4 ms·

Not sure you need to make sure the user is human on a log-in form. Just limit the number of attempts per day per account, perhaps with email verification to pas

Not sure you need to make sure the user is human on a log-in form. Just limit the number of attempts per day per account, perhaps with email verification to pass it.

maccard 7y ago
At even small to moderate scales you will end up with legitimate users being locked out of their accounts en masse with this approach.
- spiznnx 7y ago
  Well, most log-in forms do not have any captcha, so I wonder how they do it.