Investigate OSS Captcha options or build an OSS captcha to use on open source design's jobs form

[m1guelpf]

Recently we've been getting some automated-looking submissions. Maybe it's time to add a captcha?

---

Edit 22.06.2021

We don't think spam/automated job submissions are a problem anymore, however we're changing this issue to be more a dev 'spike' issue to investigate OSS captcha's or possibly look at building one 😄

[belenbarrospena]

thanks for opening this @m1guelpf ! we do need to do something about that spam

[elioqoshi]

Is there any good captcha which is open source and not maintained by Google?

[amrs-tech]

I'd like to try creating a captcha on my own. Can you please assign this to me and give me some time to complete this task ?

[evalica]

@amrs-tech go ahead and give it a try. let us know about your progress.

[amrs-tech]

@evalica Okay

[ei8fdb]

@amrs-tech Did you get anywhere with the captcha development? It would need to be usable by all - visual and hearing impaired, and keyboard only users.

If you have something to test, I'd be happy to do an accessibility review of it with you.

[amrs-tech]

@ei8fdb Sorry, I was busy with my exams, so couldn't do that. Sure, I'll report the status to you after February 16

[ei8fdb]

OK not a problem! I'm in no rush ;)

[eupiteco]

Hi yall! Stumbled on a smart solution that can kinda solve the bot submission problem: put an input field that is not visible or reachable by human users and use that as a flag for form-filling-bots detection. If the field is filled on submission, you'll know it was a bot and can disable the submission button. That can be achieved simply by placing it at the beginning of the form with inline css like position: absolute; left: -5000px;

What do you think? Have someone seen anything like that? Is it safe to use? If this is not unsafe I think it would be a very much simple and quick solution.

Edit: sry for the closing/reopening, mouse issues :/

[RDIL]

Works for me, but I think this may be a problem for padding on mobile

[RDIL]

@elioqoshi one alternative to that would be hcaptcha

[razetime]

hCaptcha is available, but it's still not an open source alternative for Google's ReCaptcha. I was able to find https://visualcaptcha.net/ (deprecated), but it seems usable, and is Open Source.

[ei8fdb]

Before a captcha is implemented - is the "automated job submission" issue still an issue? I'm not sure it currently is.

I would agree with getting one ready, so we can turn it on or off, but I would disagree with implementing one forever.

[Erioldoesdesign]

I think this issue can be updated to a sort of 'spike' to still investigate captcha for when we might need it or create our own. I'll update the issue copy!