search

google / recaptcha

PHP client library for reCAPTCHA, a free service to protect your website from spam and abuse.
http://www.google.com/recaptcha/
BSD 3-Clause "New" or "Revised" License
3.49k stars 777 forks source link

FUCK RECAPTCHA #545

Open nexussays opened 7 months ago

nexussays commented 7 months ago

FUCK THIS FUCKING PIECE OF SHIT TRASH. THIS IS MALWARE. THIS IS MALICIOUS MENDACIOUS FUCKING FAILURE OF SOFTWARE THAT IS PROVABLE COMPLETELY INCAPABLE OF DOING ANYTHING REMOTELY CLOSE TO DISTINGUISHING HUMANS FROM BOTS. IT IS COMPLETE AND UTTER BULLSHIT EXCREMENT TRASH. IT PERFORMS ZERO UTILITY TO ANY HUMAN ON THIS FUCKING PLANET.

FUCK YOU!!!!!!!!!!!!!!

frostproto27 commented 7 months ago

wow

Unbloated commented 7 months ago

ok

VodeniZeko commented 6 months ago

This garbage is a perfect example of Einstein's theory of infinite human stupidity.

FUCK RECAPTCHA

lcy1719 commented 4 months ago

I support you. This is a fucking stupid verification system. It's a stupid fucking opening the door for stupid fucks. It's stupid fucking home.

wh1t3h47 commented 13 hours ago

This is hilarious

But really, how would you tackle the problem?

For instance, I have a login section, it can be brute forced

If I lock the login attempts for a single IP, it can be bypassed by using a proxy or botnet

If I lock the login attempts for a user with too many login attempts, I can leave a legit user out of the application, and also the attacker can bruteforce different usernames with a common password

If I lock by password, then, well, I leave it possible to guess which users (locked) have a given password

How would you solve this problem without implementing a captcha?

I also don't like captcha, but I'm lacking an alternative for the web apps I develop

Also public/ private key logins or other auth schemes are not user friendly

OTP Auth could be done, but captchas are not only for logins, but for other actions too