security: add ASCII based CAPTCHA mechanism

Open messede-degod opened this issue 3 years ago • 4 comments

Add ASCII based CAPTCHA mechanism for new instance creation.

Oct 18 '22 09:10 messede-degod

this is a good idea, could prevent users from abusing the service by using scripts that automatically create new sessions.

could you expand on this idea, how would you implement it?

Oct 21 '22 20:10 theaog

this program might help: https://github.com/moul/captcha captcha -engine=math

Oct 21 '22 20:10 theaog

https://github.com/moul/captcha

trigger when system is under attack. needs a timeout (when no entry for 30 seconds then exit(255) to stop scripts from hanging. 2nd cutoff to wait forever if system is under further attack.

Oct 21 '22 20:10 SkyperTHC

ok, i added that feature and made a pull request here: https://github.com/moul/captcha/pull/130. mean while my fork should be usable : https://github.com/messede-degod/captcha

Oct 26 '22 14:10 messede-degod