Not sure you need to make sure the user is human on a log-in form. Just limit th... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

spiznnx on April 22, 2019 | parent | context | favorite | on: Think You’re Discreet Online? Think Again

Not sure you need to make sure the user is human on a log-in form. Just limit the number of attempts per day per account, perhaps with email verification to pass it.

maccard on April 23, 2019 [–]

At even small to moderate scales you will end up with legitimate users being locked out of their accounts en masse with this approach.

spiznnx on April 26, 2019 | [–]

Well, most log-in forms do not have any captcha, so I wonder how they do it.

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact