How do bots bypass reCaptcha?

frdmn

Hello, im using the Application based registration with reCaptcha but i still get tons of applications daily, all with the same "body":

{I want to {see new threads|follow the discussion|be part here|see new additions|access all parts|contibute|say something|reply to a thread|reply to a user|message a user|contact a user|read everything}.

The applicant has always a @outlook.com or @yahoo.com e-mail address and somehow is able to bypass reCaptcha. How?! Do they really bypass it or just "solve" the captchas somehow (OCR or whatever)?

What do you guys to prevent this?

x00

OCR is unlikely to work most of the time reCapatcha is rarely solved (despite what people might believe), sometime they make use of certain exploit or weaknesses in the, but bear in mind is update regular by Google. On the hand it popularity mean a lot of time is invested in trying to crack it.

The application registration doesn't by default have reCapatcha. Are you sure you are using it?

whu606

@frdmn‌

You can use this:

http://vanillaforums.org/addon/registrationrestrictlogger-plugin

to block applicants based on their application text, among other things.

You might also want to look at this:

http://vanillaforums.org/addon/addregistrationquestion-plugin

frdmn

@x00 yeah I am sure, and also made sure it is active (you can check by yourself: http://forums.yeahwh.at)

@whu606‌ thanks, I am aware of those plugins, but I actually just want to know how they bypass it. Thank you though for the suggestion

Anonymoose

Hired humans for cheap.

x00

http://forums.yeahwh.at/entry/register?Target=discussions

no captcha

x00

here is my account

http://forums.yeahwh.at/profile/1417/spammer

frdmn

@x00 you're right, it was reCatpcha as i didnt used the Applicant registration method. Just noticed you don't even have the opportunity for reCaptcha on that mode. But we got those spam accounts as we were on "Basic" (with reCaptcha, yes!) as well.

vrijvlinder

@x00 ,
I have a similar account at Yaweh.com .....

UnderDog

Check out all of peregrine's addons... lots of them have to do with blocking spammers

x00

@vrijvlinder said:
x00 ,
I have a similar account at Yaweh.com .....

I would have though you were an aztec anyway. I can imagine you removing a few hearts.

peregrine

@x00 said:

I would have though you were an aztec anyway. I can imagine you removing a few hearts.

now I know where she gets the 's from.

vrijvlinder

@x00 I got yours right here

x00

@vrijvlinder said:
x00 I got yours right here

I doubt it, I never had one in the first place.

businessdad

@Anonymoose said:
Hired humans for cheap.

Or subscribed to even cheaper, automated services. They work, I tried some of them and they all bypass ReCaptcha.

x00

@businessdad

This is why i like this project

http://research.microsoft.com/en-us/um/redmond/projects/asirra/

x00

I refer defer to this post

http://vanillaforums.org/discussion/comment/208613#Comment_208613

x00

also talk of 'spam' tend to trigger spam, becuase spammer are searching for weak sites. As does context stuff like "Which the best host?"

businessdad

@x00 said:
This is why i like this project
http://research.microsoft.com/en-us/um/redmond/projects/asirra/

It seems a good idea, but the CBA factor is very strong in some users and could drive them away. -_-

x00

@businessdad said:
It seems a good idea, but the CBA factor is very strong in some users and could drive them away. -_-

I the the CBA is higher with reCatpcha. How hard is it to point a click, and you get clear pictures.

businessdad

Apparently, it's very hard for some people. We had to disable all recaptcha and even email verification on some sites, because for many users it was too much effort to click on one link in the email.