- Forms
- Explaining the process
- Community driven
Websites featuring the ability for visitors to comment, register as a user, or otherwise actively post content on the website are often exposed to attacks from spam-robots. The content posted by such spam-robots can be compared to spam sent by e-mail. The main purpose for the spam-robot on the web is however often to just create links to a specific website, so that website will rise in search results on for instance google.com. These spam-posts rarely have anything to do with the subject of the website, hence the spam categorization.
To avoid such spam, captchas are introduced. The whole idea is to create a way to distinguish real human beings from automated robots.
The most popular form of Captchas are images with letters and numbers inside. The user is then to write in a separate form field what the image reads. To prevent spammers from using OCR software to read the image, the image is manipulated in different ways, that makes it hard to interpret for computers while maintaining readability for humans.
If the user succeeds in typing what the image says, his content is posted to the website. If not, the action will be refused. It is common to allow a number of tries to enter the captcha text, as some captcha images are even unreadable to humans due to the strong image manipulation is has been exposed to.
Captchas are short for ‘Completely Automated Public Turing test to tell Computers and Humans Apart’. The whole idea behind Captchas is to distinguish humans from computers letting the user perform an action a computer can’t. A captcha is a simple Turing test.
There is a fine line between making a captcha unrecognizable for OCR scanners and still readable for human beings. Readability for the human has to come first. Other problems with implementing captchas to protect your website include a lock-out from visually impaired users as they can’t use voice software to speak what the captcha reads.
Other forms of protection from malicious spammers are asking questions like “what is 2 + 3” or “what is two plus three” or using voice captchas,
The Captcha used for registrering a facebook account lets you ask for another captcha in case the image is too distorted. You also have the option of listening to what the captcha reads.
A captcha is used to at the youtube.com signup form to protect the site from spam.
The Captcha from the Craigslist sign up form lets you hear the words printed on the Captcha image.
The delicious team stands by with a support team, if you are not able to validate your captcha due to physical impairment.
UI-Patterns.com is the work of Anders Toxboe – a Danish web developer seeking to categorize what has before seemed like ad hoc approaches to developing web applications.
Want to be a part of the UI-Patterns.com family? Contribute!
© Copyright 2012 - Anders Toxboe, UI-Patterns.com
Chris
26 Aug, 2008
Perhaps what’s good practice as documented in this pattern should also be implemented in this “Post a comment” feature as well. UI-Patterns is lacking accessibility and refresh featires for your CAPTCHA.
Just an observation =)
Anders Toxboe
11 Oct, 2008
Chris: You’ve got a good point there. But then again… you always have to compare the costs of implementing a better captcha to the potential benefits. In the case of UI-patterns.com, I believe that the potential benefits do not come close to matching the costs (time) of implementing it.
But definitely a good point ;-)
damasta
10 May, 2009
40 to 60 percent of youtube captchas are human unreadable themselves, serously
also, I did the captcha on this site wrong twice too, but that’s just because I’m not wearing my contacts
Phil
11 Jun, 2009
Im a big fan of the reCAPTCHA service – it provides a nice easy way to use robust captchas on your website. They also have an accessibility feature where partially sighted people can listen to an audio version of the captcha.
While its fine to use a simple captcha on a comment form it might be wiser to use a more complex captcha on something like a login form to prevent brute force attacks. Some good rules for captcha design can be found at
http://www.idontplaydarts.com/2009/06/breaking-a-captcha-rules-for-good-design/
online gambling forum
1 Jul, 2009
Has anyone here tried to leave a comment with success. It’s nearly impossible. I refreshed the screen over 20 times to read the captcha. It always comes up as invalid. Try and let me know.My users are able to comment fine, but the Captcha images are kinda hard to read. There are others out there that are easier to read and still have the same effect, so maybe we could get ours updated.
Website Redesign
27 Aug, 2009
Definitely, captcha is one thing thing that has controlled teh spam bots. As far as the human spamming is concerned, nofollow has done that. Though I am a strong believer that it all evens out in the end but still…
Web 2.0 Design
31 Aug, 2009
Thnak you. The captcha can be an effective way of controlling comment spam.