the single line field and "

I don't want to say right now

" for the multiple lines field.

I tried registering without filling up the captcha field, and this is correctly rejected.
By the way, I couldn't make a successful attempts as I was unable to decipher the letters in the blurred image...

It seems that this b.....d found a way to jump other the Captcha

soxofaan’s picture

soxofaan commented

How many of those subscriptions did you get? 5? 10? 100? 1000?
are the entered fields always the same or are there small variations?

did you get submissions after you changed the settings of the image to the degree that it is undecipherable for even humans?

jvieille’s picture

jvieille commented

Not many: 1 - 3 per day
Values are exactly the same
I get the submissions in the current conditions: undecipherable image.

I found this Drupal site on the Internet that seems to have the same problem: it prevents the "user" that it will be deleted if entering such string
http://truerth.sbroadbent.com/?q=user/register
I am trying to make a rule that does that.

elachlan’s picture

elachlan commented
Issue summary: View changes
Status: Postponed (maintainer needs more info) » Closed (outdated)