9

This question already has an answer here:

Are there more elegant and user friendly options to captcha out there? Not only do I find that the format of captcha really muddles up a site design, but often users have to refresh for a new one several times. Even then when it's input in what seems correct to the user, it might not be and they form refreshes telling them it was wrong.

marked as duplicate by msp, Charles Wesley, Rumi P., Graham Herrli, Evil Closet Monkey Dec 10 '14 at 20:12

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

4

Besides math- and image- captchas there is a rather new approach from google that recently made its rounds through various newsletters. They call it "reCAPTCHA" and its based on the idea of seperating bots from humans by a single click.

While I still don't know much about it myself yet I still hope that this approach will some day make it to the real world developers. One-Click-Captcha just sounds too good to be true.

You can find a full documentation on that project on google's project page: https://www.google.com/recaptcha/intro/index.html

  • 2
    And a bit more info in this article from Wired – Roger Attrill Dec 10 '14 at 14:03
  • 1
    @tillinberlin unfortunately the new reCAPTCHA is not compliant with accessibility standard so i would consider this carefully! – Okavango Dec 10 '14 at 14:13
  • 2
    @Okavango Quoting the linked article in this answer: "For the visually impaired, reCAPTCHA provides an audio CAPTCHA option. Your legitimate users will find our regular audio CAPTCHAs easy to solve. Bots on the other hand will get a much harder audio CAPTCHA designed to block them." – Roger Attrill Dec 10 '14 at 14:19
  • 4
    To clarify, 'reCAPTCHA' isn't a new name, but the model it uses to verify bots is. – TankorSmash Dec 10 '14 at 16:27
3

Google have RECAPTCHA the idea being you check a tick box and this verifies you as human.

Google RECAPTCHA

Using small games to confirm a human identity could be used, however this is said to make a site feel more unprofessional on a website not targeted at a younger audience.

Asking the user a question and a correct answer validates the user.

There is a really nice article here which goes into greater detail.

CAPTCHA alternatives

Ideally, using a honeypot would be best for the user as you are not asking them to prove they are human, providing an inconvenience. Honeypots work by including something extra in the code that only the bot would see, for example, a hidden form field. A human user would not see a hidden form field but a bot would as they would read the code. As with anything there is a weakness and like CAPTCHA solutions it is in accessibility, those using screen readers may find that they fill out the hidden form and are rejected. This could be worked around by providing another test which is accessible.

0

Try making a capcha, but making the images display a simple math problem. This way, it will be harder for a robot to do, while the image can be less distorted and easier for a human.

Some of the information contained in this post requires additional references. Please edit to add citations to reliable sources that support the assertions made here. Unsourced material may be disputed or deleted.

  • 2
    Solving simple math problems isn't any harder for bots than for humans, it only prevents generic bots from solving the CAPTCHA. Once a bot is taught that it should solve the problem instead of re-typing it, this solution will be just as efficient as typical CAPTCHAs for bots, but a bit harder for humans. – gronostaj Dec 10 '14 at 15:50
0

Captchs Usability

Captchas have a series of issues when it comes to usability. to name a few ; They interrupt the user’s workflow and they are inaccessable to people with visual disabilities they are also hard to decipher in normal circumstances. so here is my suggestion:

Ask the user a simple question or a couple of generic questions, for example what is your favourite colour? the user will then type his answer. check for the speed by which the user typed their answer to ensure that they are human. hope that helps

Related:

There is a growing trend of using keystroke dynamics to authenticate users before granting access. you might find this article interesting.

0

I don't know how relevant it is to your situation, but I'd just like to share my CAPTCHA solution.

There is no CAPTCHA on registration. Instead, users are required to play a little bit of the game that they have signed up for, before they will be allowed to send message and post on the forums.

This means that anyone wishing to bot their way onto the site will have to build a custom-tailored bot capable of playing a game up to a certain point in the tutorial. If they're willing to invest that much effort in specifically targeting my site, then a CAPTCHA wouldn't do much good anyway because sitting there and solving a bunch of them would be easier than botting the game enough.

This is, of course, circumstantial. It would not be appropriate for a simple "comment on a blog" kind of CAPTCHA, but it is exceptionally powerful in my case.

  • "Botting" a game isn't that hard (in case of a browser-based game), play it by hand, record all HTTP requests made by the game and replay them (you'll maybe need to change a session ID). – user42730 Dec 10 '14 at 16:01
  • @AndréDaniel Depends on the game. In this case, the game relies on you interacting with other humans through gameplay, and them interacting with you, for you to progress. – Niet the Dark Absol Dec 10 '14 at 16:02
  • So it's like "I'm bad at the game, I need to register on their forum to ask for help but I can't because I'm bad at it" ? Doesn't look that good of an idea to me. Besides, captchas are often used to prevent spamming, either commercial of just bored kids that like to ruin the experience for everyone else. Being able to sign up and interact with other players without a captcha looks like a disaster to me, what if a bot decides to sign up with lots of account just to spam the in-game chat or DoS the server ? – user42730 Dec 10 '14 at 16:07

Not the answer you're looking for? Browse other questions tagged or ask your own question.