Platform security

[Deleted User]

bowlhead99 said:

IvanOpinion said:

On a similar note, have you noticed the latest version of CAPTCHA has no UI.

Yes, V3 is invisible for users - no need to prove you're human by typing text or spotting zebra crossings or buses or shopfronts, they just give you a score based on whether your interactions around the web and the things stored in cookies you have make you seem like you're probably a low risk of being a bot. Perhaps it's better as it's low hassle for us users to use, the downside from a privacy standpoint is that it just means we have to let them track us more so they can learn how humans are supposed to behave online. 

Despite this I still come across plenty of sites on the old versions of reCAPTCHA - the old ones are not going away yet - and I had to pass an inordinate amount of photo recognition tests to get through one website earlier today.

I could never get all the traffic lights or zebra crossings right

Stompa

masonic said:

I hope there are very few, if any, that *only* ask for 3 random characters from a password, rather than username + password + 3 random digits from another password or code.

The most appalling I've encountered is EQi (formerly Selftrade). They just require account number, DOB and three digits from a 6 digit PIN.

[Deleted User]

Update - ii are now changing their login screens to be two pages, first users id, second page password