Proposition: CAPTCHA changes

[Rachael]

One thing that has been a pretty sore spot for some people trying to access this forum is that the CAPTCHA system as it is, is so tough. If you aren't an absolute fan of the classic Doom series there's a good chance you won't be able to answer most of them on your own.

The idea has always been that you could go to live chats like IRC, Discord, or Matrix, and ask the question there and someone knowledgeable would be able to help you. But some people are just shy and don't want to use that option.

On the counter end of this though, we've been having actual humans or very intelligent bots (probably a bit of both) bypass the CAPTCHA system with simple questions that are more common knowledge.

The questions we have right now are very tough. They've managed to weed out all but 3 spam-bot incidents in the past few months. That's actually very good. The problem is, it's too tough sometimes for actual legitimate users - as it stands, the forum can really only grow with people who know a lot about the original Doom series. That's not very conducive to a community that encourages the sharing of ideas and works for others to enjoy and learn from.

So the idea I had was this: What if the CAPTCHA system as it is was completely revamped to require you to download a version of ZDoom or GZDoom along with shareware versions of Doom and/or Heretic, use cheat codes to freeze the level and warp to certain points, and describe what you see on your screen, instead? It'd be a simple question like "What is the monster shown in E1Mx of Shareware Doom at point (xxx, yyy) when the player is facing north?" It could include a link to the bestiary of either game so that prospective users would know what to type and how to type it to pass the CAPTCHA.

I am not really sure if I like this system, though: First, it requires running an external program, second it could be easily defeated by a specially written bot that can look up the level data on its own.

I am open for ideas and discussion on this topic - however, I will not entertain any ideas which have the potential to greatly increase the workload of the site's moderators.

[dpJudas]

Given that the Doom community is pretty small and therefore unlikely that anyone would directly code a bot to bypass a custom CAPTCHA system (they'd be able to only spam zdoom.org), why not just write the answer on the page where it asks the question?

Basically the same system as when people type their email addresses in different forms to avoid a bot grabbing it for spamming. For example, put a big picture on it with some arrows or similar that any human should be able to figure out where a bot would fail. As long as the word isn't directly spelled so a primitive "grab all words on the page and try them" or something an OCR tool succeeds with I think it would do the trick.

[Jimmy]

So the idea I had was this: What if the CAPTCHA system as it is was completely revamped to require you to download a version of ZDoom or GZDoom along with shareware versions of Doom and/or Heretic, use cheat codes to freeze the level and warp to certain points, and describe what you see on your screen, instead? It'd be a simple question like "What is the monster shown in E1Mx of Shareware Doom at point (xxx, yyy) when the player is facing north?" It could include a link to the bestiary of either game so that prospective users would know what to type and how to type it to pass the CAPTCHA.

I am not really sure if I like this system, though: First, it requires running an external program, second it could be easily defeated by a specially written bot that can look up the level data on its own.

Yeeeahhh, that system seems really overly complicated from the user's point of view. What if the user was having trouble getting GZDoom to work, but couldn't register on the forum to ask about doing so because they couldn't launch the game to begin with?

Surely showing images of those levels and asking the user to identify them would be a better option? Keep them to E1M1, MAP01, etc - all the iconic opening shots.

What are the questions at the moment? If they're easy and broad enough, chances are someone signing up to the ZDoom forums has played Doom before, and knows at least roughly what it's about.

[Gez]

So the idea I had was this: What if the CAPTCHA system as it is was completely revamped to require you to download a version of ZDoom or GZDoom along with shareware versions of Doom and/or Heretic, use cheat codes to freeze the level and warp to certain points, and describe what you see on your screen, instead? It'd be a simple question like "What is the monster shown in E1Mx of Shareware Doom at point (xxx, yyy) when the player is facing north?" It could include a link to the bestiary of either game so that prospective users would know what to type and how to type it to pass the CAPTCHA.

That seems tougher than the existing system, and more likely to discourage people. Would you want to download and run a program in order to be able to register on a forum? As a general rule it'd be a pretty big red flag to me, honestly. Besides, who says that the system people use to go to the forum is even able to run GZDoom? Lots of people use their phones for Internet-stuff nowadays. Someone who is asked to download and run a PC exe while they're on their morning commute in a subway may be understandably irritated.

What I could see to make it simpler is to provide a link to the Doom wiki on the question. Something like a boilerplate sentence could be appended to all questions, such as "To help you find the answer, you can look it up in the Doom Wiki at DoomWiki.org." after a newline.

[Zhs2]

Personally I think the current system can be okay - the questions themselves could do with some access to less ambiguous answers. The question I'm thinking of as the most guilty of this, paraphrased, is "What is the hitscan enemy infamous for populating the Plutonia IWAD?" Besides being one of those questions that requires classic Doom knowledge, there are three, count 'em, three whole bolded possible answers in the first paragraph on the Doomwiki.org page for Heavy Weapon Dude. And what if you're someone who works with the code? Tying down the questions to one possible answer each would go a long way to alleviating the frustration. Note that this includes informing captcha answerers of the casing of said answer because I'm sure case sensitivity throws otherwise perfectly valid answers out too. dpJudas' idea makes a lot of sense to me.

[Rachael]

Actually, the CAPTCHA is only case sensitive if you tell it to be for that specific question. Otherwise, I think you can even mess up punctuation and spaces in your answer if you wanted to. Also there are multiple valid answers to most of the questions.

Nevertheless, I've added "Heavy Weapon Dude" as a valid answer to that question.

[Matt]

It would be a lot less daunting if the page actually told you that the answers were not case sensitive nor (ideally) space sensitive.