Email or username:

Password:

Forgot your password?
Top-level
Josh Cheshire :padres:

@FreakyFwoof @ellesaurus Is there a better captcha service? (I’ve never looked beyond the recommendations and want to try doing better than the default.)

8 comments
Andre Louis

@josh @ellesaurus The sad thing is, they all suck for various reasons but I don't know if any others take your email address. Rock and a hard-place I know.

Elle 💗

@josh
@FreakyFwoof This is a bit of security by obscurity because it doesn't stop targeted attacks, but this is what I do to prevent automated form submissions without a captcha.

Add a honeypot field, as well as a timer for how long it took to fill out the form. If the honeypot field is filled in, or if the form is submitted too quickly, disregard.

Josh Cheshire :padres:

@ellesaurus @FreakyFwoof In the end, they’re all just speed bumps. But I like that idea.

Jared Rimer

@ellesaurus @FreakyFwoof How do I add these to my forms? The honeypot field I've never heard of, and a timer sounds interesting. But in theory, someone could take less time to fill out a form than others.

Elle 💗

@jrimer2023
@FreakyFwoof The honeypot field would just be a hidden text input in the form so no human would enter anything in, but a bot would.

The time to fill out the form can be done in multiple ways, but the simplest is another hidden field that is populated with the timestamp of initial page load that submits with the form. Subtract that from the current time to get how long it took.

The timer is meant to be very short, like a few seconds.

Jared Rimer

@ellesaurus @FreakyFwoof That's very interesting. Anywhere in particular in which we hould do that?

Jared Rimer

@ellesaurus @FreakyFwoof I'm not sure how I would implement this. I know HTML, and I tried my hand at CSS even after I was given a prototype but i could never master the concept. This sounds intriguing.

Go Up