hCaptcha is making the DDoS attacks worse

[Tommy W]

hCaptcha

hCaptcha has done nothing more than make the site more susceptible to attacks due to it's many exploits, I'd reccomend you change this system ASAP.

Just to name one of the exploits - if you spam skip on the captcha, after around 15 clicks it will let you through, at least with reCaptcha you had to actually solve it to access the site.

I'd recommend changing to a different DDoS mitigation service for the time being as this just makes the attacks more frequent as the bots dont even need to solve anything to get in.​

 

[Jayson]

Hi! (This is a fairly generic message I'll be using)

Unfortunately, we only have control over when the captcha is displayed, however not the actual captcha as that is managed by Cloudflare. For information on why Cloudflare made this switch and Privacy Pass (in order to avoid getting as many captchas), please refer to Cloudflare's blog post Supporting the latest version of the Privacy Pass Protocol.

If you'd like to comment on our usage of Cloudflare, please use a suggestion thread. For shortened summaries, refer to staff comments on active suggestion threads.

Active Relevant Suggestion Threads:

• Remove HCaptcha
• Cloudflare sensitivity.

Please refrain from creating new suggestion threads if one previously listed already covers your points.

If you'd like to comment on Cloudflare's usage of hCaptcha, you're free to use the General Discussion forum, however, remember that we are currently unable to choose which captcha platform is used. Instead, you may submit feedback to the Cloudflare community.

Want to skip some captchas? Try out the Privacy Pass extension which is directly sponsored by Cloudflare.