# How do spambots get past "human-proving" tests? **URL:** \ **Category:** Factual Questions\ **Created:** [June 11, 2006, 12:38am UTC](https://boards.straightdope.com/t/how-do-spambots-get-past-human-proving-tests/360253 "2006-06-11T00:38:42Z")\ **Posts on this page:** 3\ **Page:** 2
**Author:** ![SpaceDog](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spacedog/32/9932_2.png) [@SpaceDog](https://boards.straightdope.com/u/SpaceDog)\ **Post date:** [June 13, 2006, 5:31pm UTC](https://boards.straightdope.com/t/how-do-spambots-get-past-human-proving-tests/360253/21 "2006-06-13T17:31:58Z")
[QUOTE=chappachula] I’ve heard of another interesting way to defeat the bots: use pictures. the site displays ,in random order,about 10 small photos of similar items (like bicycles and motorcycles), and tells the human to click on the 6 pictures of the motorcycles. it sounds like a good idea…does anybody know if it works? [/QUOTE] The trick is to just use something no-one else is using. As long as it’s sufficently different and you’re not a big enough site to make you a target on your own then the spammers will go elsewhere where it’s easier. It can be something simple as long as it’s different from what everyone else does. The basic problem is that everything a human can do you can train/write a program to do – what you need to do is make each problem different so the rewards for solving any one aren’t worth the effort required. Inspired by something I read elsewhere, can’t remember where and can’t find it tho’. Sorry. SD ---
**Author:** ![iamthewalrus\_3](https://avatars.discourse-cdn.com/v4/letter/i/258eb7/32.png) [@iamthewalrus\_3](https://boards.straightdope.com/u/iamthewalrus_3)\ **Post date:** [June 13, 2006, 6:10pm UTC](https://boards.straightdope.com/t/how-do-spambots-get-past-human-proving-tests/360253/22 "2006-06-13T18:10:35Z")
[QUOTE=psychonaut] Photo CAPTCHAs need to be painstakingly human-generated—that is, the human writing the CAPTCHA puzzle has to take or find the photos, crop them and resize them, upload them to a server, assign them the appropriate keywords (“motorcycle”, “kitten”, etc.), and then enter all this information in a database. On the other hand, text-based CAPTCHA software can generate puzzles at random on the fly by simply choosing words from a dictionary or even picking letters at random. [/QUOTE] When I first heard about photo-based CAPTCHAs, this was the biggest problem. Some guys at CMU were trying to build a little webgame to help better classify pictures. Basically, they’d show the same picture found on Google to several people and you got points based on how quickly you agreed on the subject of the photo. That was a few years ago. Now there’s a better way. The photos have already been laboriously tagged and organized. Here’s the result of a Flickr [search for “motorcycle”](http://www.flickr.com/search/?q=motorcycle&m=tags&z=t). Not _all_ of the pictures are readily identifiable as motorcycles, but the tagging is really quite good. And the keyword search can be done dynamically by the testing computer, mixing any number of keywords. Very very hard for a bot to beat. Of the other problems you mentioned, I think that the language issue is the most important, but it may be necessary to keep the spammers out. ---
**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\ **Post date:** [June 13, 2006, 8:33pm UTC](https://boards.straightdope.com/t/how-do-spambots-get-past-human-proving-tests/360253/23 "2006-06-13T20:33:42Z")
> [@](#): > > That was a few years ago. Now there’s a better way. The photos have already been laboriously tagged and organized. Here’s the result of a Flickr search for “motorcycle”. Not all of the pictures are readily identifiable as motorcycles, but the tagging is really quite good. And the keyword search can be done dynamically by the testing computer, mixing any number of keywords. Very very hard for a bot to beat. Actually, that’d be easy for a bot to beat. The bot just picks out the key word, “motorcycle”, in this case, and does a Flickr search of its own, to see which images come up. Then it sees which of those images that comes up are amongst the ones to be tested. [Previous page](https://boards.straightdope.com/t/how-do-spambots-get-past-human-proving-tests/360253.md?page=1)