News for hackers. Stuff that matters.
Re:Ask HN: A Good Alternative for ReCaptcha? by SquareWheel on Friday May 31, 2019 @06:17AM (#20059610)
It really doesn't matter. display:none or position:absolute;left:-1000px makes little difference. Honey pots only catch a small number of bots.
Re:Ask HN: A Good Alternative for ReCaptcha? by Lunatic666 on Friday May 31, 2019 @07:33AM (#20059932)
I just removed Google's ReCaptcha for a honeypot solution with an additional name and url field. But there's also a timer which checks how long it takes you to submit the form. If you can fill out everything in <2s, you're most likely not human. I have to figure out how people with disabilities can use the page though. Good to get a reminder here. So far it performs way better than ReCaptcha, I haven't received any spam so far and plenty of ham of course. No human complaints either.
Re:Ask HN: A Good Alternative for ReCaptcha? by SquareWheel on Friday May 31, 2019 @08:32PM (#20066295)
A timer is a novel idea. I hadn't seen that suggested before.

Do you anticipate any problems with form auto-filling tools?

Re:Ask HN: A Good Alternative for ReCaptcha? by corobo on Friday May 31, 2019 @06:58AM (#20059788)
I only have anecdata of course but so far I've had a 100% success rate. I imagine this will come down eventually but for the past ~year or so it's been working fine to just hide the honeypot field with CSS
Re:Ask HN: A Good Alternative for ReCaptcha? by SquareWheel on Friday May 31, 2019 @07:20AM (#20059874)
I'm glad it's worked for one of us at least.
Re:Ask HN: A Good Alternative for ReCaptcha? by corobo on Friday May 31, 2019 @07:25AM (#20059896)
I don't know if it helps any but I've been using a field that looks real.

Depending on where it is the name= would be surname (where the form submission has a name field rather than a first name surname split), website, url, etc