News for hackers. Stuff that matters.
Re:ProtonMail includes Google Recaptcha for login by cookiengineer on Saturday May 29, 2021 @04:27PM (#27328016)
> What about the case of someone signing up for thousands of accounts?

My question is related to the specific /login page, not the registration page.

I understand the benefit for blocking spammer signups, but not for the current case of the login page where users have an account already, were verified that the account/password was correct (captcha appears in second step), and then have to enter a second decryption password manually.

In that scenario there's no argument on the "WHY" a captcha helps. It simply doesn't.

Re:ProtonMail includes Google Recaptcha for login by drivebycomment on Saturday May 29, 2021 @06:04PM (#27328595)
It increases the cost of credential stuffing attack, which is very common nowadays.