OT and FYI: Article on security logons

The place for discussions and decisions about the forum

OT and FYI: Article on security logons

Postby RoryOF » Wed Jun 20, 2012 10:46 am

Apache OpenOffice 4.1.7 on Xubuntu 20.04.1 (mostly 64 bit version) and very infrequently on Win2K/XP
User avatar
Posts: 31541
Joined: Sat Jan 31, 2009 9:30 pm
Location: Ireland

Re: OT and FYI: Article on security logons

Postby Hagar Delest » Wed Jun 20, 2012 9:34 pm

Another recent solution (perhaps more accessible): http://blog.nothingbutsoftware.com/2012 ... ut-captcha and http://areyouahuman.com/demo
AOO 4.1.7 on Xubuntu 20.04 and 4.1.5 on Windows 10 (with winPenPack port).
User avatar
Hagar Delest
Posts: 28998
Joined: Sun Oct 07, 2007 9:07 pm
Location: France

Re: OT and FYI: Article on security logons

Postby kingfisher » Thu Jun 21, 2012 2:36 am

There are some captchas that require many attempts to get right. I found a novel approach on the Chakra registration page. Unfortunately I forgot to copy the url of that page after logging out but you should be able to see a link to it by loading the bbs page.

I am attaching a snapshot. I was fooled and I'm not a bot. :(

Apache OpenOffice 4.1.6 on PCLinuxOS
User avatar
Posts: 2120
Joined: Tue Nov 20, 2007 10:53 am

Re: OT and FYI: Article on security logons

Postby TerryE » Tue Jul 10, 2012 5:41 pm

Once we require the users to enter their OpenOffice version and check that the response contains "office" and "2." or "3." we have eliminated all generic phpBB registration attack bots. Yes, it is easily susceptible to specific-to-this-forum coded attack, but I very much doubt that any attacker will go to this effort for a single forum with our usage patterns and volumetrics.

So most of our successful registration attacks employ cheap sweat-shop labour. This type of human attach will easily defeat this type of security measure.
Ubuntu 11.04-x64 + LibreOffice 3 and MS free except the boss's Notebook which runs XP + OOo 3.3.
Posts: 1402
Joined: Sat Oct 06, 2007 10:13 pm
Location: UK

Return to Forum Governance

Who is online

Users browsing this forum: No registered users and 0 guests