4 ms·

Security is not all or nothing. There are many applications where adding a small bit of friction in the form of compute will stop 99.9% of abusive traffic. Visu

Security is not all or nothing. There are many applications where adding a small bit of friction in the form of compute will stop 99.9% of abusive traffic. Visual captchas are a plague on the internet, but so is Blockchain mania. I added FriendlyCaptcha to some of my sites, and stopped 100% of abusive traffic. Open source, user friendly, accessible to people with disabilities. https://friendlycaptcha.com/ https://friendlycaptcha.com/ Most of us are not running amazon.com here.

emporas 3y ago
Nice solution, if that works for your site, perfect. If i may add, in case someone desires a little bit of revenue from a website, one very popular solution is to put advertisements in some places. Well some people consider that a security hole, including me. So i guess the definition of security varies, but the security mania goes on for many decades. I am one of those security maniacs, and any tool to enhance security is important, blockchain is one of them.
RobotToaster 3y ago
Friendlycaptcha isn't open source, only the widget/client is. The sever seems to be closed source.
- entropyie 3y ago
  What about this? https://github.com/FriendlyCaptcha/friendly-lite-server https://github.com/FriendlyCaptcha/friendly-lite-server
  - RobotToaster 3y ago
    >This distribution is licensed under a non-commercial source available license
    - entropyie 3y ago
      Thanks for the clarification. Indeed it is not open source in the truest sense, but I don't consider source-available to be closed-source. Especially when the main limitation seems to be a no reselling clause. This would not prevent most people from deploying to their SaaS for example. Even having the code available to audit is a plus. Again, perfection is the enemy of good. I've found that black and white thinking in security is very dangerous, as you often end up with very "secure" controls that have terrible UX, which users bypass completely via byob etc... And pwnage ensues. UX is a primary pillar of security.

emporas 3y ago

Nice solution, if that works for your site, perfect. If i may add, in case someone desires a little bit of revenue from a website, one very popular solution is to put advertisements in some places. Well some people consider that a security hole, including me. So i guess the definition of security varies, but the security mania goes on for many decades. I am one of those security maniacs, and any tool to enhance security is important, blockchain is one of them.

RobotToaster 3y ago

Friendlycaptcha isn't open source, only the widget/client is. The sever seems to be closed source.

entropyie 3y ago
What about this? https://github.com/FriendlyCaptcha/friendly-lite-server https://github.com/FriendlyCaptcha/friendly-lite-server
- RobotToaster 3y ago
  >This distribution is licensed under a non-commercial source available license
  - entropyie 3y ago
    Thanks for the clarification. Indeed it is not open source in the truest sense, but I don't consider source-available to be closed-source. Especially when the main limitation seems to be a no reselling clause. This would not prevent most people from deploying to their SaaS for example. Even having the code available to audit is a plus. Again, perfection is the enemy of good. I've found that black and white thinking in security is very dangerous, as you often end up with very "secure" controls that have terrible UX, which users bypass completely via byob etc... And pwnage ensues. UX is a primary pillar of security.