Re last: Please please please, don't use #HCaptcha! We blind people call it HateCaptcha, and it's for a reason. Their accessibility so-called innovative technology is simply broken and doesn't work reliably. You can't imagine how much time I spent fighting with this so-called accessibility cookie. Please don't use it, for goodness sake. #MastoAdmin
@tux This is a very fair question. the problem with captchas is that not all blind people can have sighted help. Probably BeMyeyes would help, but with HCaptcha they claim to provide an accessibility solution, it simply doesn't work reliably. What you have to do is to sign up with them, then open an email and set their accessibility cookie. It is kind of good'ish solution, but you have to do it every time you open the page, and it doesn't work with all emails, and so on.
@Synchro Not yet, but I'll research this question. I'm personally for textual captchas like math-solving ("How mush is four plus seven?"), but I heard that might pose challenges to people with cognitive particularities like dyscalculia for example.
@KellyandRoger Basically, the solution might work only if it worked. the cookie is either not set, or you have to set it every time, or, if you set the cookie and close your browser, you have to go through the hassle from scratch.
@menelion@KellyandRoger Also if HCaptcha determines you're not actually blind, for whatever reason, no cookie for you, so no access for you. It is insane that we are outsourcing who gets to join a Mastodon instance to some random for-profit techbro nonsense. For all of the reasons people distrust ReCaptcha, HCaptcha is no better or worse.
@chrisjtrogers@menelion AltText:
Fake Captcha with the instruction: "Select all images where if you were to
add a decrescendo it would add to the
musicality of the piece without being
interpreted as an overly heavy-handed
metaphor within the context of the
thematic material."
Followed by six images of different classical-looking music notation.
@menelion rather than adding hurdles to the signup or login process, i’d urge software developers in general to find better ways to detect and prevent or discourage bad behavior specifically. captchas are huge pain for every legitimate user but only a relatively minor nuisance for a determined bad actor.
@mia@menelion And for ActivityPub it's complete horseshit because you can make a spam server with ~200 lines of dependency-less NodeJS (activitypub-troll.cf basically did that, Mastodon was lucky they didn't spin a swarm of servers and domains), don't even need existing servers.
@menelion Please give us admins an alternative, then. No one likes captchas. Even among sighted people, they can be troublesome. We're fighting a war against spam bots though. #mastoadmin
Add comment