News for hackers. Stuff that matters.

A comment on Hacking Google ReCAPTCHA v3 Using Reinforcement Learning. Parent comment

Re:Hacking Google ReCAPTCHA v3 Using Reinforcement Learning by the8472 on Sunday April 14, 2019 @04:16PM (#19661443)
> brute force password fields

rate limit

> stop bots from submitting fake data to sign up forms

I don't think there's an universal solution here. it depends on the application itself and why you consider fake signups an issue in the first place.

[ Parent | on HN ]
Re:Hacking Google ReCAPTCHA v3 Using Reinforcement Learning by j88439h84 on Sunday April 14, 2019 @11:20PM (#19662947)
Rate limit by what? Username? IP?
[ Parent | on HN ]
Re:Hacking Google ReCAPTCHA v3 Using Reinforcement Learning by the8472 on Monday April 15, 2019 @03:34PM (#19668187)
per user if you want to defend against targeted attacks. per IP if you want to prevent untarged attacks. so, both.

add an email-reset for the limit so users can't be locked out of their accounts by a DoS.

[ Parent | on HN ]