Goggles noCaptcha reCAPTCHA

[RMcGirr83]

Isn't it better to have "only" 2 working captchas (for the end-user) instead of more with some broken ones?

+1

While quantity is nice, quality is always better.

[Louis7777]

Would the 2 working captchas be the Q&A and the "noCAPTCHA reCAPTCHA"?

I've always used the GD CAPTCHA along with daroPL_AntiSpam for 3.0.x and never got any spammers.

Maybe I have been lucky... or maybe it is not totally worthless?

Perhaps it's better to keep it if it can still stop at least the majority of spammers (and because it doesn't require a private key and I don't like to depend on Google ).

[Pony99CA]

Would the 2 working captchas be the Q&A and the "noCAPTCHA reCAPTCHA"?

That's what I think.

I've always used the GD CAPTCHA along with daroPL_AntiSpam for 3.0.x and never got any spammers.

Maybe I have been lucky... or maybe it is not totally worthless?

According to Kevin on the Support team, all "squiggly letter" CAPTCHAs have been broken.

I doubt that you've been lucky -- that MOD has probably kept the spammers out. Try switching to a simple Q&A CAPTCHA (like "Are you a spammer?") and see if you have any problems. If not, keep the Q&A CAPTCHA (it's more accessible than image-based CAPTCHAs, too -- why annoy your users if you don't have to? ).

Steve

[aleha]

+1 for having this in the core, replacing current reCAPTCHA
+1 for keeping Q&A, using noCAPTCHA reCAPTCHA, and removing "unfixable" captcha code

[Louis7777]

I doubt that you've been lucky -- that MOD has probably kept the spammers out. Try switching to a simple Q&A CAPTCHA (like "Are you a spammer?") and see if you have any problems. If not, keep the Q&A CAPTCHA (it's more accessible than image-based CAPTCHAs, too -- why annoy your users if you don't have to? ).

I know it was the MOD but it was applied on the GD CAPTCHA, so maybe we should tweak it and keep it?

[Elsensee]

I know it was the MOD but it was applied on the GD CAPTCHA, so maybe we should tweak it and keep it?

This might help but only for some time.
In general, CAPTCHAs are only really safe if they aren't used widely. If they're used widely, more spammers will try to break them. (with success, unfortunately)
I know, you were talking about that modification but that's just the same thing. It's a simple measure and won't keep spammers out for very long.

The Q&A CAPTCHA however works better since it uses simple questions, instead of pictures, which can easily be removed and added. So if you're noticing that the questions are too weak, just remove them, add some new and your forum is protected again.

I don't know exactly how Googles new technique in their noCAPTCHA reCAPTCHA works but it looks very promising. We should definitely integrate this into the core.

[RMcGirr83]

Ticket created

https://tracker.phpbb.com/browse/PHPBB3-13789

[jsebean]

+1 for having this in the core, replacing current reCAPTCHA
+1 for keeping Q&A, using noCAPTCHA reCAPTCHA, and removing "unfixable" captcha code

I agree with this, but I'm concerned with quick installs of boards where board maintainers may not quite understand the implications of not configuring their captcha. Of course, it would be no different from now, where the captchas are broken. However, shouldn't the installer at least tell them or give them an option to set their Q&A questions or give them the option to apply the API key from the installer, and advise them that by not doing either they risk a spam infested board?

JMHO
-Jonah