Log In

Your email is not your username

Register

If you were a member of the old Bodybuilding.com forums and would like to reuse your previous username, you can request it below. We use your email only for registration and do not store it. For more information, please see our Privacy Policy.

Confirm your email

A registration code was sent to your email. Enter it here.

Welcome

You have successfully setup your account.

Sign in

Quick Navigation Bottom Misc
Forum » Can any1 help me custom captcha authentication
  1. Results 1 to 6 of 6
  2. Page 1 of 1

Thread: Can any1 help me custom captcha authentication

post 1616081611 09-09-2020, 10:01 PM
-
#1
  1. bannedjpg
  2. Registered User
  1. bannedjpg
  2. Registered User
  3. Join Date: Aug 2020
  4. Age: 56
  5. Posts: 4,288
  6. Rep Power: 1157

Can any1 help me custom captcha authentication

reply if u want to try i'll type out what i mean :P
**afraid to leave his house crew**
**flat earth crew**
**WW2 didn't happen crew**
post 1616082201 09-09-2020, 10:11 PM
-
#2
  1. bannedjpg
  2. Registered User
  1. bannedjpg
  2. Registered User
  3. Join Date: Aug 2020
  4. Age: 56
  5. Posts: 4,288
  6. Rep Power: 1157
no i'm planning on generating 6-to-10-character alphanumeric strings on my server and creating captcha images from them
**afraid to leave his house crew**
**flat earth crew**
**WW2 didn't happen crew**
post 1616082831 09-09-2020, 10:21 PM
-
#3
  1. bannedjpg
  2. Registered User
  1. bannedjpg
  2. Registered User
  3. Join Date: Aug 2020
  4. Age: 56
  5. Posts: 4,288
  6. Rep Power: 1157
i want to stop someone from breaking my captcha and flooding my website with bots posting things pretending to be humans

so i want to limit how many captcha's i send to a user account but i'm wondering how many a machine-learning program needs (i dont know anything about machine learning but i've seen some hackers mention them for captchas)
**afraid to leave his house crew**
**flat earth crew**
**WW2 didn't happen crew**
post 1616083691 09-09-2020, 10:34 PM
-
#4
  1. bannedjpg
  2. Registered User
  1. bannedjpg
  2. Registered User
  3. Join Date: Aug 2020
  4. Age: 56
  5. Posts: 4,288
  6. Rep Power: 1157
Originally Posted By DrankSipping⏩
a lot of the times it's best to find a way to otherwise divert them or act like it worked but dont actually work. Why? Because again if a bot/script kiddy or nerd wants to circumvent your script, they can and will. Acting like they succeeded makes them 'stop trying' in a sense. whilst making the denial obvious simply makes them keep trying until they get it.


A super super good network/source of info and methods all brogrammers need to know and know well is called OWASP


They cover many topics in security.

In your case,

https://owasp.org/www-project-automa...-applications/




My response unrelated to above page:

1. Depending on security and how much time or money you're willing to invest, you can uniquely browser fingerprint each session on form page and deny/fake error page people that dont generate a key (aka use javascript, most bots cant parse javascript), then store each unique browser fingerprint in database as well. tie fingerprint(s) to users. they can be on a new ip but fingerprint will still be same. limit from fingerprint or fallback ip.
thanks for the OWASP link i completely forget to check them out for this problem

that's interesting idea like shadow-ban them from within their own browser. so even if their IP-address changes, they're still banned. only issue like u said is tricking them into thinking they're not banned
... related to that i had the idea of my server "playing dead" where if i ban someone i'll send back 500 errors for stuff so they think they broke my server or corrupted my database or something
**afraid to leave his house crew**
**flat earth crew**
**WW2 didn't happen crew**
post 1616084671 09-09-2020, 10:50 PM
-
#5
  1. bannedjpg
  2. Registered User
  1. bannedjpg
  2. Registered User
  3. Join Date: Aug 2020
  4. Age: 56
  5. Posts: 4,288
  6. Rep Power: 1157
i think if i can do that idea of burying an identifier somewhere in their browser that would be crazy good

i'm still trying to figure out if "fingerprint.js" is that tho brb
**afraid to leave his house crew**
**flat earth crew**
**WW2 didn't happen crew**
post 1616085801 09-09-2020, 11:09 PM
-
#6
  1. iwant2beswole
  2. ayyyy lmao
  1. iwant2beswole
  2. ayyyy lmao
  3. Join Date: Jan 2013
  4. Location: Seattle, Washington, United States
  5. Posts: 19,879
  6. Rep Power: 104695
Just use recaptcha instead of reinventing the wheel
watchout your comments boyo ↓
Quick Navigation Top Misc
Bookmarks
Digg.com
Digg
del.icio.us
del.icio.us
Stumbleupon.com
StumbleUpon
Google.com
Google
Facebook.com
Facebook
Posting Permissions
  1. You may not post new threads
  2. You may not post replies
  3. You may not post attachments
  4. You may not edit your posts