[tor-bugs] #27409 [Internal Services/Service - trac]: improve captcha used by trac

[Tor Bug Tracker & Wiki]

#27409: improve captcha used by trac
----------------------------------------------+---------------------
 Reporter:  cypherpunks3                      |          Owner:  qbi
     Type:  defect                            |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Internal Services/Service - trac  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:  cypherpunks, captcha, spam        |  Actual Points:
Parent ID:  #26752                            |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+---------------------

Comment (by cypherpunks3):

 Replying to [comment:4 qbi]:
 > I changed the CAPTCHA to `ImageCaptcha` and will see how this evolves.
 >
 > A problem I see with the cypherpunks account is not necessarily related
 to CAPTCHAs. If we lift the restrictions the cypherpunks account can do
 all sort of bad stuff.

 Well yeah, but 'anonymity can be used for bad' was always true, but the
 account existed anyway. It was useable until extremely recently, and the
 project managed to survive for years until what was possibly a single
 spammer noticed they could trivially solve the ExpressionCaptcha.

 > So personally I'd like to see what happens. But if someone goes berzerk
 again, there need to be restrictions again.

 The restrictions that are still in place right now? Is there a plan to
 lift any of them at all to try the new captcha?

 It looks like cypherpunks can't even edit trac wiki pages, which is an
 even more recently added restriction. Let alone reply to or file trac
 tickets.

 Why were there no trac tickets filed for making these changes that were
 judged necessary to fix the vandal problem, anyway? It's not even clear
 when the changes happened, and there was no explanation for why they
 happened anywhere but on the mailing list, well after they had been done,
 and only in reply to someone asking about undoing them. (Meanwhile the
 more recent wiki restriction has no explanation at all anywhere.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27409#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online