Posted November 21, 2015
dksone
Not New User
Registered: Dec 2008
From Belgium
Martek
New User
Registered: Sep 2008
From United States
Posted November 22, 2015
I can't tell if I am supposed to click it or not.
If I click it I'm saying I'm not a robot (truth but doesn't 'fail' the test).
If I don't click it I am 'lying', but I 'fail' the test - which is what it appears to ask me to do - to lie and fail - on purpose.
It's confusing..
Maybe I am a robot..
novumZ
Akash of Vishnu
Registered: Oct 2014
From Other
dick1982
-120 Club. ♥XX
Registered: Jul 2012
From United Kingdom
Posted November 22, 2015
I can't tell if I am supposed to click it or not.
If I click it I'm saying I'm not a robot (truth but doesn't 'fail' the test).
If I don't click it I am 'lying', but I 'fail' the test - which is what it appears to ask me to do - to lie and fail - on purpose.
It's confusing..
Maybe I am a robot..
Eitot
Registered: Oct 2012
From Netherlands
Posted November 22, 2015
First of all, the impact of captchas on spammers and scammer is limited. There are many services out there which offers them api to fill captcha at an extremelly low price (around $0.005/captcha), so its just a matter for them to adapt whatever bot they are using.
And you actually picked the worst captcha service: google's recaptcha.
recaptcha is not just against "using a very old or very remote browser". Their difficulty is based on how much private information google know of you. If you don't let google spy on you, you get a captcha which tend to be hard, often downright impossible, to read.
Plus, by picking google, you effectively delegate the site security to a company whose only purpose is to sell the private information of users - with a service which, unlike analytics and google api, can't be block by users without risking blocking access to the whole site.
Please gog, stop using reCAPTCHA. Implement some proper, more effective, self hosted heuristics and flood control, and a 2-step authentication instead.
Attached are the recaptcha I get.
Ikarugamesh
Priestess Arcana
Registered: Oct 2011
From Spain
Posted November 22, 2015
I think IP checks and two-step authentication would be better than a captcha, even it's the famous "I'm not a robot" checkbox.
Scattersweithe
New User
Registered: Dec 2008
From Germany
Posted September 26, 2016
And another useless feature...
How about releasing more Good Old Games instead?
How about releasing more Good Old Games instead?
Ears14U
New User
Registered: Apr 2011
From United States
Posted September 26, 2016
This is one major inconvenience with this logon B.S. Most of the time it doesn't even register your keystrokes.
draenan
New User
Registered: May 2011
From Australia
Posted September 26, 2016
Just got an email from GOG saying they'd cleared my password after an "unusual attempt to modify (my) account's login information, during the weekend."
1. I have two-factor auth enabled.
2. I changed my password myself. Not at the weekend though, a couple of days before.
When logging in (after my password change last week, and my forced-by-GOG change today) I'm highly bemused to see I have to enter not only a two-factor auth code, but also a Captcha for that little bit of useless redundancy.
Really makes me wonder if GOG's two-factor auth system is to be trusted.
Edit: Spelling. And it also occurs to me that they are calling it "two step authentication", so it's not really "two-factor auth", which explains why they didn't use proper one-time passwords via a Google Authenticator-type app. So yeah, I wonder if this system can be trusted.
1. I have two-factor auth enabled.
2. I changed my password myself. Not at the weekend though, a couple of days before.
When logging in (after my password change last week, and my forced-by-GOG change today) I'm highly bemused to see I have to enter not only a two-factor auth code, but also a Captcha for that little bit of useless redundancy.
Really makes me wonder if GOG's two-factor auth system is to be trusted.
Edit: Spelling. And it also occurs to me that they are calling it "two step authentication", so it's not really "two-factor auth", which explains why they didn't use proper one-time passwords via a Google Authenticator-type app. So yeah, I wonder if this system can be trusted.
Post edited September 26, 2016 by draenan