<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Attackr.com &#187; Developer Portal for web designers, developers and programmers</title>
	<atom:link href="http://www.attackr.com/tag/registering-procedure/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.attackr.com</link>
	<description>Come To Share, Come To Learn</description>
	<lastBuildDate>Tue, 20 Dec 2011 13:09:25 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>How to prevent both users and bots from registering using image verification</title>
		<link>http://www.attackr.com/how-to-prevent-both-users-and-bots-from-registering-using-image-verification/</link>
		<comments>http://www.attackr.com/how-to-prevent-both-users-and-bots-from-registering-using-image-verification/#comments</comments>
		<pubDate>Mon, 24 Nov 2008 10:00:06 +0000</pubDate>
		<dc:creator>niemi</dc:creator>
				<category><![CDATA[Google]]></category>
		<category><![CDATA[Internet Security]]></category>
		<category><![CDATA[Web Design]]></category>
		<category><![CDATA[image verification]]></category>
		<category><![CDATA[registering procedure]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[usability]]></category>
		<category><![CDATA[yahoo]]></category>

		<guid isPermaLink="false">http://www.attackr.com/?p=212</guid>
		<description><![CDATA[So I&#8217;ve been thinking a while about joining Yahoo&#8217;s excellent answers site. You know, thinking about all the big questions in life like &#8220;which shoe-size does almighty Google Larry use&#8221; and &#8220;where can I bury my dead pixels&#8221;. Registering for Yahoo As far as I can remember I&#8217;ve never used Yahoo for anything. I AM [...]]]></description>
			<content:encoded><![CDATA[<p>So I&#8217;ve been thinking a while about joining Yahoo&#8217;s excellent <a href="http://answers.yahoo.com/">answers site</a>. You know, thinking about all the big questions in life like &#8220;which shoe-size does almighty Google Larry use&#8221; and &#8220;where can I bury my dead pixels&#8221;.</p>
<h2>Registering for Yahoo</h2>
<p>As far as I can remember I&#8217;ve never used Yahoo for anything. I AM the Google generation. Walking across the road, joining the darker side, was a scary thought, but when I saw the short registering procedure I calmed down.</p>
<p>The way they have set up their registering procedure is just about as good as it could get.<br />
<br />
<img src="http://www.attackr.com/wp-content/uploads/2008/11/yahoosignup.png" alt="Yahoo sign up is very well thought out... But!" title="Yahoo sign up is very well thought out... But!" width="470" height="528" class="size-full wp-image-247" /><br />
</p>
<p>As you can <a href="https://edit.europe.yahoo.com/registration?.intl=us&amp;new=1&amp;.done=http://www.yahoo.com&amp;.src=fpctx&amp;.v=0&amp;.u=b24fqt14i8lfr&amp;partner=&amp;.partner=&amp;pkg=&amp;stepid=&amp;.p=&amp;promo=&amp;.last=">see</a> everything is where you expect it to be, divided into chunks like <em>&#8220;Tell us about yourself&#8230;&#8221;</em> and <em>&#8220;Select an ID and password&#8221;</em>. Even the less web savvy users might think &#8220;voilÃ  this is done in 30 seconds&#8221;. And they would be right if it wasn&#8217;t for that #¤%)/(&amp;=#087AAARGH&#8221;#(¤¤//!!&#8230;</p>
<h2>Freaking spam protection!</h2>
<p>I had used only one or two minutes entering my personal information, even choosing a decent account name. Everything went my way just until now. I saw the image representation of something that might look like text. Skewed, distorted, blurred.</p>
<p><img src="http://www.attackr.com/wp-content/uploads/2008/11/yahoosignuptextrepresentation.png" alt="Distorted Text Representation" title="Distorted Text Representation" width="300" height="89" class="size-full wp-image-251" /></p>
<p>Now you say, where have you been? Never seen that kind of spam protection before? Yes I have. Several times. And usually I don&#8217;t even think about it. This time I had plenty of time to think about. I just couldn&#8217;t get it right.</p>
<p>For example, what letters to the image above represent? If you guessed z7neG6Bz you would have been wrong. I never had a second chance, because now a new image was presented. Impossible to read. The third was even worse. Now at my fourth try I was sure I couldn&#8217;t be wrong. I probably wasn&#8217;t, but because I had typed in some wrong characters just before Yahoo had thrashed my password. So instead of accepting my, assumingly correct interpretation of the letters, I had re-type my password and then interpret yet another image.</p>
<p>For a moment let&#8217;s leave my Yahoo story and have a look at some other examples.</p>
<h2>Examples of good and bad image verification</h2>
<p><img src="http://www.attackr.com/wp-content/uploads/2008/11/googleimage.png" alt="Example 2 and 3" title="Example 2 and 3" width="286" height="67" class="size-full wp-image-254" /><br />
<em><strong>&nbsp;Example 2, 3.</strong> &#8211; http://google.com/</em></p>
<p><a href="https://www.google.com/accounts/CreateAccount?service=mail&amp;continue=http://mail.google.com/mail/e-11-1107fbb85de3a9e840b7fcffeab3ebc-76236d93349fb03cf48d8bd8ee77f3df66c94719&amp;type=2">These examples</a> are pretty similar to my Yahoo experience. The letters are skewed and the <a href="http://en.wikipedia.org/wiki/Tracking_(typography)">tracking </a>(space between each letter) is set to about -150. It is, at best, very hard to guess the letters.<br />
<br />
<img src="http://www.attackr.com/wp-content/uploads/2008/11/flatpanelsimage-300x48.png" alt="Example 1" title="Example 1" width="300" height="48" class="size-medium wp-image-253" /><br />
<em><strong>&nbsp;Example 1.</strong> &#8211; http://flatpanels.dk/</em></p>
<p>In this example from <a href="http://www.flatpanels.dk/flatforum/profile.php?mode=register&amp;agreed=true">http://flatpanels.dk</a> the letters are not skewed and the tracking is increased to make it easier to separate one letter from another. Instead a hefty grain filter has been applied. This makes it hard for machines to decode, but users without serious visual disabilities should not have any problems. The letters placement is vertically inconsistent, again this should make the bots have a hard time, but users can easily overcome this hurtle.</p>
<h2>Conclusion</h2>
<p>We see that Google and Yahoo uses the same hard-to-breakdown image-verification method. The image is very hard to interpret for both machines and real users. They have to do something about those nasty abusive bots, but when it happens at the cost of usability the battle against the machines has been lost.</p>
<p>Back to the Yahoo story. Yes, I did succeed after several tries. Not all the letters were hard to guess, but a image verification method is not good enough if only some of the images produced are readable. Back to the drawing board <a href="http://en.wikipedia.org/wiki/Jerry_Yang">Yang</a> and <a href="http://en.wikipedia.org/wiki/Larry_Page">Page</a>!</p>
<h3 class='related_post_title'>Related Posts:</h3>
<ul class='related_post'>
<li><a href='http://www.attackr.com/google-chromium/' title='Google Chrom(ium)'>Google Chrom(ium)</a></li>
<li><a href='http://www.attackr.com/testing-password-strength-using-google/' title='Testing Password Strength Using Google'>Testing Password Strength Using Google</a></li>
<li><a href='http://www.attackr.com/teamwork-made-easy-googledocs/' title='Teamwork Made Easy &#8211; GoogleDocs'>Teamwork Made Easy &#8211; GoogleDocs</a></li>
<li><a href='http://www.attackr.com/google-chrome-faster-and-more-screen-estate/' title='Google Chrome &#8211; faster and more screen estate'>Google Chrome &#8211; faster and more screen estate</a></li>
<li><a href='http://www.attackr.com/seo-for-google/' title='SEO for Google'>SEO for Google</a></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.attackr.com/how-to-prevent-both-users-and-bots-from-registering-using-image-verification/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>
<!-- WP Super Cache is installed but broken. The path to wp-cache-phase1.php in wp-content/advanced-cache.php must be fixed! -->
