Require email or captcha until this is resolved?

3 years ago by can to c/main

Sorry, idk how to cross post yet but I saw this? There's an exploit allowing mass registrations.

TheDude 34 points 3 years ago

Captchas have been enabled on this instance.

path: 0 334968, hotness: undefined, score: 34, children: 5

can 9 points 3 years ago

Good to know, thank you. I wanted to tag you but wasn't sure if that was possible. Was the change made in relation to this or had you already previouslly decided to implement one?

Also, if this was addressed somewhere else already and I missed I'm sorry for reosting.

save

path: 0 334968 335117, hotness: undefined, score: 9, children: 2

TheDude 16 points 3 years ago

Something I probably missed when I first spun up this instance to be honest. Should have been enabled from day 1.

save

path: 0 334968 335117 336279, hotness: undefined, score: 16, children: 1

can 6 points 3 years ago

Ehh, first few days I can see the benefit of having the lowest barrier to entry as possible. No one knew there was an API exploit then.

save

path: 0 334968 335117 336279 336567, hotness: undefined, score: 6, children: 0

snakesnakewhale 2 points 3 years ago

Sweet, this comment should be pinned

save

path: 0 334968 359848, hotness: undefined, score: 2, children: 1

truckkun 3 points 3 years ago

comments cannot be pinned 😌

save

path: 0 334968 359848 360306, hotness: undefined, score: 3, children: 0

Bobo_Palermo 10 points 3 years ago

Captcha. I don't like the idea of email verification...they provide little safeguard.

save

path: 0 337459, hotness: undefined, score: 10, children: 0

carrot 6 points 3 years ago

Definitely captcha. Email anonymity is nice, and I don't want to sign up with my email to everything.

If there is going to be a captcha tho, use hCaptcha or one of the cloudflare ones. Google captcha is just free labor for developing AI and I don't think anyone wants to keep contributing to that.

save

path: 0 360275, hotness: undefined, score: 6, children: 1

can 2 points 3 years ago

Yeah, seeing as they've removed the current captcha form lemmy (?) they'll have to find something.

save

path: 0 360275 364056, hotness: undefined, score: 2, children: 0

death916 3 points 3 years ago

Man they got me with this. Had 20 bot signups B4 I realized and added captcha anyone now how to ban users without them posting something.

save

path: 0 347571, hotness: undefined, score: 3, children: 1

admin 2 points 3 years ago

I’d like an answer for that too

save

path: 0 347571 357542, hotness: undefined, score: 2, children: 0

RoundSparrow 1 point 3 years ago

save

path: 0 336905, hotness: undefined, score: 1, children: 0

Zaphodquixote -4 points 3 years ago

Fuck captcha

save

path: 0 337414, hotness: undefined, score: -4, children: 3

can 3 points 3 years ago

lol

edit: I don't think most people saw that I caught you in my screenshot

save

path: 0 337414 337763, hotness: undefined, score: 3, children: 1

Zaphodquixote 2 points 3 years ago

Ikr?

save

path: 0 337414 337763 420806, hotness: undefined, score: 2, children: 0

truckkun 2 points 3 years ago

then again if i captcha you, you would have to drink a beer and dance around an island called Mariana on the third night of every month.

In fact, I think I know this, but the feeling I get from the air is that you'd be better off following a trail of serendipitous stones. That path will surely find a friend for you in these dark times, to lead you through the island's waters and find some beers for you to surpass the captcha.

Yes.

save

path: 0 337414 360375, hotness: undefined, score: 2, children: 0