On Sat, Feb 9, 2013 at 10:33 PM, Tully Foote <tfoote@willowgarage.com> wrote:
> I've changed the textcha content to try to slow it down.  We'll look at more
> permanent solutions if the spammers figure this one out quickly.

Just FYI, we have the same issues with orocos.org. We even tried to
change the login URL to something 'unique' such that automated logins
were not possible anymore. This had no effect whatsoever (not even for
a short period), so I'm guessing that  it's 'cheap' people doing this,
or they are really crawling/parsing the html code, looking for a
'registration' href text.... beats me.

Also, we were raising the captcha to such a level that users started
complaining... so I had to lower the noise/distortion again.

We ended up with approving each account manually, guessing validity by
the looks of the username and email address... or waiting for a
complaint.

Since we're using Drupal, we might actually drop the authentication
all together and use a service like Mollom to check anonymous posts...
maybe.