Captchas + Yahoo! Chat = No Bots (for Now)

Just in case you haven’t been keeping up with Yahoo! Chat, it looks like a new sheriff is in town (http://blog.messenger.yahoo.com/blog/2007/08/29/new-entry-process-for-chat-rooms/). Just before the Labor Day weekend Yahoo! started making users enter a captcha before they could enter a chat room. This could possibly mean that the chat rooms will be bot free for the time being.

My first impression of the system was not that bad. I logged in with Yahelite and was quickly prompted to enter the captcha in a separate dialogue box. I do have to admit that the process did get very tedious as you have to enter the captcha every single time you change rooms. This is very hard on me because I tend to change rooms almost every minute. I have also noted that the captchas are getting longer. This is most likely to make it harder for captcha guessing program to work.

My impressions of the new system quickly went down hill once I tried to chat from the official Messenger client. Instead of a dialogue box, a hyperlink appears. The link opens your default web browser where you are then presented with the image and a space to enter the text. The soon became way too bothersome and I reverted back to Yahelite.

The last comment on this new scheme is one of bot evolution. The captcha for chat is brand new and thus the bot writers have not had time to catch up. As I have discussed before, there are already programs that can correctly guess the captcha more than 95% of the time. It is only a matter of time before these technologies are adapted to chat bots once again. Even if the majority of bots do adapt, the less programming adept writers will be left out and thus few bots will be in the rooms, even in the long run.

 

 

 

Comment/Reply (w/o sign-up)

Guess it was only a matter of time before they pushed the image verification for this. Most online forums have this feature already and it does help decrease the amount of spammers.

I'm sure there are ways for spambots to read those letters in the image verification, but if Yahoo can obscure the image even more it will probably be more effective. I have seen some where the letters are heavily distorted with tiny thread-like images in the background (like the watermark in checks).

Comment/Reply (w/o sign-up)

This was long overdue as Yahoo! seemed to have abandoned the chat completely. Changing the captcha frequently (like Rapidshare does) will ensure bot programs have a hard time spamming the rooms. One interesting captcha I saw was where the user had to type in the result of a simple arithmetic calulation depicted by the Captcha. However, this will only help prevent room cycler bots. The spammers can still have their dirty bots inside a room. I don't know how many bot programs have been adapted to the changes, but I am certainly not going to update mine.

Even if, its just for now, this move by Yahoo! is for the better.

Comment/Reply (w/o sign-up)

I was also going to suggest a captcha system similar to Rapidshare. It seems like every time I am there the font changes for the captcha.

Comment/Reply (w/o sign-up)

Yes, but as noted by TIME, people willing to get a few free things (nasty... things) might be compelled by hackers/spammers to enter CAPTCHA's just to get in.

Comment/Reply (w/o sign-up)

The future development of Yahoo Responder Bot, one of the best Yahoo! chat bots has also been terminated. The developer cited that he would not be able to outrace Yahoo's captcha protection mechanism, especially if it changes frequently. From what I saw back at his forum, the spammers are ready to pay him any amount of money, even on a daily basis, if only he would continue the development. I wonder why they are so desperate to spam around. The way Yahoo! chat has been for the last couple of months, the bots are only going to spam each other. Surely, there are better ways to cash in!

Comment/Reply (w/o sign-up)

Yea---the botting still continues---1 guy in room politics 7 known as 1313---has over 42 names in the room---even after all the yahoo updating and captchas updating---1 name per ip is still the only way to stop spammers----yahoo still does not get it-----I wish they would listen to us on how to fix the bot problem once and for all ----but its yahoo and its free---

-Tony

Comment/Reply (w/o sign-up)

They cannot apply the one IP per username restriction, because quite a few people share the same IP address. Even adsense acknowledges this fact and is therefore (to some extent) lenient on self clicks.

Regarding the captchas, well they can always be entered by a human. Some are even resorting to hiring cheap labour to periodically key in the captchas from a remote location.

The thing is, its very hard to absolutely curb the activity of the bots, if not impossible. Yahoo might change the chat login code, but the other clients can also adapt to this by logging yahoo's network activity.

Comment/Reply (w/o sign-up)

Well just to let everyone know, if you do get that CAPTCHA cracking code don’t forget to tell me about it. It’s only a matter of time before a developer releases it. I understand that it’s good to keep it away from spammers but I can think of several less sleazy ways to use it.

Comment/Reply (w/o sign-up)

Yahoo Chat as in chatrooms or YIM?

I never go into Yahoo Chatrooms so I can really care less .

xboxrulz

Comment/Reply (w/o sign-up)