3 ms·
Using HTML markup to make captcha recognizing bots work harder
I am sure there are thousands ways to make text captcha harder for bots. One idea I just figured out is when we mix words from the question with some crap words so the question looks like
What _bla bla bla_ is _do-da-du_ seven _hey there_ hundred _brum-brum_ and _go-for-it_ forty _do this_ four _again_ as _blah_ a _mlah_ number?
I marked crap words with underscores here.
Then we can easily style these words with CSS to be faded or grayed out or anything like that so that user could clearly see the question, and trash words wouldn't be visible clear enough. It could make bots work harder. More than that, we can use inner HTML markup to make the question look like crap when we look into source still looking good if we look at it in browser. What do you think?
- hankejh 16y agoInteresting, but a bot can take CSS into consideration -- or simply render the page to see what your users are seeing, no?
- cosmorocket 16y agoWhat if we use JavaScript to generate this dynamically?
- mooism2 16y agoBots can take javascript into account too, if they want to.
- cosmorocket 16y agoSure, it will be just a race between the developer and the attacker and both will be able to create solution as complex as it worth it for each of them. If we go deeper, we can combine words from the question with some other elements between them, like images or even divs with some content inside.
- ffumarola 16y agoAnd I thought I read somewhere that a lot of captcha's are being "solved" by humans in other countries and then sent over to the spam bot to input? Any one else recall seeing an article on that?