Remove HCaptcha

[MarkElf]

I don't know about others getting flagged for 'unusual network behavior' but I have to verify that I'm a human majority of the time accessing the site. Not sure if it's because I check stupidly frequently and have connected to the site using several ips since I'm in New York and there's wifi everywhere but I noticed this morning that HCapton is being used now and it gave me the world's hardest time picking pictures of a boat, birds, then umbrellas and wasted 10m of my life clicking pictures. Please revert back to the legacy check for being human or clear my account of being flagged for 'unusual network activity.' I, nor anyone else, should have a difficult time accessing the site.

 

[Swasomness]

FOREAL remove that shit

 

[Airee]

PrivacyPass no longer works.

PrivacyPass isn't 100% flawless. Sometimes it'll make you do a captcha anyways. Just skipped the captcha now.

 

[Tom Croft]

PrivacyPass isn't 100% flawless. Sometimes it'll make you do a captcha anyways. Just skipped the captcha now.

I think they must've just changed something, I just got the captcha right now too.

 

[Airee]

I think they must've just changed something, I just got the captcha right now too.

It's a system that selectively allows people in. Sometimes your authorization will wear out or be otherwise devalidated i.e. your IP address changed or your cookie died.
HCaptcha is not the issue- MC-Market's strict WAF rules are the issue. And it's not even an issue really, how mentally challenging is identifying umbrellas?

 

[Jayson]

Due to a recent surge in bots at about 20k - 30k, we have temporarily re-enabled the captcha for all visitors.

As for Privacy Pass, it should still work - just sometimes it bugs out. Perhaps try refreshing your page when it fails?

"Selling server setups for 100 Privacy Passes"

You just gave me an excellent idea. Why in the world don't I just make our own version of Privacy Pass minus the browser extension?

 

[chickenputty]

Wait, you're telling me I'm not meant to get these every time I start a new session on mc-market? wtf...

 

[Zlitz]

It's built into Cloudflare me old mate.

 

[Jayson]

We have made several adjustments to help block bots while targeting specific users instead of a catch-all approach. If you receive a captcha, please PM me the ray ID unless the site is running slow in which case it may be prompted by a different factor.

Before messaging me:

• Make sure your browser/device is up to date to make sure it can pass our browser challenge;
• Ensure any browser plug-ins you may have are not blocking our cookies/JavaScript.

3 May 2020 11:46 EDT:

• Added better support for hosting providers (planned modifications to system upcoming);

 

[1tzEmerald]

oml why are you all still complaining about hCapatcha, It's not going to get removed. Its just a security thing before you access the site, Once your on the site your on the site.

 

[BOOP]

oml why are you all still complaining about hCapatcha, It's not going to get removed. Its just a security thing before you access the site, Once your on the site your on the site.

except for when some people are getting it every 10 minutes

 

[1tzEmerald]

except for when some people are getting it every 10 minutes

It's annoying I know, but it won't get removed. I doubt it. And about 10 minutes, sometimes I really just can't bothered entering the site cause it does it lol

 

[Jayson]

except for when some people are getting it every 10 minutes

It's annoying I know, but it won't get removed. I doubt it. And about 10 minutes, sometimes I really just can't bothered entering the site cause it does it lol

Nobody should be getting a captcha every 10 minutes unless they’re running on some very old hardware. If that occurs, please let me know.

The only instance where you should be receiving captchas is when the site is under attack which should be obvious. We have for the most part patched up the holes though, so it shouldn’t be necessary going forward.

 

[1tzEmerald]

hCapatcha isn't the worst thing, You all complaining ain't going to get it removed. Why waste your time?

 

[Landon]

With the recent patches, it definitely seems to be no longer occurring as often. Thanks Jayson :tup:

 

[Mick]

Over the past few months, we have been working to improve our attack infrastructure and with the changes made by Cloudflare putting hCaptcha on the site that's definitely increased the difficulty of doing so since it is often so difficult to complete the challenge request made of you.

Over the past month or two we've been able to get this into a pretty good system with this, with hCaptcha only showing up on very rare occasions and only once through a pretty advanced system.

I apologise for the time it took for us to get this system working, it's quite finicky and difficult to do but I think we're in a great position for it at the moment.

I'll move this to accepted, thanks once again.