Maniphest T174874

Create a standalone Wikimedia CAPTCHA service
Closed, DeclinedPublic
Actions

Assigned To

None

Authored By

	Bugreporter
	Sep 3 2017, 4:37 AM

Tags

Referenced Files

None

Subscribers

Tokens

"Like" token, awarded by Kizule.

Description

Wikimedia wikis currently use FancyCaptcha, which is considered ineffective. It is proposed that reCaptcha may be used, but it's rejected for several reasons (see T174861: CAPTCHA ineffective, consider using reCAPTCHA).

On the contrary there're several tools in Labs (https://utrs.wmflabs.org/ for example) currently uses reCaptcha. This may have privacy issue (T133919: [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions).

As a compromise, I think we may create a Wikimedia CAPTCHA service which can be used by Wikimedia sites, external MediaWiki sites and tools hosted in Cloud VPS and Toolforge.

Related Objects

Mentioned In: T250227: Investigate and evaluate hCaptcha to replace Wikimedia's Fancy Captcha
T174861: CAPTCHA ineffective, consider using reCAPTCHA
Mentioned Here: T158909: Automatically detect spambot registration using machine learning (like invisible reCAPTCHA)
T100706: Revamp anti-spamming strategies and improve UX
T173055: Better defaults for preventing spam
T133919: [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions
T174861: CAPTCHA ineffective, consider using reCAPTCHA

Event Timeline

Bugreporter created this task.Sep 3 2017, 4:37 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 3 2017, 4:37 AM

Bugreporter mentioned this in T174861: CAPTCHA ineffective, consider using reCAPTCHA.Sep 3 2017, 4:38 AM

JEumerus subscribed.Sep 3 2017, 8:00 AM

Kizule awarded a token.Sep 3 2017, 3:17 PM

Is this something we need to write for ourselves? Or is there something we can deploy?

I note, we technically have a "captcha service"; that's how we serve our fancycaptchas now

See also T173055 and T100706...

Ricordisamoa subscribed.Sep 4 2017, 1:31 AM

Volker_E subscribed.Sep 12 2017, 11:19 PM

IMO this task is too vague to be useful and should be closed. For a specific proposal for implementing a captcha service, see T158909: Automatically detect spambot registration using machine learning (like invisible reCAPTCHA) .

Kamsuri5 subscribed.Sep 14 2017, 12:36 PM

Closing as per last comment. Related more specific / more feasible open tasks exist.

Bugreporter mentioned this in T250227: Investigate and evaluate hCaptcha to replace Wikimedia's Fancy Captcha.Apr 16 2020, 3:29 PM