News for hackers. Stuff that matters.

A comment on Techniques To Simplify Sign-Ups and Log-Ins. Parent comment

Re:Techniques To Simplify Sign-Ups and Log-Ins by palish on Thursday May 05, 2011 @11:38AM (#2517751)
No client-side method can ever work against a sufficiently motivated spammer.

For example... 1) Start capturing packets via wireshark. 2) Fill out the form. 3) Replay the captured packets, altering the username.

Presto, now you can sign up as fast as you want.

[ Parent | on HN ]
Re:Techniques To Simplify Sign-Ups and Log-Ins by jcampbell1 on Thursday May 05, 2011 @01:00PM (#2518066)
The strategy you suggest, capturing packets, won't work against any reasonably modern codebase that has XSRF prevention. I agree with your initial statement, but I highly recommend Seleinum scripts instead of wireshark for your spamming needs. It is slower, but much more likely to actually work.
[ Parent | on HN ]