New reCAPTCHA use debated

(30 June ~ 4 July)
The technology has much potential in fighting spam but is difficult to implement on ISPs’ networks, said experts.

ReCAPTCHA uses squiggly archaic text as the code in CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart). By requiring people typing in the code, the technology can prevent spam and digitise archaic text simultaneously. If prompted before users sending out emails, reCAPTCHA can reduce the amount of spam at its source.

But Aquiss customer service agent Martin Pitt said: “I think reCAPTCHA does try people’s patience. I can find myself rather frustrated if my ‘i’ and ‘l’ ” are wrong. Then I get a second code completely different.”

McAfee research scientist Chris Barton said: “For non web-based emails, it’s not technically possible without significant client changes because once you are authenticated (as the user of an ISP), you are logged in. They think it’s you. But for web-based emails, it’s very useful in preventing automated attacks.”

F-secure chief research officer Mikko Hyppönen said: “You can list your email address partially online. People will get the full address only after they solve a reCAPTCHA challenge. Other applications could be any situation where you need to check access to the service is not automated by a bot.”