3 ms·
Definitely worth adding a captcha and verifying email.
by diegorbaquero 8y ago
Definitely worth adding a captcha and verifying email.
- jakobegger 8y agoMake the service worse for everyone just because one guy abused it...
- TheCapn 8y agoMake the service "worse" because the potential for wide abuse is present. Finding a fine line is probably what's required. Having your tool suffer DDoS from known exploit vectors harms all the legitimate users at the expense of some bot-writer's pleasure. Arguably this is the basis of many laws that govern our lives. Lots of rules are in place and enforced because individuals found ways to ruin things for everyone else
- robotresearcher 8y agoYou have a lock on your front door and a password on your computer, right?
- ythn 8y agoYeah but if a neighborhood kid with a lockpick breaks into your house, installs cryptomining sw on your computers, laughs at how weak your lock is, admonishes you to spend more money in better security, what will you do? Take his advice and buy a better lock?
- robotresearcher 8y agoThere was no lock in this case. We're metaphorically going from an open doorway to a conventional front door. Adding just a little friction means the tweaker poops on someone else's rug.
- liquidise 8y agoCaptcha is a lazy way out. Please take a superior solution for your users. Google's "I'm not a robot" variant positively detests VPN ip's. There are services i _pay_ for that have, unintentionally, all but locked me out while on a VPN because the captcha process is so prohibitive.