search

hivewallet / hive-js

Hive digital currency wallet
http://www.hivewallet.com
GNU General Public License v2.0
81 stars 57 forks source link

Verify user is human when creating a new wallet #25

Closed weilu closed 10 years ago

weilu commented 10 years ago

Captcha of some sort. Maybe: http://demo.visualcaptcha.net/

javgh commented 10 years ago

In my opinion we should try to avoid a captcha if at all possible. I don't see some superfluous database rows as much of a problem. Instawallet created new accounts on each page visit and it ran fine on a $10/month VPS for over a year. We should just pay the extra database cost, if it really comes to that.

The only risk I see, is that someone might want to annoy us on purpose and fill up the database with thousands of accounts with some automated script. Either we should implement some rate-limit for that, or wing it until that actually happens (never did for Instawallet) and clean up the mess then.

weilu commented 10 years ago

Hosted couchdb services, like Cloudant and Iris Couch, charge by the number of requests. With an automated script one can not only fill up our database, but also present us with a fat bill.

Spam accounts may also have implications down the road, once we have features like "request for payment".

I agree that there are few pleasant captcha experiences. If we can't find any acceptable captcha experience, we should have rate limiting on the server side.

weilu commented 10 years ago

Close this until it becomes a problem.