...installed at http://paracelsus.hollosite.com/
Go there and try to break it.
Experimental Wakaba version - Wakaba and Kareha support board
Think I should implement this, too?
Search engines now using the rel=nofollow attribute - Wakaba and Kareha support board
> There is also the issue that they do only provide a minimum of security thanks to the "put the captcha on a porn site" method.
Only relevant to large sites. Like WAHa said, it raises the bar.
Besides, there are ways to prevent that too. Ensure that the referrer is always your site, and prevent any IP or block of IPs from requesting too many captchas, and their job becomes a lot harder.
If you make it hard enough, hopefully the undesirables will move on.
> They are also annoying the user constantly, infact they annoy me than even the spam messages do
Depends for what. You normally only see it once when signing up for an account somewhere. It's a tiny investment for a large collective return (which is steadily diminishing).
Yes when you only see it once it really isn't a big deal, but when you have to solve one every time you try to post it becomes a complete pain in the ass (imageboards, comments on blogs, comments on news stories...)
>>and prevent any IP or block of IPs from requesting too many captchas, and their job becomes a lot harder
You don't need to request a lot, only request one when someone conencts to your dummy site and put a timeout on how fast you spam particular sites...preventing lots of captcha gets is exactly equivilant to preventing excessive posting, so the captcha serves no purpose in this case
>>Ensure that the referrer is always your site
This does nothing, the server fetchs a captcha when it needs one and then once the dummy has solved it it then submits it... if it fails fail the dummy and try again, how exactly does a referrer do anything?
>>Only relevant to large sites.
> when you have to solve one every time you try to post
I am only familiar with Wakaba doing this. All other examples of captcha that I can think of work for sites that use accounts.
And Wakaba's captcha is intentionally very easy to read. The only people who need worry about the captcha are mass-posters like Sling, and there's a patch out there that allows them to circumvent that.
> only request one when someone conencts to your dummy site
Which is why you limit IPs. A server-based approach won't work well, containing the damage. You might get several accounts, but that's less of a problem for the target than a few thousand.
> the server fetchs a captcha when it needs one
Because one way around the limitation on IPs is to hotlink the captcha. This prevents that.
>>Yeah... except that people don't have much reason to do that. Why would I go through all that effort for Joe Blow's Tiny Imageboard? Making a viable porn site so you can crack captchas is a lot of work.
It is, but it is a -one time- investment. Once it is setup you can easily add many, many sites with captchas that you need to deal with... Joe Blow's Tiny Imageboard just becomes one in a list of thousands that can get spammed, even using a single IP you can spam a lot by hitting multiple targets instead of one.
Even then, there are plenty of proxies and zombie machines out there to tunnel through, so an IP limit does not do much.
>>Again, it raises the bar. That's the entire point.
I agree, it does raise the bar. Joe Idiot isn't going to defeat captchas to mass spam his freeipod link or outwar or whatever, but they provide little protection against real spammers
> I agree, it does raise the bar. Joe Idiot isn't going to defeat captchas to mass spam his freeipod link or outwar or whatever, but they provide little protection against real spammers
I think you are overestimating spammers. Most spammers are morons. They use software others have written for them, and those others are not good programmers. Very few decent programmers would do such a thing. I know, I've dealth with spammer software, and even on the receiving end it is often visibly buggy.
For the vast majority of them, I am quite certain spammers and spam software makes are incapable of breaking captchas. UNLESS somebody goes an gives them the tools to do it.
This is gradually changing though, because criminal elements are beginning to move into this arena. With money comes skill.
However, I suspect these people don't bother with sites like yahoo, gmail, livejournal, or whatever else. They use botnets instead.
You can do a lot of things with a botnet, particularly if you're a good coder...
>>I've dealth with spammer software, and even on the receiving end it is often visibly buggy.
Something like 25% of the spam email I get has things like %RND_UCHAR[3-5] and such =D
Yes, Joe Spammer is probably using some crappy bought software, but eventually (if captchas stay around) Joe Spammer is going to be able to defeat them (programatically or through other methods)
The guy who selected his dictionary list for the first name and last name dictionaries was a genius, though. I grepped some 9000 spam emails for the results of that, and found (among other hilarious names), spam from one "Bathroom P. Skills".
Weak captcha - Wakaba and Kareha support board
is there an easy way to integrate kareha message board into an existing website, for example into a joomla cms framework?
can i somehow include the index.pl via php ?
i do not want to use iframes.
well, you should read cgi spec (since kareha is a cgi script) and use mechanism like popen() to fetch text from the script.
you still will need to hack it so it points to right location, since POSTS should go directly into kareha.pl, not your php script.
anyway, this is not for the faint of heart and will definetly involve reading a lot of documentation.
well , that sounds way too complicated.
do you maybe know a similiar script like kareha but written in PHP ?
PHP pretty much runs as CGI, I don't see how it would be any different.
also trevorsaba is terrible
CGI = common gateway interface
it is not a synonym for perl.
Kareha Integration into Joomla CMS ? - Wakaba and Kareha support board
A spammer just now tried to find out if my email address was live, by sending me a mail with an <img> tag to an image on his server. Gmail stopped this, but I had a closer look at the URL, and figured out that he'd encoded my email address into it.
Which meant that by hitting the right URL, I could add any email address I wanted into his database of supposedly verified email addresses.
This is a Perl script that generates various kinds of garbage email addresses (loopback domains, garbage domains, and their own support address as listed in whois), and feeds it into the database. I am sure you resourceful people could find some use for this.
i hope they appreciate your context-free grammar!
at the very least those guys should have cut off the ==, isn't base64 the first thing everyone tries when they see that
Seems the collector script is down now, so that's that.
I added an email address that hadn't been spread anywhere else as the first thing I did. I just checked it now, and it had fianlly started receiving spam, with the same sort of address harvesting system and the same crappy encoding.
I'll have to try and figure out what more I could for a second round.
Can this be used as a weapon?
A small request. - Wakaba and Kareha support board
Thank you for this page, it's one of the best introductions to Touhou I've ever seen.
Do you ever plan to update it to include material from the newer games?
The Illusory Land of Gensokyo - Wakaba and Kareha support board
I tried googling for webhosts, but there are thousands, and I don't know where to start. Maybe someone can help me out here. I'm looking for a webhost that:
This host is awesome. I also got a free domain when I registered. I now own eleochan.org as well as gottimhimmel.com. For $10 a month! I am happy. I also get to host both domains (I have room for one more.)
Albright, I think i credited you. I didn't use the link you gave me but entered "Albright" in the referral textbox while I was signing up.
I would credit anon!21anonxxxxx but I can't. Thanks guys.
tell me your name and I can claim credit on you, I think.
Indeed, I'm seeing a credit from "eleochan." Thanks much, my man. (Though I don't actually get access to the credit until after your 97-day money-back trial expires.) Glad you're happy wit the host.
Oop, need your email too. Thanks!
BTW, I never claimed referal credit towards anybody either.
eleomason at sbscglobal dot net
Question: Do I gotta install my own MySQL query editor for this to work?
For what to work? If Wakaba, then no.
By "query editor," do you mean something like phpMySQL?. You already have access to phpMySQL; just go to the database's server address in a web browser.
I meant like phpmyadmin.
Nevermind, I found it.
Looking for a webhost - Wakaba and Kareha support board
hello i am trying to install wakaba board, but when i call for the wakaba.pl it says : "Can't locate object method "connect" via package "DBI" (perhaps you forgot to load "DBI"?) at wakaba.pl line 45, <FILE> line 3"
What shall i do???
2k3 should be able to do softlinks, I think? You could create a softlink named "src" and have it link to the other drive. Don't ask me how to do that exactly, though, I've no idea.
Well i have solved the folder problem but the Imagick wont work :/
dont know why either, you got any idee?
I just remembered this:
Did you check out that link on that page?
Thx, i shall test that out :D cause it was on wakaba i have ignored that :P well anyway im not using IIS... or whatever, im using abyss webbserver :P
Ok now i have tested the things u told me :P but it didnt work so well maybe i should switch to IIS :P i will trie and come back!
If you're switching to anything, I'd suggest switching to Apache. Never used (hell, even heard of) Abyss.
It's a sourceforge project, in version 0.3 Heeellllloo buggy!
Naa dont think abyss is sourceforge... http://www.aprelium.com
The reason i used it was caouse it is simple and complex.
And apache on windows :P naa even if it works i dont want to :D
it more of a challange if it IS buggy
help :/ - Wakaba and Kareha support board
Since I put it into testing over at the ABe board already, I might as well make a thread here to discuss my latest project.
In a nutshell, it's a script for putting notes on images. This is from an idea of whispers', about collaborative translation - several people can work on a translation by creating and editing notes for text on a comic page. There are probably other uses too, if someone can be bothered to think about them.
It's definitely not done yet, but it's open for public scrutiny for bug testing and to gather ideas for features it needs to be useful. Some signs of it being unfinished are:
Imagine if this were just a Firefox plugin so that you could do it to any image on the entire internets without having to leave the site...
we have incorporated notes.pl into one of our wakaba boards. check it out here: www.wtfux.org/cams/
no "how to config" board or post :/
I think this script is pretty damn cool and I'd hate to necropost. Oh well, I wanted to know if you have to use a new SQL DB for each install of Notes? Notes isn't quite that documented it seems.
I'm guessing that you need to get in a browser and head to
.../notes.pl just like .../wakaba.pl where it then creates the HTML everyone can view?
I hope I'm right.
This is a cool script and I could eventually find a bunch of uses for it.
Just asking a bunch of stupid questions for a PDF I'm writing. so I may have more noob questions.
Image annotation script - Wakaba and Kareha support board
This thread is for questions and discussion about Xee. Before posting, check that the question has not already been answered in this thread, or in the previous thread: http://wakaba.c3.cx/sup/kareha.pl/1122405906/
There is also a bug tracker for Xee here: http://code.google.com/p/xee/issues/list
If you have a bug to report, it is better to post it on the bug tracker if you can, so it will not be forgotten.
Add pixelmator document support please
Have been using Xee for years and as I was setting up a new computer I found Xee on the app store. Great!
Is there any way of turning off the sandbox mode? Either that or can I swap for the "regular" version?
How can I open two or more images with Xee in order to compare them side by side?
I have a bought version of Xee (not from the app store) and have a couple of requests.
1) I would love a way to jump straight to a specific photo by number. I have had situations where a Xee crashed, or I logged out, and I wanted to go to a specific photo by number (i.e. 1243 of 7000) in a folder but there seems no way.
2) A "check for updates" button would be great.
Is there a way to browse between .zip files?
I read comics that are archived as .zip files and it'd be nice if I could just directly move to the next .zip file in the directory after I've gotten to the last image instead of having to open it separately.
It's awesome that Xee can show .mov files! It's perfect for showing a quick movie demo in line with jpegs!
Has anyone created a branch of 2.2 with support for .webp?
Old version is much faster on my system.Dont know why x3 so slow.Shame because thats the main reason for using it.