Google's Captcha in Firefox vs. in Chrome • Hacker News Board

Re: Google's Captcha in Firefox vs. in Chrome

#501

Post by LaGrange » Fri, Jun 14, 2019, 7:49 PM UTC

Kaiyou wrote: post #476

LaGrange wrote: post #443

Earlier quoted context omitted.

> By the account. 3 failed login attempts in a row, and you disallow further logins for 30 seconds. ...congratulations, I just locked out all of your users. Have a nice day.

How did you get the email addresses of all my users, which are used as login name?

From that messed up email from support that leaked them. Or I assumed that you'll have a big cross-section with some other site that leaked.

This is not theory, this is hard-earned experience. Locking-out people is bad, the most that's acceptable is rate limiting to a once every few seconds.

Re: Google's Captcha in Firefox vs. in Chrome

#502

Post by bluehatbrit » Mon, Jun 17, 2019, 1:39 PM UTC

_emacsomancer_ wrote: post #405

bluehatbrit wrote: post #140

I'm from the UK and often get very American questions. Such as "select all the images with cross-walks". This isn't really a phrase we have over here, so when I first got this I had no idea what I was meant to be looking for in the array of random pictures and actually had to look it up to get past it. If you're going to force me to do a captcha, at least localise the damn questions. Do other non-American's get this…

They're zebra crossings, but I suppose you know that by now. The captchas are completely non-localised as far as I can tell; as others have pointed out the 'store-fronts' tend to be non-American.

Generally it's not too hard to find something in a picture that is from another country, but the actual request text should really be localised. I usually go for the audio ones now though rather than the visual ones.

Re: Google's Captcha in Firefox vs. in Chrome

#503

Post by xvector » Mon, Jun 17, 2019, 7:55 PM UTC

tylerl wrote: post #468

grinsekatze wrote: post #270

Earlier quoted context omitted.

I just wasted ~15 minutes on doing the disqus login captcha under different conditions .. turns out that as soon as uMatrix is enabled (and blocks 18 cookies from google.com and 5 more from www.google.com), it starts to act up and get annoying..at least for me. It then takes between 1 minute and 1 minute 30 to get past the recaptcha when blocking those cookies - and I was certain to be 100% correct in most cases and…

The fade thing is to rate limit attackers. By blocking specific cookies you're making yourself look like a certain kind of botnet, so obviously you're going to have a difficult time convincing the site that you're a legitimate user. Most users don't block normal cookies, so if you go tweaking the machinery that manages the relationship between your browser and the site, then be prepared to deal with a buggy experienc…

Once again, Google obstructs the web for people who take even basic privacy measures.