Evading antispam captchas

[Drsolly <drsollyp () drsolly com>]

I don't know if they're doing this on purpose, but here's the thing.

I get an email from someone "To control spam I only allow ...", and I have 
to click on a link which leads to a captcha, and I read the hard-to-read 
characters and type them in.

All of this is pretty much done on automatic pilot.

And I get a message back saying that my email will now be delivered, as 
will all subsequent emails from me. 

At that point, I notice that the from-name isn't mine. It's Paula Mayo.
And the to-name isn't anyone I know.

So, I guess that I've now opened the floodgates of spam to some poor user.


And then I thought a bit more. 

If you wanted to tempt people to visit a web site to drive-by them, this 
would be a good way to do it (I'm not too worried that this will happen to 
me, I run Linux).


I still think that the only way to beat spam will be the Penny Post.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.