jonesdevelopment / sonar

Sonar is a lightweight, effective and easy-to-use anti-bot plugin for Velocity, BungeeCord, and Bukkit.
https://docs.jonesdev.xyz
GNU General Public License v3.0
142 stars 12 forks source link

Feature Request: Particle Effect CAPTCHA #338

Closed TianmuTNT closed 5 months ago

TianmuTNT commented 5 months ago

Information

2024-06-08_00 32 26 I would like to propose the addition of a new feature to the anti-bot plugin: a particle effect-based CAPTCHA. This feature aims to enhance server security by reducing bot bypasses and simplifying the player joining process. This feature is not directly related to any existing issues or errors. However, it addresses the need for improved anti-bot measures.

Reason

Particle effect CAPTCHAs are almost impossible for bots to bypass. Traditional image-based CAPTCHAs can be cumbersome for players, especially those who struggle with reading complex images.

Additional information

My English is not very good, and I am using translation software. If there is any confusion in my message, I apologize.

jonesdevelopment commented 5 months ago

Hi, I've seen this before, and decided not to implement something like this.

Reasons:

TianmuTNT commented 5 months ago

Hi,

Could we add an option in the configuration file to enable or disable the particle effect captcha? Additionally, we could include an option to adjust the size of the particles forming the text. This way, we address both concerns you mentioned.

jonesdevelopment commented 5 months ago

Could we add an option in the configuration file to enable or disable the particle effect captcha

Sorry, but "just make it configurable" isn't going to resolve the problem. It's just more work for me to do. I don't think it's worth it.

include an option to adjust the size of the particles forming the text

I would still need to have a timer task running in the background that sends all particles. Making the particles resizable makes it just more complicated to implement this feature.

Additionally, people are given the option to disable particles in the vanilla Minecraft client. With maps, people will always see what we display. No mod will change the inbound packets to display a different map. With particles, people can just turn them off, and many people actually do. There are mods designed to remove particles, as they are usually bad for client performance.

I think using particles is even worse than a traditional map CAPTCHA. Attackers would need to collect the X and Y positions of the particles and then they can use AI to get the text from the coordinate system of all points. This doesn't even require an advanced image recognition AI, as there are no effects applied on the text.

image

The use of different colors makes it actually easier to decipher the code.

TianmuTNT commented 5 months ago

No worries! Thank you for developing such a useful plugin and taking the time to explain it to someone like me.