It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussionTwo Step Email Autenticator Instead of reCAPTCHA?(25 posts)solved(25 posts)solved
(25 posts)solved
Pages:
1
2
This is my favourite topic
Posted May 05, 2021
avatar
vv221: Look at the state of GOG website.
Then look at the state of GOG forums.
Take a deep breath…
Now ask yourself again: would anything be easy to implement for GOG Web team?

(if there is actually a Web team at GOG, something I’ve been having doubts about)
Considering they're even looking for payroll administrators, I have slight doubts about the structure of GOG.
Posted May 05, 2021
high rated
I agree, that already authorized users do not need any form of additional verification. At least, users should be automatically verified if they have ever purchased a game for a price.

reCAPTCHA is indeed very annoying, wherever it is being placed.

GOG could create its own classic CAPTCHA instead ( write text from an image ). And if some bots will be designed specifically for GOG own CAPTCHA, a couple of minor modifications can make it unbeatable for bots again and again. ;)

Email verification would be fine.

I am against any forms of phone verification. I have no desire to share my number with third-party companies, who send SMS with codes and can sell your data afterwards.

I don't use wireless internet connection, therefore I can't run any "verification" app. Besides, I don't like the idea, that "every company has an app for you to install". Storage space is limited, and I don't trust app developers either.
Posted May 05, 2021
high rated
When i'm on a website, i don't need third party service, only the first party especialy when the third party is google who suck any information from us. When i'm on Youtube, i dont care if google check as i choose myself to go there, but when i'm on GOG or any other website, why should i allow google on them, i started a while ago to stop using any website that force me this google shit unless it's an important one so please GOG remove this.
Posted May 05, 2021
just fyi two stage doesn't work everywhere and reCaptcha is actually pretty easy to get around
Posted May 05, 2021
avatar
AlexTerranova: I agree, that already authorized users do not need any form of additional verification. At least, users should be automatically verified if they have ever purchased a game for a price.

reCAPTCHA is indeed very annoying, wherever it is being placed.

GOG could create its own classic CAPTCHA instead ( write text from an image ). And if some bots will be designed specifically for GOG own CAPTCHA, a couple of minor modifications can make it unbeatable for bots again and again. ;)

Email verification would be fine.

I am against any forms of phone verification. I have no desire to share my number with third-party companies, who send SMS with codes and can sell your data afterwards.

I don't use wireless internet connection, therefore I can't run any "verification" app. Besides, I don't like the idea, that "every company has an app for you to install". Storage space is limited, and I don't trust app developers either.
It's an interesting point of view. Thanks for sharing. Maybe GOG team will reconsider their decision of using recaptcha and will implement something different like email, their own captcha, or all options you guys said with the freedom for us to choose which one to use, if possible. :)

avatar
Mugiwarah: When i'm on a website, i don't need third party service, only the first party especialy when the third party is google who suck any information from us. When i'm on Youtube, i dont care if google check as i choose myself to go there, but when i'm on GOG or any other website, why should i allow google on them, i started a while ago to stop using any website that force me this google shit unless it's an important one so please GOG remove this.
I don't know if you know about browser extensions that can be used agaisn't that in a fairly simple way.

You can use NoScript, for example, to choose which script will be allowed to load in your browser. Consider giving it a look if you will.
Be aware though, that when you stop some scripts from loading, some pages may not work properly, and some doesn't even load. It's really good imho.
Posted May 05, 2021
avatar
.Keys: I don't know if you know about browser extensions that can be used agaisn't that in a fairly simple way.

You can use NoScript, for example, to choose which script will be allowed to load in your browser. Consider giving it a look if you will.
Be aware though, that when you stop some scripts from loading, some pages may not work properly, and some doesn't even load. It's really good imho.
I use some privacy extension (ublock, umatrix, noscript, decentrleyes, cookieautodelete) this is not the problem, the problem is that you HAVE to accept third party domain to access a website this is what i dont like.
Posted May 05, 2021
avatar
.Keys: Maybe GOG team will reconsider their decision of using recaptcha and will implement something different like email, their own captcha, or all options you guys said with the freedom for us to choose which one to use, if possible. :)
Not a chance. At least, not the GOG we know.
Sensible actions is against their company policy.
Posted May 05, 2021
avatar
gog2002x: Are there really bot accounts out there and if so, are they really that sophisticated?
If there are then GOG is using those bot accounts for self advertising:
https://items.gog.com/news/news_gog2020_info_users_en.jpg
See number of 'new user registrations +392%' and the 28M free games and goodies claimed.
Maybe they want to reap the benefits of those bot accounts (showing impressive numbers to diminish public backlash for other things) while containing the adverse effects. (And of course the customers get to pay for it.)
(And if they would be at least a bit willing & competent there would be no point for using captcha **** the way they are using it anyway.)
Posted May 08, 2021
avatar
AlexTerranova: GOG could create its own classic CAPTCHA instead ( write text from an image ). And if some bots will be designed specifically for GOG own CAPTCHA, a couple of minor modifications can make it unbeatable for bots again and again. ;)

I don't use wireless internet connection, therefore I can't run any "verification" app. Besides, I don't like the idea, that "every company has an app for you to install". Storage space is limited, and I don't trust app developers either.
2. What a surprise, turns out there's local solutions for authentication after all! (And I only picked this one as an example; there are several HOTP and TOTP solutions, many of which can be run on a local instance.)

1. And I'm sure they have the manpower to spare and certainly aren't reliant on manual reporting like we're in the stone ages.
Posted June 01, 2022
avatar
WinterSnowfall: It's the cookies.
Think you are right. I have saved my GOG cookies and I never get CAPTCHA.
Pages:
1
2
This is my favourite topic
Community
General discussionTwo Step Email Autenticator Instead of reCAPTCHA?(25 posts)solved(25 posts)solved
(25 posts)solved