Opened 4 years ago

Last modified 2 years ago

#14680 assigned enhancement

Add an additional magic word requirement for making a trac account

Reported by: arma Owned by: hiro
Priority: Medium Milestone:
Component: Internal Services/Service - trac Version:
Severity: Normal Keywords:
Cc: sebastian, bastik.public@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

It's clear that the spammers are solving our recaptchas.

We could ponder switching to some different captcha mechanism, but I doubt there are great ones out there that are usable yet also not broken by spammers.

Given the success of our cypherpunks option, I bet we'd get a lot of mileage out of a "say the magic word" step in making an account -- and the magic word, like the cypherpunks option, can be in plain view for a user who bothers to look.

I'm not sure if this will want a new trac plugin or what though.

Child Tickets

Change History (4)

comment:1 Changed 4 years ago by bastik

Cc: bastik.public@… added

Say the word and we'll be
well upon our way

(just ccing myself to stay informed about the SPAM countermeasures)

comment:2 Changed 4 years ago by qbi

Component: TracService - trac

Move all tickets from trac to "Service - trac" component.

comment:3 Changed 3 years ago by qbi

Severity: Normal

Maybe the TracCaptcha Plugin is the right approach here.

comment:4 Changed 2 years ago by hiro

Owner: changed from erinn to hiro
Status: newassigned

Apparently this is an issue again. Last suggestion on this issue was to install a plugin that will add captcha also to the ticket page. This could become annoying but might be a solution for the time-being.

Alternatively we could try to test the different captcha solution that we have available with the spam-plugin. Not sure if these can be considered "better". Also if I am not mistaken keycaptcha doesn't properly work with Tor and areyouahuman is a bit annoying.

Another alternative out of the scope of this ticket is considering a different solution to Trac, since everybody hates it. I'd be happy to install and let people test an alternative if that's the path we want to take.

Note: See TracTickets for help on using tickets.