Yeah, I know Spamhaus wants captcha + coi, but I'm getting pushback for a few reasons. 1) generally my employer thinks any slow in list growth is bad (don't get me started) 2) to implement captcha on the thousands of entry points would be a nightmare. Some of what I mentioned or modules provided by Drupal for instance that'd be easy to add en mass.
Brett On Wed, Oct 19, 2016 at 3:53 PM, Michael Ellis <m...@bacchusbrew.com> wrote: > > We recently were tied up in the listbomb issue that's been plaguing folks > > for a while. For those that don't know what's going on, > > https://wordtothewise.com/2016/08/subscription-bombing-esps-spamhaus/ > > > > I'm honestly surprised it's taken this long for us to wind up having a > > listing for a client. > > > > That being said, we're thinking through solutions and I wanted to get > > others opinions in how they've tackled the problem on their end. > > > > We're currently looking to implement a combination of preventions with > the > > leading idea being: > > honeypot on sign up pages + IP intelligence + email address intelligence > + > > coi > > > > The idea being the honeypot will stop some bots, the IP monitoring will > > look for numerous sign ups within a short periond of time (which we > > currently do for credit cards) and then also look for email addresses > > being > > signed up acorss clients in a short period of time. > > > > Have folks used this type of combo to stop fraudelent sign ups? And > > thoughts? Thanks! > > > > Brett > > > > > One of my clients got caught and it took implementing captcha as well as > doing a reconfirmation run for 2 weeks back from when it appeared to the > present date to clear it. For a bot captcha should stop almost all. > -- Brett Schenker Man of Many Things, Including 5B Consulting - http://www.5bconsulting.com Graphic Policy - http://www.graphicpolicy.com Twitter - http://twitter.com/bhschenker LinkedIn - http://www.linkedin.com/in/brettschenker
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop