Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #2362

Re: When two-factor authentication isn't enough

Show all headers | View raw

 
> All these mailing lists failed to use double or confirmed opt-in, so someone was 
> simply able to enter the email address into a form and sign us up, no confirmation 
> required. This really is poor practice, but it�s still pretty common out there. 

Oops. I do this on my site, you can just enter an email to sign up for updates. 
Luckily I've avoided the trap here http://theoatmeal.com/comics/email (eighth panel) 
and you can unsubscribe without logging in. 
What's the best way of handling this? Is using a captcha enough or do you need 
to have a challenge/response. 
P.S. look at the page source in the link. 
-- 
regards
~tdk
View this thread at http://squte.com/node/5784#comment-23848

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

When two-factor authentication isn't enough RS Wood <rsw@therandymon.com> - 2014-04-10 11:46 +0000
  Re: When two-factor authentication isn't enough "tdk" <forum.tdk@squte.com> - 2014-04-11 12:05 -0500
    Re: When two-factor authentication isn't enough Andy Burns <usenet.feb2014@adslpipe.co.uk> - 2014-04-12 08:51 +0100

csiph-web