Page MenuHomePhabricator

Figure out a captcha option for IDM
Closed, ResolvedPublic

Description

We need to prevent spammers from mass-creating accounts. External solutions like Google Captcha are not acceptable due to privacy concerns. Initially we should evaluate what existing account creation solutions (on wiki, Phabricator) use and if these are not a good fit, we should study existing FLOSS solutions.

Event Timeline

Aklapper renamed this task from Figure out a captcha option to Figure out a captcha option for IDM.Oct 19 2022, 9:10 AM

There's lots of (partially heated) past discussion. See stuff like T289607 (no news for a year), T250227, T6845, etc etc. Phabricator itself has no captchas involved.

Change 904757 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/software/bitu@master] Signup: Add captcha to signups.

https://gerrit.wikimedia.org/r/904757

SLyngshede-WMF changed the task status from Open to In Progress.Mar 31 2023, 9:33 AM

This doesn't solve the issue of captchas across the various projects, but it does provides a simple solution for the IDM (and other Django based projects): https://django-simple-captcha.readthedocs.io/
Added to signup page in: https://gerrit.wikimedia.org/r/c/operations/software/bitu/+/904757

Change 904757 merged by Slyngshede:

[operations/software/bitu@master] Signup: Add captcha to signups.

https://gerrit.wikimedia.org/r/904757