Jump to content

Security updates: reCaptcha and Two-factor Authentication


SirSalami

Recommended Posts

In response to post #61998967. #62058087, #62075827, #62145702 are all replies on the same post.


  Reveal hidden contents


the mere act of casually browsing mods isn't even fun anymore.........
Link to comment
Share on other sites

  • Replies 60
  • Created
  • Last Reply

Top Posters In This Topic

This is so dumb. I usually like the sites upgrades, but this one is nothing but a pain. When I accessed it with my pc all I had to do is click "I am not a robot." When I accessed it with my cellphone I had to do the captcha thing that was nearly impossible to read. I finally had to use the audio thingie to say it for me. If it has to be there it would make much more sense to only have to click the I am not a robot for cell access and do the captcha thing for your pc browser.
Link to comment
Share on other sites

  • 3 weeks later...
In response to post #62414077.


  Reveal hidden contents


yea i don't like it either it is stupid and pointless to have a set up like that . i would never do something like that if i run a website .
Link to comment
Share on other sites

In response to post #61983402. #61992362, #61993342, #61994292, #61998187, #62004637, #62004807, #62005667, #62051437 are all replies on the same post.


  Reveal hidden contents


makes me wounder what they have agents robots . .
Link to comment
Share on other sites

  • 3 weeks later...
In response to post #61978992.


  Reveal hidden contents


NO it does not look godd ;(

I have now tried 2 WEEKS daily multiple times to login and recaptcha did not work and fallback did not Trigger!
It is pure Luck it did trigger now! I Start toi really HATE Google recaptcha and Nexusmods gets more and more annoying.

WHY ?! Money issus (Server) or whatever.. And i can't update my hardware or software just for fun to "meet" their expectations money is THERE an issue too ;)

P.S. Please think about people not able to use "modern" browsers. And sometimes "modern browsesr are an annoyance too.
Link to comment
Share on other sites

In response to post #61978992. #63448116 is also a reply to the same post.


  Reveal hidden contents


They're not going to focus on older hardware or browsers. It's 2018, they're just trying to adapt to newer technology. It's not their fault that your older hardware can't seem to exactly keep up. And it's not money issues, it's security issues. They need to enhance their security otherwise the risks of them getting hacked are higher. Edited by KamranMackey
Link to comment
Share on other sites

  • 2 months later...
In response to post #61982862. #61985287, #61989602, #61992117 are all replies on the same post.


  Reveal hidden contents


I strongly second the motion for an optional TOTP-based 2FA system. It's really not that hard to set up, and considerably more secure than email-based 2fa - nor is it subject to email delays.
Link to comment
Share on other sites

  • 4 months later...

> Many of you have no doubt already noticed the first of these new features when logging in to the website

 

You mean that god awful login Captcha that is hilariously easy to get around by abusing googles own speech to text service?

 

> Most of the time, this system will not require any input from the user

 

Maybe if you're lucky and don't care about privacy, for the rest of us it's a ordeal of disabling various anti-tracking addons, disabling content blocking and enabling javascript

 

> We realize that this may be a bit of an annoyance

 

It's a massive annoyance. In fact it's such an annoyance that I got feed up and now just use jdownload2 and it's niffy little Captcha solver to avoid logging in via a browser

 

> but we feel these systems are necessary to help ensure that our services are not compromised

 

Lol then you're wrong. No other website does this, not to mention that if you actually cared about the risk of compromised you'd set up some sort of proper 2 factor auth instead of this disgrace of a email system. Yea no need to worry about compromise when anyone with access to my email account can read my 2fa codes.

 

There's also the fact that this terrible system doesn't even bother to make the user fill in the code every time, so if my computer is ever compromised your 2fa won't mean s#*!

 

> When enabled, this system serves two purposes. First, it is designed to keep your account secure by ensuring that you, and only you, have access to your account

 

No. It ensures that anyone with access to my computer or my email can access my account. I mean really how hard is it to set up a OTP system?

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

×
×
  • Create New...