Defend Like Castles

mCaptcha is proof-of-work based captcha system that is privacy focused and fully automated.

mCaptcha
@chn mcaptcha是开源的,可以自建的。基于PoW工作量证明,不需要选图片,只需要点击一下鼠标就会自动过 #验证码 ,几乎不收集任何的隐私数据。

然而,mcaptcha不是非常牢固。因为,有人说他可以利用 headless浏览器 + 脚本,靠自动化程序过掉 mcaptcha 的验证码,只是要消耗更多的CPU时间而已。我们不能单靠 mcaptcha 来区分人类和机器。机器完全可以过掉 mcaptcha 验证码。mcaptcha 只能大幅度地提高了滥用帐号的成本。

假如 mcaptcha server 和 你的网站都在同一个服务器上运行,那就不会发生「网站能打开但验证码刷不出来」的情况。如果验证码服务和网站分别放在2台服务器,我们实际上要保证这2台服务器都正常工作。否则验证码抽风,用户就刷不出验证码。99.9% x 99.9% = 99.8% 。可靠性其实是降低了。

mcaptcha的缺点就是mcaptcha停止更新了。官方文档和官网都打不开,github仓库显示已归档。

我个人觉得 #Turnstile 验证码的检测项目更多,更严格,但是通过率更低。查得严,误杀也多。 #mcaptcha 查得松,误杀少。非常符合直觉。

Die Bots werden nicht schlauer aber mehr - Wer hier draußen nutzt #mcaptcha oder Alternativen zu hCaptcha?

#bots #ciao #google

Vielleicht hab ich es gerade geschafft, dass auf einer Webseite #Google #ReCaptcha ausgebaut und ein selbstgehostetes #mCaptcha eingebaut wird...?

Hoffentlich funktioniert das gut, dann wollen wir das Firmenweit einsetzen.

Just found out about mCaptcha, a fully libre “proof-of-work”-style drop-in replacement for hcaptcha and recaptcha. It doesn’t have any silly puzzles that train someone else’s AI dataset, either.  

I’m not sure about the internals, but it seems quite good to me! There’s even a cli program for getting auth tokens if you can’t/won’t use JavaScript. 

#lang_en #mcaptcha #webdev #web #captcha #javascript

Defend Like Castles

mCaptcha is proof-of-work based captcha system that is privacy focused and fully automated.

mCaptcha

@smallcircles @liaizon @EC_NGI @NGIZero @mcaptcha @realaravinth @Codeberg

That's great to hear Arnold! And kudos to @realaravinth for all of his amazing contributions to #DeSoc, the #Fediverse, and our #freedom through #FOSS!

#tallship #mCaptcha

.

Well, well received fantastic news from @NGIZero

Funding for @gitea #federation got accepted! @a @6543 and I will be working on implementing Federation into Gitea.

As well funding for @mcaptcha got accepted! @realaravinth and I will be working on improving mCaptcha.

(Many thanks to @dachary for helping with this!)

----

Gitea funding link: https://forum.forgefriends.org/t/nlnet-grant-application-for-federation-in-gitea-deadline-august-1st-2022/823/30

mCaptcha funding link: https://forum.forgefriends.org/t/mcaptcha-nlnet-grant-application-august-2022/830/22

#mcaptcha #gitea #nlnet #ngiZero #funding

NLnet grant application for federation in Gitea (deadline August 1st, 2022)

Got mail today at 14:04 UTC+2 Subject: Good tidings from NLnet To: [email protected] Dear Anthony et al, Congratulations! We have received the green light from the independent review committee. That means your project “Federated software forges with Gitea” (2022-08-067) is one of the selected proposals eligible to receive a grant from NLnet foundation in the August 2022 NGI0 Entrust call! We should set up a call in order to undertake the necessary further steps - leading up to a...

forgefriends

#hashCash is a proof-of-work anti-spam system for email proposed in 1997. People wanting to send an email would need to brute-force calculate a value (nonce) and include it the header.

It never really took off in itself, but became a building block for #bitcoin

#PoW understandably has a Very Bad Reputation for ecological through bitcoin, however its use as anti-spam has advantages, and is used by the accessibility friendly CAPTCHA system, #mCaptcha https://mcaptcha.org/

Defend Like Castles

mCaptcha is proof-of-work based captcha system that is privacy focused and fully automated.

mCaptcha