When Alvin Oga wrote,
> - a good list manager sw will be able to defeat this
> faked autoconfirmation from a supposed human confirmation
Jim Galvin asked,
| Would you please describe how one could detect that a message came from
| a human and not an autoresponder?
Perhaps to confirm one would have to follow some instructions other than just
replying. (Such a requirement would lock out attempted subscriptions by
humans who won't read instructions, but that might be a good thing.) For
example, autoresponders are likely to quote back (a) none of the received
text, (b) all of the received text, or (c) a certain amount from the top of
the received text. So if the applicant is sent two confirmation codes and in
order to confirm has to return only the lower one without the upper one, a bot
is likely to fail. Or if the confirmation code needs to be edited slightly --
say it is twelve characters long, and it has to be sent back with the first
five characters moved to the end -- a bot is likely to fail.
And of course, so are 98% of human applicants.
Follow-Ups:
References:
|
|
