Open Side Menu Go to the Top
Register
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** ** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **

03-04-2012 , 06:45 PM
I don't agree with that. The choices are not perfect or useless. Security never works that way.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-04-2012 , 07:10 PM
Quote:
Originally Posted by Neil S
I don't agree with that. The choices are not perfect or useless. Security never works that way.
i meant useless in the sense of "anything a human can read the AI can read too."
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-04-2012 , 11:21 PM
Quote:
Originally Posted by iversonian
Is there a very dominant community forum for programmers like 2+2 is for poker players?
More web design than programming, but this is a very active forum that I am a member of: http://www.sitepoint.com/forums/forum.php
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 12:45 AM
Quote:
Originally Posted by greg nice
what the hell is the internet coming to



took me six tries to complete a forum search
Yeah +1

I seem to fail about 50% of the recaptcha captchas now.

Juk
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 08:31 AM
We're at the point where the people who work on AI to interpret captchas for spamming purposes would probably make more money by just selling them as captcha-readers to people desperately trying to figure out what they say.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 08:59 AM
lol yeah,
the new captcha test if you can't read it you gotta be human.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 10:36 AM
Anyone here do win32 development in Visual studio 2010? The lack of intellisense is really bothering me. Anyone know how to add that for c++/win32 in VS 2010?

Inga
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 12:44 PM
Image based CAPTCHAs are really bad and there are much better ways of detecting auto submissions without inconveniencing the user.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 12:53 PM
Honeypots ftw, work super well for us. also just changing default registration/login page URLS if your using a forum/CMS is also incredibly simple and effective (we get hundreds of 404 requests to default pages for registration). We've added akismet on to our comment system as well and we're basically spam free now.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 01:09 PM
You could implement something similar to the CSFR checks. Embed a code in your 'registration' link, and only show the registration page if the code checks out. This would mean that you could only see the registration page if you have legitimately clicked on a 'register' link.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 01:17 PM
That's a cool idea hadn't thought of that, I would be a little nervous implementing something like that though in case people share registration links, but if you're inundated with spam it could be an idea
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:03 PM
Quote:
Originally Posted by MrWooster
You could implement something similar to the CSFR checks. Embed a code in your 'registration' link, and only show the registration page if the code checks out. This would mean that you could only see the registration page if you have legitimately clicked on a 'register' link.
so would the reg-link be determined by IP addy, so that they could only get one valid reg link per IP that they had?
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:05 PM
Quote:
Originally Posted by Gullanian
Honeypots ftw, work super well for us. also just changing default registration/login page URLS if your using a forum/CMS is also incredibly simple and effective (we get hundreds of 404 requests to default pages for registration). We've added akismet on to our comment system as well and we're basically spam free now.
Hey Tom,

I looked up honeypots and found this: http://www.projecthoneypot.org/about_us.php

But I can't figure out what they are actually doing. Can you explain it?
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:07 PM
Quote:
Originally Posted by _dave_
And these botters are making "some" attempts to not get detected. If they had free reign it would probably be significantly worse of a problem.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:19 PM
Quote:
Originally Posted by gaming_mouse
Hey Tom,

I looked up honeypots and found this: http://www.projecthoneypot.org/about_us.php

But I can't figure out what they are actually doing. Can you explain it?
i believe its a crowd sourced list of spammer IPs that you can just ban straight from your htaccess

edit/nevermind looks a bit different
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:25 PM
I only know the concept of honeypot from regular security. Basically it's a deliberate weak system that catches the bad guys.
Dunno if/how it applies to spam-bots but my guess would be you allow spam on some subsite and banhammer the spammers somehow.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:28 PM
Quote:
Originally Posted by gaming_mouse
so would the reg-link be determined by IP addy, so that they could only get one valid reg link per IP that they had?
The idea would be to have a link which looks like

Code:
http://example.com/register?check=[random code]
[random_code] would be a randomly generated hash that is also added to the users cookie.

When the user opens the 'registration' page, the 'check' parameter is tested for a) uniqueness and b) against the value in the user's cookie. If either a or b fail then the user is likely to be a bot.



Quote:
Originally Posted by Gullanian
That's a cool idea hadn't thought of that, I would be a little nervous implementing something like that though in case people share registration links, but if you're inundated with spam it could be an idea
This would def be an issue, but I guess you could always fall back on a CAPTCHA if the checks fail.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:35 PM
Wooster here's a blog post I wrote about honeypots and default pages:

http://www.scirra.com/blog/61/reducing-website-spam

And HN discussion:

http://news.ycombinator.com/item?id=3300135
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:49 PM
Thanks for the link. I think I remember reading that when you first posted it. Excellent article, using a fake 'username' input is a really great idea.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 02:51 PM
Have any of you guys gotten a degree from Harvard Extension School or hear anything about it?

I'm thinking I am going to go there for a masters in Spring of next year, I currently work within IT staffing, and I wanna get into IT.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 06:49 PM
Last assignment done..500, weee
To answer the earlier question about the uglyness of class_eval...yeah it's that ugly. I felt the same when I used eval in a test.

Also Rspec test snippet from the last exercise:
Code:
it "should work for class Baz with methodname lolcat" do
    baz = Baz.new
    baz.lolcat = 'can i'
    baz.lolcat = 'haz'
    baz.lolcat = 'cheesburger?'
    baz.lolcat_history.should == [nil, 'can i', 'haz', 'cheesburger?']
end
Cause why not...I think I'll use lolcats in testing from here on out :P
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 07:28 PM
Also refactored hw1_3 to be less kludgy...time to start a new thread?
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-05-2012 , 09:10 PM
Quote:
Originally Posted by clowntable
Also refactored hw1_3 to be less kludgy...time to start a new thread?
doooo eeeet!
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-06-2012 , 03:41 AM
Quote:
Originally Posted by gaming_mouse
i meant useless in the sense of "anything a human can read the AI can read too."
An AI can.

Not all AIs can.

It's wrong to assume that you don't achieve anything at all unless your system is impregnable to all possible opposition.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
03-06-2012 , 12:30 PM
Hey all,

I have finally finished updating my landing page and was hoping to get some criticism. Some of the 'content' was written late last night, and needs to be tweaked, but the design is finished.

My aim was to create a page that looks good, and that is easy to navigate. I want someone to be able to land on the page, and quickly find the information they are seeking.

Note: The page doesnt work in IE at the moment.

The page is at http://guy.ht

Thanks in advance
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote

      
m