Proposition: CAPTCHA changes

Moderator: GZDoom Developers

Proposition: CAPTCHA changes

Postby Rachael » Wed Jun 19, 2019 3:29 am

One thing that has been a pretty sore spot for some people trying to access this forum is that the CAPTCHA system as it is, is so tough. If you aren't an absolute fan of the classic Doom series there's a good chance you won't be able to answer most of them on your own.

The idea has always been that you could go to live chats like IRC, Discord, or Matrix, and ask the question there and someone knowledgeable would be able to help you. But some people are just shy and don't want to use that option.

On the counter end of this though, we've been having actual humans or very intelligent bots (probably a bit of both) bypass the CAPTCHA system with simple questions that are more common knowledge.

The questions we have right now are very tough. They've managed to weed out all but 3 spam-bot incidents in the past few months. That's actually very good. The problem is, it's too tough sometimes for actual legitimate users - as it stands, the forum can really only grow with people who know a lot about the original Doom series. That's not very conducive to a community that encourages the sharing of ideas and works for others to enjoy and learn from.

So the idea I had was this: What if the CAPTCHA system as it is was completely revamped to require you to download a version of ZDoom or GZDoom along with shareware versions of Doom and/or Heretic, use cheat codes to freeze the level and warp to certain points, and describe what you see on your screen, instead? It'd be a simple question like "What is the monster shown in E1Mx of Shareware Doom at point (xxx, yyy) when the player is facing north?" It could include a link to the bestiary of either game so that prospective users would know what to type and how to type it to pass the CAPTCHA.

I am not really sure if I like this system, though: First, it requires running an external program, second it could be easily defeated by a specially written bot that can look up the level data on its own.

I am open for ideas and discussion on this topic - however, I will not entertain any ideas which have the potential to greatly increase the workload of the site's moderators.
User avatar
Rachael
Webmaster
 
Joined: 13 Jan 2004
Discord: Rachael#3767
Twitch ID: madamerachelle
Github ID: madame-rachelle

Re: Proposition: CAPTCHA changes

Postby dpJudas » Wed Jun 19, 2019 4:19 am

Given that the Doom community is pretty small and therefore unlikely that anyone would directly code a bot to bypass a custom CAPTCHA system (they'd be able to only spam zdoom.org), why not just write the answer on the page where it asks the question?

Basically the same system as when people type their email addresses in different forms to avoid a bot grabbing it for spamming. For example, put a big picture on it with some arrows or similar that any human should be able to figure out where a bot would fail. As long as the word isn't directly spelled so a primitive "grab all words on the page and try them" or something an OCR tool succeeds with I think it would do the trick.
dpJudas
 
 
 
Joined: 28 May 2016

Re: Proposition: CAPTCHA changes

Postby Jimmy » Wed Jun 19, 2019 4:21 am

Rachael wrote:So the idea I had was this: What if the CAPTCHA system as it is was completely revamped to require you to download a version of ZDoom or GZDoom along with shareware versions of Doom and/or Heretic, use cheat codes to freeze the level and warp to certain points, and describe what you see on your screen, instead? It'd be a simple question like "What is the monster shown in E1Mx of Shareware Doom at point (xxx, yyy) when the player is facing north?" It could include a link to the bestiary of either game so that prospective users would know what to type and how to type it to pass the CAPTCHA.

I am not really sure if I like this system, though: First, it requires running an external program, second it could be easily defeated by a specially written bot that can look up the level data on its own.

Yeeeahhh, that system seems really overly complicated from the user's point of view. What if the user was having trouble getting GZDoom to work, but couldn't register on the forum to ask about doing so because they couldn't launch the game to begin with?

Surely showing images of those levels and asking the user to identify them would be a better option? Keep them to E1M1, MAP01, etc - all the iconic opening shots.

What are the questions at the moment? If they're easy and broad enough, chances are someone signing up to the ZDoom forums has played Doom before, and knows at least roughly what it's about.
Jimmy
I picked a fine day to be lactose intolerant
 
 
 
Joined: 10 Apr 2006
Location: Perth, WA
Twitch ID: JimmySquared

Re: Proposition: CAPTCHA changes

Postby Gez » Wed Jun 19, 2019 8:04 am

Rachael wrote:So the idea I had was this: What if the CAPTCHA system as it is was completely revamped to require you to download a version of ZDoom or GZDoom along with shareware versions of Doom and/or Heretic, use cheat codes to freeze the level and warp to certain points, and describe what you see on your screen, instead? It'd be a simple question like "What is the monster shown in E1Mx of Shareware Doom at point (xxx, yyy) when the player is facing north?" It could include a link to the bestiary of either game so that prospective users would know what to type and how to type it to pass the CAPTCHA.


That seems tougher than the existing system, and more likely to discourage people. Would you want to download and run a program in order to be able to register on a forum? As a general rule it'd be a pretty big red flag to me, honestly. Besides, who says that the system people use to go to the forum is even able to run GZDoom? Lots of people use their phones for Internet-stuff nowadays. Someone who is asked to download and run a PC exe while they're on their morning commute in a subway may be understandably irritated.

What I could see to make it simpler is to provide a link to the Doom wiki on the question. Something like a boilerplate sentence could be appended to all questions, such as "To help you find the answer, you can look it up in the Doom Wiki at DoomWiki.org." after a newline.
Gez
 
 
 
Joined: 06 Jul 2007

Re: Proposition: CAPTCHA changes

Postby Zhs2 » Wed Jun 19, 2019 6:21 pm

Personally I think the current system can be okay - the questions themselves could do with some access to less ambiguous answers. The question I'm thinking of as the most guilty of this, paraphrased, is "What is the hitscan enemy infamous for populating the Plutonia IWAD?" Besides being one of those questions that requires classic Doom knowledge, there are three, count 'em, three whole bolded possible answers in the first paragraph on the Doomwiki.org page for Heavy Weapon Dude. And what if you're someone who works with the code? Tying down the questions to one possible answer each would go a long way to alleviating the frustration. Note that this includes informing captcha answerers of the casing of said answer because I'm sure case sensitivity throws otherwise perfectly valid answers out too. dpJudas' idea makes a lot of sense to me.
Last edited by Zhs2 on Wed Jun 19, 2019 6:26 pm, edited 1 time in total.
User avatar
Zhs2
Power of three.
 
Joined: 07 Nov 2008
Location: Maryland, USA, but probably also in someone's mod somewhere
Operating System: Windows 10/8.1/8 64-bit
Graphics Processor: ATI/AMD with Vulkan Support

Re: Proposition: CAPTCHA changes

Postby Rachael » Wed Jun 19, 2019 6:25 pm

Actually, the CAPTCHA is only case sensitive if you tell it to be for that specific question. Otherwise, I think you can even mess up punctuation and spaces in your answer if you wanted to. Also there are multiple valid answers to most of the questions.

Nevertheless, I've added "Heavy Weapon Dude" as a valid answer to that question.
User avatar
Rachael
Webmaster
 
Joined: 13 Jan 2004
Discord: Rachael#3767
Twitch ID: madamerachelle
Github ID: madame-rachelle

Re: Proposition: CAPTCHA changes

Postby Matt » Wed Jun 19, 2019 11:51 pm

It would be a lot less daunting if the page actually told you that the answers were not case sensitive nor (ideally) space sensitive.
User avatar
Matt
Putting the XD into *xdeath since 2007
 
Joined: 04 Jan 2004
Location: Gotham City SAR, Wyld-Lands of the Lotus People, Dominionist PetroConfederacy of Saudi Canadia


Return to ZDoom.org Suggestions

Who is online

Users browsing this forum: Trendiction.de [Bot] and 1 guest