Log in

View Full Version : Implementation of a captca / 2 factor authentication


Kujiro
August 26th, 2011, 06:56 AM
It just came to me, what about trying to implement a captcha during login , or a 2nd factor authentication.

It should be a hassle for the bots?
But such a move may and likely incur cost.
Just a thought.
*ponders*

Giles
August 26th, 2011, 06:59 AM
Please God anything other than a captcha. I'm really bad at those.

I guess you mean every time we log in too?

Infidelitas
August 26th, 2011, 07:03 AM
I guess you mean every time we log in too?

Every time we log on O_O? Thats a bit over the top

Giles
August 26th, 2011, 07:07 AM
Every time we log on O_O? Thats a bit over the top

I agree, he said during login so I guess that's what he means.
It does make sense as another way to deter bots but it depends if you see it as too much of a hassle for regular members too, which I do.

Infidelitas
August 26th, 2011, 07:09 AM
I agree, he said during login so I guess that's what he means.
It does make sense as another way to deter bots but it depends if you see it as too much of a hassle for regular members too, which I do.

Bots generally come here, post a couple of posts, then leave for good.
It will be too much of a hassle to do it every time you log on. If you have a decent one to start off with....

Kujiro
August 26th, 2011, 07:13 AM
Yup those weird randomized words.
That generate which expire upon 30 seconds.
It should help deter bots in a long run.

My admins on other forums are trying to implement that during login and registration.
The ruled out during posting, as it's really too much of a hassle.

*ponders*

Giles
August 26th, 2011, 07:15 AM
Don't you think it's a bit much though, having to enter a captcha every time you log in?

SimplyTom
August 26th, 2011, 07:16 AM
Don't you think it's a bit much though, having to enter a captcha every time you log in?

i dont really fancy this thank you i think it would deter new members coming back as well

Kujiro
August 26th, 2011, 07:20 AM
Security and convinience are always at loggerheads :(
Maybe it would deter member, but it too filters people whom are really interested from people who aren't.
And maybe at 100+ post they can choose to disable it?

Giles
August 26th, 2011, 07:24 AM
And maybe at 100+ post they can choose to disable it?

When I first saw that I thought it seemed good but then comes the point about putting new members off.

SimplyTom
August 26th, 2011, 07:25 AM
When I first saw that I thought it seemed good but then comes the point about putting new members off.

maybe we could just have it for the first week for new members by that time bots are usually gone

Infidelitas
August 26th, 2011, 07:25 AM
If the users log back in, its likely the user is not a bot. And if you put a capatcha at registration, if they get around that, they will be able to get around the one at log in.

One at log in reallllllly is not necessary

It will be annoying

Kujiro
August 26th, 2011, 07:33 AM
maybe we could just have it for the first week for new members by that time bots are usually gone

Yup that was what i was thinking, a week for new members would be a good idea.

And if a member is really like interested, im sure they would beable to survive a week of captca.

Infidelitas
August 26th, 2011, 07:40 AM
If you put a capatcha at registration, if they get around that, they will be able to get around the one at log in.

Yup that was what i was thinking, a week for new members would be a good idea.

And if a member is really like interested, im sure they would beable to survive a week of captca.

Capatcha at registration = all you need.

ShatteredWings
August 27th, 2011, 08:19 PM
I hope you meant register, I really do. Bots tend to log in once and then never come back, so it's not lke that would do anything.

Kujiro
August 27th, 2011, 10:28 PM
Actually i was suggesting if it should be implemented, but at which entry point, it can be discussed later on if the idea is accepted i'd supposed.

But at registration would be a good idea if bot only appear once and disappear.

TheMJS
August 28th, 2011, 03:37 AM
Just on signup?

Kujiro
August 28th, 2011, 03:40 AM
That would be pretty ideal.
It depends where would it benefit the entire committee, definately to administrator's discretion.

Weeping
August 31st, 2011, 11:25 AM
It's a good idea, especially now, since like 90% of all new threads are fucking bots.

Though it should only be on signup.. I mean every login? No thanks.

RockinRobyn
August 31st, 2011, 04:28 PM
just on sign up would be ideal. Alot of forums have human verification so I think just sign up would be fine. But every log in that would be a hassle and not to mention annoying

SosbanFach
August 31st, 2011, 04:35 PM
The dreaded captcha! How I hate them! *shudders*

But I do agree that something has to be done; there are too many bots to ignore. Captcha at registration would be good, but not at login.

Jess
August 31st, 2011, 05:15 PM
how about captcha for posts? Like, you have to also type in the Captcha before you can submit your post. it'll go away...after like 5 posts...

crazyhyperway
August 31st, 2011, 08:21 PM
The dreaded captcha! How I hate them! *shudders*

But I do agree that something has to be done; there are too many bots to ignore. Captcha at registration would be good, but not at login.

I like this Idea. Login would be too much, but, at registration, the bots would not be able to figure it out.

how about captcha for posts? Like, you have to also type in the Captcha before you can submit your post. it'll go away...after like 5 posts...
This would also work too but, it may deter new members bc they would think it is a normal thing.

Infidelitas
August 31st, 2011, 08:47 PM
I like this Idea. Login would be too much, but, at registration, the bots would not be able to figure it out.


This would also work too but, it may deter new members bc they would think it is a normal thing.

Thats why you put under the capacha that it is only for the first [X number of posts]

crazyhyperway
August 31st, 2011, 08:50 PM
Ah, ok I get it now. But, I still think it should be for the registration

Kujiro
August 31st, 2011, 08:53 PM
Many interesting opinions we have recieved thus far.
Wonder what would the admins say about it.

*smile*

Jess
September 1st, 2011, 06:22 AM
I like this Idea. Login would be too much, but, at registration, the bots would not be able to figure it out.


This would also work too but, it may deter new members bc they would think it is a normal thing.

that's why there'll be a message saying that you won't have to solve the Captcha when you reach 5 posts

Kaius
September 1st, 2011, 09:06 AM
The problem is most bots now are like a human illness, they'll become immune to the things we do and they'll be made smarter, it won't ever really stop them getting in completely because the manufacturing never stops, they're always advancing. It might work for the time being but to be honest the bots aren't a major problem, its more hassle to keep installing things to keep them out than to just report, freeze and kick them back out. Its a normal days work for the mods, its not a problem.

SosbanFach
September 1st, 2011, 11:03 AM
The problem is most bots now are like a human illness, they'll become immune to the things we do and they'll be made smarter, it won't ever really stop them getting in completely because the manufacturing never stops, they're always advancing. It might work for the time being but to be honest the bots aren't a major problem, its more hassle to keep installing things to keep them out than to just report, freeze and kick them back out. Its a normal days work for the mods, its not a problem.

Even so, implementing Captcha at registration could potentially reduce numbers of bots on the site, freeing up moderators' time, which would hardly be a bad thing.

Kaius
September 1st, 2011, 11:06 AM
Thats partly the reason the moderators are here, if they don't really like the workload they wouldn't be moderators. The number of bots don't really affect anything and actually it takes 5 minutes to sort the majority of them out, a little bit more if theres posts that need deleting.

Donkey
September 1st, 2011, 11:16 AM
Thats partly the reason the moderators are here, if they don't really like the workload they wouldn't be moderators. The number of bots don't really affect anything and actually it takes 5 minutes to sort the majority of them out, a little bit more if theres posts that need deleting.
We should start having races. I know I can sort a bot out in 60 seconds flat.

BUT regardless, I think captca is a pretty good anti-spam system. Problem is, it's not really the bots getting better as opposed to this version of vBulletin becoming older and not being updated: the problem will only get worse, and in my memory on VT it already has been doing so

DerBear
September 1st, 2011, 12:52 PM
I have only been here a few months!

And when I started out on VT i had seen little "bot" "Action". But know I am seeing it a lot sure Donkey you can sort a bot out very quickly and even quicker if someone reports it but like you said we need to update, We NEED anti spam protection. I dont want to see more post about Iphones or Naked wommen that come from porn sites.

We NEED to update and sure it is a kick in the teeth but we NEED to move forward and tackle this head on "grip the bull by its horns" my recent forums that I created were attacked by SPAM bots and I delt with it by updating and increasing more anti Spam fillters and I have had little problem since.

We NEED to act as we have to do this or we will become over run with SPAM BOTS. We have seen recent increase in SPAM BOTS so we NEED to do something.

I agree with the recent suggestion, so what if its a pain in the arse?

It will be better for all of us in the long term.

OptimusPrime
September 1st, 2011, 03:23 PM
Please God anything other than a captcha. I'm really bad at those.

They're very easy to get through once you get the hang of it. Plus to be honest Captcha does not do a great deal. There are forums out there that have Captcha and are still being hit. Bots are clever.

Amazing none of them have gone for visitor messages yet.

Donkey
September 1st, 2011, 05:52 PM
They're very easy to get through once you get the hang of it. Plus to be honest Captcha does not do a great deal. There are forums out there that have Captcha and are still being hit. Bots are clever.

Amazing none of them have gone for visitor messages yet.
They have, but their visitor messages are moderated ;)

Infidelitas
September 1st, 2011, 06:58 PM
Amazing none of them have gone for visitor messages yet.
When I was mod, I saw a fair few in the VM moderaration queue, but they didn't have an effect, because noone sees them, as we delete them straight away.

OptimusPrime
September 1st, 2011, 07:10 PM
Isn't there akismet for VB?