FUCK RECAPTCHA

[nexussays]

FUCK THIS FUCKING PIECE OF SHIT TRASH. THIS IS MALWARE. THIS IS MALICIOUS MENDACIOUS FUCKING FAILURE OF SOFTWARE THAT IS PROVABLE COMPLETELY INCAPABLE OF DOING ANYTHING REMOTELY CLOSE TO DISTINGUISHING HUMANS FROM BOTS. IT IS COMPLETE AND UTTER BULLSHIT EXCREMENT TRASH. IT PERFORMS ZERO UTILITY TO ANY HUMAN ON THIS FUCKING PLANET.

FUCK YOU!!!!!!!!!!!!!!

[frostproto27]

wow

[Unbloated]

ok

[VodeniZeko]

This garbage is a perfect example of Einstein's theory of infinite human stupidity.

FUCK RECAPTCHA

[lcy1719]

I support you. This is a fucking stupid verification system. It's a stupid fucking opening the door for stupid fucks. It's stupid fucking home.

[wh1t3h47]

This is hilarious

But really, how would you tackle the problem?

For instance, I have a login section, it can be brute forced

If I lock the login attempts for a single IP, it can be bypassed by using a proxy or botnet

If I lock the login attempts for a user with too many login attempts, I can leave a legit user out of the application, and also the attacker can bruteforce different usernames with a common password

If I lock by password, then, well, I leave it possible to guess which users (locked) have a given password

How would you solve this problem without implementing a captcha?

I also don't like captcha, but I'm lacking an alternative for the web apps I develop

Also public/ private key logins or other auth schemes are not user friendly

OTP Auth could be done, but captchas are not only for logins, but for other actions too

[TheZitroX]

Agree here aswell!

[simonhughxyz]

This is hilarious

But really, how would you tackle the problem?

For instance, I have a login section, it can be brute forced

If I lock the login attempts for a single IP, it can be bypassed by using a proxy or botnet

If I lock the login attempts for a user with too many login attempts, I can leave a legit user out of the application, and also the attacker can bruteforce different usernames with a common password

If I lock by password, then, well, I leave it possible to guess which users (locked) have a given password

How would you solve this problem without implementing a captcha?

I also don't like captcha, but I'm lacking an alternative for the web apps I develop

Also public/ private key logins or other auth schemes are not user friendly

OTP Auth could be done, but captchas are not only for logins, but for other actions too

Borrow the Proof of Work idea from bitcoin. If a browser wants to log in, it has to solve a hash to a determined number of 0's, its adjustable to hardware improvements, its a tried and battle tested system, its automated so the user does not get peed off.
You can also increase difficulty for suspicious IP's and users ets.

[AndNotOr]

FUCK RECAPTCHA

[arshx86]

every time i see google recaptcha i just leave the site no matter what is it, the biggest mistake of humans ever created