Tender to implement the new TDF Membership Committee’s web-based tooling

[andreasma]

Hi Florian,

Hello Andreas,

would be great, if someone could shed some light on this. Is there
already a captcha provider available which could be self hosted. I
searched for such option, but with no result.

we looked at some in the past (don't remember their names from the top
of my head), but the results were only mediocre. What helped us years
ago in the wiki was to ask concrete questions eg. about TDF (Where are
we located etc.), because these cannot be automated so easily, but
still, you need to rotate these frequently... indeed, time for a
proper solution to this.

I'm currently evaluate a solution for Plone with a 'honeypot' and work
on a new add-on for a switch to a GDPR compatible captcha online provider.

But I don't know yet, how long it take me to finish both options,
because my spare time currently is occupied mostly by other tasks.

Regards,
Andreas

[floeff]

Hello Andreas,

I'm currently evaluate a solution for Plone with a 'honeypot' and work
on a new add-on for a switch to a GDPR compatible captcha online provider.

thanks for sharing! Let us know how it's going - we'll also share our findings (probably on the website list), as I guess several projects have similar issues.

Florian

[andreasma]

Hello Florian, all,

Hello Andreas,

I'm currently evaluate a solution for Plone with a 'honeypot' and work
on a new add-on for a switch to a GDPR compatible captcha online
provider.

thanks for sharing! Let us know how it's going - we'll also share our
findings (probably on the website list), as I guess several projects
have similar issues.

I created a new Plone add-on to use HCaptcha instead of ReCaptcha some
weeks ago and migrated the forms of a Plone add-on to HCaptcha
currently. I'll work on further Plone add-ons and  migrate the forms to
HCaptcha. I think about making it optional to use HCaptcha and rely on
the 'honeypot' add-on technology instead.

Regards,
Andreas

[floeff]

Hello Andreas,

thanks for sharing! Let us know how it's going - we'll also share our
findings (probably on the website list), as I guess several projects
have similar issues.

I created a new Plone add-on to use HCaptcha instead of ReCaptcha some
weeks ago and migrated the forms of a Plone add-on to HCaptcha
currently. I'll work on further Plone add-ons and  migrate the forms to
HCaptcha. I think about making it optional to use HCaptcha and rely on
the 'honeypot' add-on technology instead.

thanks for the follow-up!
What's your experience with this captcha, is there a difference between the spam before and after? Back in the days, all alternative captchas were much less effective, I'm curious to learn how the situation is noawadays.

(Maybe let's follow-up with this discussion on website@)

Thanks,
Florian

[andreasma]

Hello Florian, all,

Hello Andreas,

thanks for sharing! Let us know how it's going - we'll also share our
findings (probably on the website list), as I guess several projects
have similar issues.

I created a new Plone add-on to use HCaptcha instead of ReCaptcha some
weeks ago and migrated the forms of a Plone add-on to HCaptcha
currently. I'll work on further Plone add-ons and  migrate the forms to
HCaptcha. I think about making it optional to use HCaptcha and rely on
the 'honeypot' add-on technology instead.

thanks for the follow-up!
What's your experience with this captcha, is there a difference
between the spam before and after? Back in the days, all alternative
captchas were much less effective, I'm curious to learn how the
situation is noawadays.

I'm currently not running or managing any server / PC outside my home
environment. I have a payed full time outside the software industrie and
work on software only as volunteer in my spare time.

Thus I could not provide you any experience about the effectiveness of
the different captcha services (providers). I created the new hcaptcha
add-on only on a request / discussion inside the community.

(Maybe let's follow-up with this discussion on website@)

If I remember correctly there is an open ticket in the LibreOffice
community on this topic without real work on it for about four years
yet. Has there been any research on this topic (without documentation)
on that topic inside the LibreOffice community already?

Regards,
Andreas

[floeff]

Hello Andreas,

Thus I could not provide you any experience about the effectiveness of
the different captcha services (providers). I created the new hcaptcha
add-on only on a request / discussion inside the community.

to answer your question, the above is indeed the problem we were facing - other Captcha services were working, but much less reliable, i.e. they were much less suited to prevent spamming. Even with blocking certain "spammy" IP ranges, the amount of spam was too high, and the feedback from other communities back then was very similar.

However, let's continue this technical discussion on the website@ list instead, where also others could provide valuable feedback.

Florian

[andreasma]

Hello Florian, all,

Hello Andreas,

Thus I could not provide you any experience about the effectiveness of
the different captcha services (providers). I created the new hcaptcha
add-on only on a request / discussion inside the community.

to answer your question, the above is indeed the problem we were
facing - other Captcha services were working, but much less reliable,
i.e. they were much less suited to prevent spamming. Even with
blocking certain "spammy" IP ranges, the amount of spam was too high,
and the feedback from other communities back then was very similar.

However, let's continue this technical discussion on the website@ list
instead, where also others could provide valuable feedback.

if you like you could start a new discussion on that list.

I worked on a further version of one Plone add-on with protection by a
honeypot field instead of a captcha. I used a special add-on for this,
which was published by some members of the Plone community. This
technology has the advantage that it doesn't bother the website user in
the way a captcha does.

Regards,
Andreas