4 ms·

How so ? It's really not that hard. I've done it, and it zeroed spam coming through a web form almost 100%.

• danielbarla 8y ago
  Both (custom and recaptcha) are essentially security by obscurity, in the sense that a skilled attacker will eventually bypass it. The problem is not that difficult. The advantage Google has is being able to move the goalposts, potentially on a daily basis, while you presumably have better things to do. On the other hand, they are a juicier target, so will draw more effort. Ymmv. Google tends to strike a good balance between convenience and irritation.
• ericpauley 8y ago
  So would disabling submissions. The real question is how many legitimate submissions weren't made successfully because of a bad captcha.
• mockingbirdy 8y ago
  I've build a ReCaptcha breaker in an evening (which beats Google 100% of the time). The only reason why most spammers don't evade ReCaptcha is because they make enough money through other means (and most spammers can't program). There are also a lot of services where you can simply send your challenge token and some guy will solve it for a fraction of a penny. As soon as other money-making opportunities will dry up, spammers will evade ReCaptcha and spam will increase regardless of your security mechanisms.