[Mailman-Users] Malicious web subscription requests

2025-06-23 Thread Jayson Smith
Hi, Earlier this evening I received a Yahoo! spam/abuse report, and I'm glad I did since it let me know there was a problem. I quickly discovered that somebody (or maybe more than one somebody) was using the Mailman subscribe form to request subscription for many Email addresses. According t

[Mailman-Users] Re: Malicious web subscription requests

2025-06-23 Thread Mark Sapiro
On 6/23/25 19:19, Jayson Smith wrote: I know there's been lots of discussion about the topic of malicious web subscribes in the past. However, with the two lists I run, there's a special situation. Almost all people subscribing to these lists are blind, so a visual CAPTCHA is entirely inappro

[Mailman-Users] Re: Malicious web subscription requests

2025-06-23 Thread Jayson Smith
Hi again, Thanks for this information. However, I'm not sure this type of CAPTCHA is very effective any more. The problem is that LLM's can, in my experience, effortlessly answer the types of self-referencing questions that have been quite popular with these types of challenges in the past (W

[Mailman-Users] Re: Malicious web subscription requests

2025-06-23 Thread Stephen J. Turnbull
Jayson Smith writes: > Thanks for this information. However, I'm not sure this type of > CAPTCHA is very effective any more. All CAPTCHAs are effective to some degree. Whether a "dumb" text captcha would be effective depends on the sophistication of the attacker. I don't know about the subscr