Mars icecream 57 Share Posted August 6, 2016 Looks like that CAPTCHA images are hostend on Imgur - is this a long-term solution? From Imgur TOS: don't use Imgur to host image libraries you link to from elsewhere, content for your website, advertising, avatars, or anything else that turns us into your content delivery network Mirh 1 Link to comment Share on other sites More sharing options...
Guest Share Posted August 6, 2016 Try bugging someone here. http://community.pcgamingwiki.com/page/irc Maybe they asked for permission? I have no idea. Are the photos really on imgur anyway? That would be wierd. I can't even remember if I ever noticed this. Link to comment Share on other sites More sharing options...
Mars icecream 57 Author Share Posted August 6, 2016 I am in no hurry, CAPTCHAs have likely existed since the creation of PCGW. The photos absolutely are hosted in Imgur, I didn't reupload my example image. Link to comment Share on other sites More sharing options...
Guest Share Posted August 7, 2016 I am in no hurry, CAPTCHAs have likely existed since the creation of PCGW. The photos absolutely are hosted in Imgur, I didn't reupload my example image. Did they look into this yet? Link to comment Share on other sites More sharing options...
Marioysikax 89 Share Posted August 7, 2016 I remember there being discussion that the current captcha system is no longer supported in newer version of software used and will get replaced at some point. And yes, currect captcha images are on imgur, I'm just amazed that there aren't more bots coming trough because that seems like the most easily hackable captcha these days: reverse image search instantly tells the game name, url to image is always the same, pretty easy to match the image to images on steam in some way, etc. http://imgur.com/a/SEpRK Mars icecream 1 Link to comment Share on other sites More sharing options...
Blackbird 54 Share Posted August 8, 2016 It should just use the Google captcha tbh. It's honestly least annoying(IMO). That is if there will be captcha still. Link to comment Share on other sites More sharing options...
Guest Share Posted August 8, 2016 It should just use the Google captcha tbh. It's honestly least annoying(IMO). That is if there will be captcha still. I keep failing that all the time. Also I don't think it would be too difficult to write a bot to bypass it. Link to comment Share on other sites More sharing options...
Marioysikax 89 Share Posted August 8, 2016 I keep failing that all the time. Also I don't think it would be too difficult to write a bot to bypass it. To me, 90% of the time google captcha is literally just "click this checkbox" because they seem to have system in place to calculate probability of user being a bot. If they give something, it's usually pretty easy street sign to write, instead of giving impossible puzzles and unreadable text. It's googles captcha we are talking about. If you were able to write bot to bypass it easily, I'm certain they will pay you good summ of money for doing that and then improve the aspects that bot were using. Blackbird 1 Link to comment Share on other sites More sharing options...
Guest Share Posted August 8, 2016 To me, 90% of the time google captcha is literally just "click this checkbox" because they seem to have system in place to calculate probability of user being a bot. If they give something, it's usually pretty easy street sign to write, instead of giving impossible puzzles and unreadable text. It's googles captcha we are talking about. If you were able to write bot to bypass it easily, I'm certain they will pay you good summ of money for doing that and then improve the aspects that bot were using. Someone did bypass it though, but they patched the vulnerabilities. And I mentioned me failing it because I thought it was funny, I don't mind Google Captcha. Link to comment Share on other sites More sharing options...
Mars icecream 57 Author Share Posted August 9, 2016 Please don't use Google CAPTCHA. To me they are annoying to solve, when Google redesigned their CAPTCHA system solving these brainteasers often took minutes.I don't use any antivirus on Windows and I block third-party frames be default using uMatrix. I hope you can implement PCGW's own challenge-response test, similar to Steam and Reddit. Link to comment Share on other sites More sharing options...
Blackbird 54 Share Posted August 9, 2016 I block third-party frames be default using uMatrix lol the paranoia is strong do you also block javascript because tinfoilers on reddit told you to so you have 99% of web broken? Also minutes? How is that even possible. Mirh 1 Link to comment Share on other sites More sharing options...
Blackbird 54 Share Posted August 9, 2016 We cannot and will not implement our own solution, as it would be guaranteed to be a lot less effective at combating spam, and we simply do not have the resources to create one ourselves - PCGW is still 100% taken care of in volunteer fashion. This. This right here. All is takes is for someone to find all the solutions and boom. Protection is useless and you might as well start from scratch. There is a reason most forums/sites rely on 3rdparty captcha services as they can get patched without the owner doing the work. Pretty much all big sites use Google's since they have lots of resources to combat this. Link to comment Share on other sites More sharing options...
Mars icecream 57 Author Share Posted August 9, 2016 lol the paranoia is strong do you also block javascript because tinfoilers on reddit told you to so you have 99% of web broken? Also minutes? How is that even possible. I block frames because I hate embedded content on websites - I hate embedded YouTube videos, Spotify playlists, social media like buttons and store spam. I'm glad I found a way to get rid of all that content, can reduce load more than adblocking. The reason for blocking JavaScript isn't increased security alone but reduced clutter. Without JS websites can't autoplay video/audio as far as I know and animations are greatly reduced. I turn of depth of field, motion blur, screen effects, lens flare and so on always off in games too. Looks like that PCGW can be used without JS with the exception of the file uploader. Google CAPTCHAS were far more difficult after the system was redesigned, more comparable to notoriously difficult CloudFlare CAPTCHAs. Link to comment Share on other sites More sharing options...
Blackbird 54 Share Posted August 10, 2016 If you use decent adblocking lists you never need to do all that pointless placebo. I don't remember last time I saw any autoplaying content or the dumb social buttons. You're just wasting your time for no benefit tbh. Link to comment Share on other sites More sharing options...
Marioysikax 89 Share Posted August 10, 2016 Google CAPTCHAS were far more difficult after the system was redesigned, more comparable to notoriously difficult CloudFlare CAPTCHAs. Like said, for majority the google captcha is simply checkbox, one or two times I had to write street sign containing 3 numbers, that's it. So basically what that means is that you are blocking so much stuff that google can't determine are you a bot or user with their algorithms, so only way they can do that is trough the old styled captcha puzzles, but they have to be really freaking hard so that modern computers can't guess it in any scenario. If they did easier puzzles, they would have hole where bots could come trough and as the service is being used in many places I'm certain many would love to have that hole. I would still argue that it's the best captcha there is, really simple and easy for regular users and no bots can get trough. Like soeb said, it's to be seen when the change happens, best case scenario you do not need to ever use the captcha if it's only used on registeration form. If you use decent adblocking lists you never need to do all that pointless placebo. I don't remember last time I saw any autoplaying content or the dumb social buttons. You're just wasting your time for no benefit tbh. This is a whole another discussion topic to have. I know several people who are similar, you are going to have as much luck as making linux fanatic to switch to windows. Also you are being just really rude :| And there really are tons of more stuff on websites these days which can be considered as clutter and which adblock will not block without constantly updating the blacklist and rules. I have not used adblock in years, because internet speeds, screen resolutions and machines horsepowers are pretty good these days no matter how much clutter and ads there are on pages, but I do understand the desire to have everything as efficient and clean as possible. But then again I wouldn't go my way to fight againts websites decisions to serve 99% of users best possible way if I belong to under 1% that have everything blocked and disabled by my own decision. Link to comment Share on other sites More sharing options...
Recommended Posts