[jaws-uk] Re: Web site security
- From: "Dorothy Ingram-Gorban" <dorothy.ingram-gorban@xxxxxxxxx>
- To: <jaws-uk@xxxxxxxxxxxxx>
- Date: Sun, 15 Jun 2008 20:28:13 +0100
thank you for explaining that so clearly, by the way Zen my server and FRE
in France have a continual argument Charles uses Fre and Zen have a system
called user verification, this means sending a dummy email before the real
one Fre will not do this. I can only at the moment use friends to carry my
emails for me until they come to some arrangement what does amaze me is
that not 1 spec of spam has reached me and I switched to Zen September
2006,Tony Berry helped me RNIB volunteer now retired in France, However
to get a Trojan last week on my laptop was very upsetting, I do not buy on
line or Bank on line reading Tiddy's research it looked as if it was all too
simple to get in whatever you use Kaspersky when it disinfected the file
destroyed all my emails I am told a good product should disinfect and leave
a file intact
----- Original Message -----
From: "Léonie Watson" <tink@xxxxxxxxxx>
To: <jaws-uk@xxxxxxxxxxxxx>
Sent: Sunday, June 15, 2008 8:00 PM
Subject: [jaws-uk] Re: Web site security
Evening,
CAPTCHA is a security technique increasingly used by websites to
prevent people wishing to open accounts for the purpose of causing problems
and damage on the Internet. People who work in the spam business will
attempt to write programmes that will automatically run through the sign up
process for an account many times, very quickly.
The aim is to create thousands of false accounts, particularly with
websites such as Hotmail, Yahoo and Google. When the accounts have been
created, they're used once only to send out hundreds of thousands of spam
emails to the likes of you and I. Because the accounts are only used once,
it effectively renders the spammers untraceable and makes it worthless
trying to block the spammer's address within your email programme.
The CAPTCHA technique asks users to identify a series of characters
in an image. The characters are visually distorted, to prevent the spammers
from using OCR technology within their automated sign up programmes.
Some websites, such as PayPal, offer an Audio-CAPTCHA alternative,
which offers access to the same characters via an audio file. The audio is
also distorted, to prevent spammers from using speech recognition tools
within their automated sign up programmes.
Tools like CAPTCHA Killer will be effective up to a point, but are
not a long term solution. Any CAPTCHA that the CAPTCHA Killer can
successfully complete will also be successfully completed by the spammers.
It's just an another automated tool, probably just a lot less sophisticated
than the tools used by the spammers.
The debate over whether CAPTCHA is an effective security technique
has been going on for a while now. Similarly, the concern for accessibility
has also been raised.
The trouble is that at present, there is no viable alternative
that's in a position to replace CAPTCHA. There are other theories out there,
but none have the widespread application that CAPTCHA does. It is also
possible that there is not a clear case under the DDA, due to the
"reasonable effort" phraseology which would make it plausible to argue that
the security of the many means it would not be reasonable to remove the
CAPTCHA, providing any kind of accessible alternative were provided, such as
an email address.
It's a difficult issue, certainly a contentious one. I thought the
above round up would help people understand more about the technology.
Regards,
Léonie.
--
http://www.tink.co.uk/
** To leave the list, click on the immediately-following link:-
** [mailto:jaws-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** jaws-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:jaws-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** jaws-uk-request@xxxxxxxxxxxxx with the Subject:- faq
** To leave the list, click on the immediately-following link:-
** [mailto:jaws-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** jaws-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:jaws-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** jaws-uk-request@xxxxxxxxxxxxx with the Subject:- faq
Other related posts:
