Just saw the New Scratcher Info thread, and one of the first replies got me thinking, why doesn't Scratch have CAPTCHA or ReCAPTCHA? Its not like there is a reason not to have it, and it would make the site a lot more safe.

cheerio
-me

The site has other, less intrusive methods of keeping things secure. Performing a captcha every time you want to sign in can be quite tedious.

The 60/120 second rule for forums and 30 second rule for new scratch comments keeps things under control pretty well. There is also a mod on at all times (that's 24/7 moderation!), so anything that does get through the filters is bound to be dealt with quickly.

Adding a captcha would just be redundant.

Good point. But what I meant was for it to be upon signup.

-Beast- wrote:

Good point. But what I meant was for it to be upon signup.

Still a bit redundent. But I suppose that makes it a slightly more valid point.

-Beast- wrote:

Good point. But what I meant was for it to be upon signup.

I think that would be good. Also, when signing in from a new computer, just to deter some bots…

Sure, CAPTCHAS might slow down spambots as well (they probably won't stop them, as most of them can solve CAPTCHAs by now), but we've already got a system to slow them down if they successfully signed up - the New Scratcher system! Plus, CAPTCHAs only slow them down for ~5 seconds!

Now, as the annoying CAPTCHAs you have to solve every time you sign up can only stall the spambots for ~5 seconds, it's not worth our or the Scratch Team's time.

It does

Just hidden on the signin/login page, so bots go and fill it out, and can't get past it

QuillzToxic wrote:

It does

Just hidden on the signin/login page, so bots go and fill it out, and can't get past it

Ah, yes. I forgot about those. Extra fields on the form that are hidden to the end-user, but can be seen by the bot. If it gets filled out, it must be a bot.

I suppose the fact that there are multiple “pages” on the sign-up form can't help the bots either.

PullJosh wrote:

QuillzToxic wrote:

It does

Just hidden on the signin/login page, so bots go and fill it out, and can't get past it

Ah, yes. I forgot about those. Extra fields on the form that are hidden to the end-user, but can be seen by the bot. If it gets filled out, it must be a bot.

I suppose the fact that there are multiple “pages” on the sign-up form can't help the bots either.

Keepass still works with that doe.