tenants
Well-known member
I predicted correctly that next version would have this in, see:
https://xenforo.com/community/threa...on-page-honey-pots.37063/page-37#post-1129233
Can people let me know when the core honeypots start becoming ineffective
I believe it will take 2-3 months before people start picking up the latest xrumer version and this becomes a problem for xenforo
I did say this would happen if the core adopts honeypots, thankfully the core has missed quite a few things out that we can still catch bots with
I believe I predicted 10 months, it's taken over a year (xrumer have been slower than I thought)
See:
http://www.botmasterlabs.net/event/2017-01-03/1/ (see IntelliForm)
and
It might just be that xrumer think they have gotten around xenforo hidden feilds, but they haven't actually done it well enough (just a xrumer boast, they do this sometimes). We'll have to wait and see
Please make sure you have alternative mechanisms on if you don't want floods of bot spam over the next few months. The core API's will remain effective for quite some time, I suggest using non-standard captcha/customisable (ones that's aren't used by everyone) for a secondary mechanism.
I suspect google no-captach recaptcha is next on their to-do-list (this is why I recommend non standard/customisable captcha), see: http://www.botmasterlabs.net/event/2016-08-10/1/
https://xenforo.com/community/threa...on-page-honey-pots.37063/page-37#post-1129233
Can people let me know when the core honeypots start becoming ineffective
I believe it will take 2-3 months before people start picking up the latest xrumer version and this becomes a problem for xenforo
I did say this would happen if the core adopts honeypots, thankfully the core has missed quite a few things out that we can still catch bots with
I believe I predicted 10 months, it's taken over a year (xrumer have been slower than I thought)
See:
http://www.botmasterlabs.net/event/2017-01-03/1/ (see IntelliForm)
and
http://theseobay.com/about-xrumer/2745-new-xrumer-16-xevil-ocr-out.html+ improved bypass of antibot-protections by analyzing HTML source code.
+ improved bypass of antibot-protections of ?honeypot? type
It might just be that xrumer think they have gotten around xenforo hidden feilds, but they haven't actually done it well enough (just a xrumer boast, they do this sometimes). We'll have to wait and see
Please make sure you have alternative mechanisms on if you don't want floods of bot spam over the next few months. The core API's will remain effective for quite some time, I suggest using non-standard captcha/customisable (ones that's aren't used by everyone) for a secondary mechanism.
I suspect google no-captach recaptcha is next on their to-do-list (this is why I recommend non standard/customisable captcha), see: http://www.botmasterlabs.net/event/2016-08-10/1/
Last edited: