Ask HN: Do we need Google captcha?

Re:Ask HN: Do we need Google captcha? by jmstfv on Tuesday October 22, 2019 @03:56PM (#21327897)

The easiest way to start would be introducing an invisible form field [0] and on submission, checking if it is not empty. Give this form field a random name so that it wouldn't be populated by password managers.

You can take it one step further and check how fast the form was submitted. If it is below the predefined threshold, it is probably a bot.

[0] To hide the form field, you can use one of these snippets, interchangeably:

    "display:none;"
    "position:absolute!important;top:-9999px;left:-9999px;"
    "position:absolute!important;height:1px;width:1px;overflow:hidden;"

[ Parent | on HN ]

Re:Ask HN: Do we need Google captcha? by Master_Odin on Tuesday October 22, 2019 @09:15PM (#21330147)

It should be stated that you should either use the first approach (display none) or give a 0 height/width, so that screen readers don't pick up these fake fields and ruin accessibility on your form.

[ Parent | on HN ]

Re:Ask HN: Do we need Google captcha? by throwaway_bad on Tuesday October 22, 2019 @10:47PM (#21330592)

Unfortunately anything screen readers can recognize as invisible, a more sophisticated bot can too.

[ Parent | on HN ]

Re:Ask HN: Do we need Google captcha? by shakna on Wednesday October 23, 2019 @03:41AM (#21332143)

There's also aria-hidden to prevent screen readers from touching the honeypot field.

[ Parent | on HN ]