Security updates: reCaptcha and Two-factor Authentication

[0xfeeddeadbeef]

What about adding FIDO key (Yubikey, etc) as another 2FA option?

[Mk15dap3sLVLghnQfIzftlkNU4]

In response to post #61998967. #62058087 is also a reply to the same post.

TheCaptain19WingNut wrote: "Most of the time, this system will not require any input from the user, but if deemed necessary, you may be presented with a challenge or puzzle that is intended to be easy to solve by us humans but prove difficult for bots." THIS HAPPENS EVERY DAMN TIME I TRY TO LOG IN!! The text is completely unreadable. It takes usually 6+ tries and dozens of reloading the text to get one I can kinda guess the letters of. It is anything but "easy for us humans" and nothing but an annoyance that DOES NOT HELP WITH SECURITY. Just read this: https://www.komando.com/happening-now/355395/captcha-codes-are-more-than-just-annoying-theyre-putting-your-security-at-risk. This is completely useless.

TheCaptain19WingNut wrote: Well it only took 2 dozen time today. WTF!!!!! Its about time nexus had some competition. This used to be a good site but its been getting worse. They dont support NMM anymore and the re-captcha is a damn joke.

I'll add this here:
"Google's new CAPTCHA security login raises 'legitimate privacy concerns'"
https://www.businessinsider.com.au/google-no-captcha-adtruth-privacy-research-2015-2

Partial summary. Google ReCaptcha doesn't just check if you're human, it identifies you as a specific individual and tracks your travels across the Internet (e.g. including sites with Google captcha logins). When you use their recaptcha, they also place / update a Google cookie to remember where you individually have been / your activities. They use a mix of fingerprinting techniques (anonymity-defeating techniques), including examining all info about your browser, including which browser addons you have installed. In other words, it's Google. Edited July 22, 2018 by Mk15dap3sLVLghnQfIzftlkNU4

[Balx2]

In response to post #62065522. #62067477 is also a reply to the same post.

Balx2 wrote: 2FA is good news but something changed and now I can't log into the forums at all. I click on forums and then on the log in button and it says I am already logged in and the page it redirects to doesn't have a log out option. Could probably fix it by deleting cookies and session data but I should not have to do that and most people wouldn't know to try doing that.

Pickysaurus wrote: Please log out from the site and login again, you have outdated cookies stored in your browser :)

Thanks Pickysaurus, appreciate that you took the time to respond to my comment.

[Rodjama]

In response to post #62065522. #62067477, #62093057 are all replies on the same post.

Balx2 wrote: 2FA is good news but something changed and now I can't log into the forums at all. I click on forums and then on the log in button and it says I am already logged in and the page it redirects to doesn't have a log out option. Could probably fix it by deleting cookies and session data but I should not have to do that and most people wouldn't know to try doing that.

Pickysaurus wrote: Please log out from the site and login again, you have outdated cookies stored in your browser :)

Balx2 wrote: Thanks Pickysaurus, appreciate that you took the time to respond to my comment.

.... Edited July 24, 2018 by Rodjama

[Rodjama]

I had major issues with the captcha mechanism on my gaming machine. When enabling the audio, it doesn't match what's on the screen...

After several attempts with & without the audio clues, I gave up.

This was yesterday, but today no issues of course logging in & did not have to fill out that silly captcha rubbish

 

Very odd!.

[DeathClawDC]

Well new problem found, the second recaptcha (the one with number challenge) just keeps giving me error of my code being wrong every time reloading doesn't work and I have to restart my whole browser and reconnect my net to get first recaptcha (the one with a blue arrow) and then I'm finally able to login

Don't think it's properly working for me

[NexusChrono75]

It's gonna be authentic with ReCaptcha anyone?

[CyniclyPink]

In response to post #61998967. #62058087, #62075827 are all replies on the same post.

TheCaptain19WingNut wrote: "Most of the time, this system will not require any input from the user, but if deemed necessary, you may be presented with a challenge or puzzle that is intended to be easy to solve by us humans but prove difficult for bots." THIS HAPPENS EVERY DAMN TIME I TRY TO LOG IN!! The text is completely unreadable. It takes usually 6+ tries and dozens of reloading the text to get one I can kinda guess the letters of. It is anything but "easy for us humans" and nothing but an annoyance that DOES NOT HELP WITH SECURITY. Just read this: https://www.komando.com/happening-now/355395/captcha-codes-are-more-than-just-annoying-theyre-putting-your-security-at-risk. This is completely useless.

TheCaptain19WingNut wrote: Well it only took 2 dozen time today. WTF!!!!! Its about time nexus had some competition. This used to be a good site but its been getting worse. They dont support NMM anymore and the re-captcha is a damn joke.

Mk15dap3sLVLghnQfIzftlkNU4 wrote: I'll add this here:
"Google's new CAPTCHA security login raises 'legitimate privacy concerns'"
https://www.businessinsider.com.au/google-no-captcha-adtruth-privacy-research-2015-2

Partial summary. Google ReCaptcha doesn't just check if you're human, it identifies you as a specific individual and tracks your travels across the Internet (e.g. including sites with Google captcha logins). When you use their recaptcha, they also place / update a Google cookie to remember where you individually have been / your activities. They use a mix of fingerprinting techniques (anonymity-defeating techniques), including examining all info about your browser, including which browser addons you have installed. In other words, it's Google.

Im really looking forward to the reply for this.....

"Google's new CAPTCHA security login raises 'legitimate privacy concerns'"
https://www.businessinsider.com.au/google-no-captcha-adtruth-privacy-research-2015-2

[Pickysaurus]

In response to post #62123717.

Dipanjanc33 wrote: Well new problem found, the second recaptcha (the one with number challenge) just keeps giving me error of my code being wrong every time reloading doesn't work and I have to restart my whole browser and reconnect my net to get first recaptcha (the one with a blue arrow) and then I'm finally able to login
Don't think it's properly working for me

We made some changes to the system over the last couple of days so it should be working as expected for everyone now.

[DeathClawDC]

In response to post #62123717. #62164147 is also a reply to the same post.

Dipanjanc33 wrote: Well new problem found, the second recaptcha (the one with number challenge) just keeps giving me error of my code being wrong every time reloading doesn't work and I have to restart my whole browser and reconnect my net to get first recaptcha (the one with a blue arrow) and then I'm finally able to login
Don't think it's properly working for me

Pickysaurus wrote: We made some changes to the system over the last couple of days so it should be working as expected for everyone now.

Ok now that's what i like about this community , instant reply with instant system fix(or say check)
anyway really appreciate the reply and thanks again for taking your time for replying