Question

What's the best way to keep bots out?

CAPTCHAs are annoying; spam comments, even more.

Are there any great bot-screening tools you've used to keep automated signups out while not making onboarding annoying?

Share
michihuber's avatar
3 years ago

I just started receiving bot signups last week – I noticed because I started receiving spam complaints on the verification emails.

Added a honeypot, which worked in keeping them out.
I wonder what these bots accomplish, though.

5 points
maguay's avatar
@maguay (replying to @michihuber )
3 years ago

Interesting. Are you doing that with a decoy/hidden field in your signups?

1 point
michihuber's avatar
@michihuber (replying to @maguay )
3 years ago

Yes, a first_name field with width/height 0 and overflow-hidden on the parent. If filled in, the signup is discarded but shows a success page.

2 points
maguay's avatar
@maguay (replying to @michihuber )
3 years ago

Gottcha, makes sense.

Generally bot signups still strike me as odd—bots trying to comment and leave spam links is one thing, but trying to make app accounts doesn't seem to have any benefit to them. Weird thing to have to fight yet if you don't, your signup numbers are all off.

1 point
awwstn's avatar
@awwstn (replying to @maguay )
3 years ago

@michihuber this is a great idea! We get a handful of bot signups every week. I have no idea what the objective is for the people who are writing these bots, and it's mild enough that it doesn't seem worth making ALL of our users do a captcha. This seems like a great solution!

1 point
michihuber's avatar
@michihuber (replying to @maguay )
3 years ago

I should clarify, I do confirm email addresses and the recipients are real, so I really don't know what these accomplish. I read somewhere that the recipients get spammed so that actually relevant warnings of illicit logins get drowned out (but random signups would appear just as suspicious to me, so seems like a weak theory).

1 point
imaginedesigner's avatar
3 years ago

When I design a Sign-Up / Get Started, I first collect Email ID or Mobile, sometimes other data too. But will only give access to the platform only after the verification. Or any bot reached that level?

1 point
maguay's avatar
@maguay (replying to @imaginedesigner )
3 years ago

Yup verification should catch most if not all bots—though you end up still having to send verification codes to every bot signup. Tiny extra cost/overhead, but not that bad.

2 points
michihuber's avatar
@michihuber (replying to @maguay )
3 years ago

I think it can be bad as the recipients of the bot signup start flagging your email as spam, which may hurt your deliverability over time.

2 points
imaginedesigner's avatar
@imaginedesigner (replying to @maguay )
almost 3 years ago

https://www.geetest.com/en
This tool is using in some crypto trading platforms. And I think this is really not annoying. Check it out

1 point
maguay's avatar
@maguay (replying to @imaginedesigner )
almost 3 years ago

I’ve seen the puzzle piece slider (presumably from Geektesters) on an increasing number of sites, presumably from Geetest. Their CAPTCHAs do seem easier to use than the average, so that’s a win at least!

1 point
What are the best platforms for community management?

We have 15k newsletter subscribers, and have around ~2k of them in a Slack group. We're starting to encounter issues in terms of community management - specifically, it's hard to pin content like c...

Any suggestions for a workaround to an Outlook calendar not syncing with Google Calendars?

Google lets you subscribe to a calendar using a URL - although when using an Outlook 365 Calendar link, events are copied over once, and then the syncing stops. This seems to be a relatively new is...

The community for power users.