Bitcoin Forum

Other => Meta => Topic started by: Burns531 on September 17, 2020, 05:48:57 PM



Title: The captcha for logging in is impossible.
Post by: Burns531 on September 17, 2020, 05:48:57 PM
Like many others, I am a little leary of big brother knowing where I surf the net.  I've started using TOR browser for all my surfing.  I tried to access an article at this site and because I cam from a TOR IP address I was given the captia to complete.  13 times I tried and each time I was failed.

There is a lot of discussion in the TOR community that captcha is puposely blocking sites that come from TOR IPs.  I'm now on my regular browser to type this - it was impossible to visit here anonymously.

In time, a lot of folks will just pass over sites that they can't access without someone looking over their shoulder.

suggest you find new way to block unwanted bots without disqualifying real people who just want privacy


Title: Re: The captcha for logging in is impossible.
Post by: ranochigo on September 17, 2020, 05:51:58 PM
We've had quite a few discussions on the forum on this. Unfortunately, without 2FA I think captchas are imperative to try to prevent brute force attempts given the nature of Bitcoin talk accounts.

Tbf, the most annoying part is probably the creation of the account and you can use the log in link after that.


Title: Re: The captcha for logging in is impossible.
Post by: LoyceV on September 17, 2020, 05:52:40 PM
I'm now on my regular browser to type this - it was impossible to visit here anonymously.
It can be done, but solving the captchas takes about 5 minutes to register, and another 5 minutes to login. After that you'll most likely have to pay an evil fee before your account can post anything.

But, once you're through, you can get a Captcha bypass code (https://bitcointalk.org/captcha_code.php), and from this moment you can login without captcha on Tor.



Quote
There is a lot of discussion in the TOR community that captcha is puposely blocking sites that come from TOR IPs.
I've had that problem many times too. But I can imagine many Tor users are actually up to no good. I have no idea if Tor is often used by bots though.


Title: Re: The captcha for logging in is impossible.
Post by: BitcoinGirl.Club on September 17, 2020, 05:54:43 PM
I suppose your frustration is about accessing to the forum. It is indeed painful resolving google captcha however theymos has given a link which you will need to generate and using that link you can easily bypass the painful experience. Try this link: https://bitcointalk.org/captcha_code.php

On that page you will find a custom link. Next time when you login, use that link. Please do not share it with anyone though.

Edit: LoyceV, you were 1 minutes 3 seconds faster than me 😜


Title: Re: The captcha for logging in is impossible.
Post by: jackg on September 17, 2020, 05:59:03 PM
There's a link at the bottom of the login screen: https://bitcointalk.org/captcha_code.php and get a captcha code..

Any IP information, provided you're not banned, is only stored on the forum for 6 months afaik so if you sign up on clearet and use tor to login beyond that, you'll have only tor ip and your nearest city information stored after 6 months.

There are other ways to get recaptcha to accept you afaik. One of those is to pay for a captcha service to solve it for about a cent or try to move your mouse in natural movements while you have the captcha screen open.

(you could also buy a months subscription of a vpn to register for about $4 afaik) I've just tried solcing a captcha through one and it took 2 attempts (although I missed a bus on the first one).


Title: Re: The captcha for logging in is impossible.
Post by: Burns531 on September 17, 2020, 06:35:55 PM
I appreciate everyone's help.

I tried the captcha bypass code appears to be like the switch on my toaster, connected to nothing.

I followed the link on Tor and it still asks me for a captcha.


Title: Re: The captcha for logging in is impossible.
Post by: TryNinja on September 17, 2020, 06:42:48 PM
I followed the link on Tor and it still asks me for a captcha.
That doesn't seems right. Does your link look like this?

https://bitcointalk.org/index.php?action=login;ccode=XXXXXXXXXXXXXXXXX

Even when putting an invalid "ccode", it still doesn't show a captcha.


Title: Re: The captcha for logging in is impossible.
Post by: Burns531 on September 17, 2020, 07:02:10 PM
Yes, I went here:

https://bitcointalk.org/captcha_code.php

and here I see:

You can bypass the CAPTCHA on the login page by bookmarking this link and using it to login:
https://bitcointalk.org/index.php?action=login;ccode=xxxxxxxxxxxxxxxxxxxx

This link is unique to your account. You cannot use it with other accounts. It only works on the login page.

I copy the link, go to the tor browser, paste and run and it takes me to the captcha page.

Is that link specific to the browser I'm using when I'm viewing it?  I'm on a non-Tor browser now, I thought I could paste that link to the Tor browswer and it would work.  But not.

Also, I went to a half dozen sites that ask for the same captcha and I'm able to get in after 1-3 tries.  For this site, I'm up to 17 tries and it still won't let me in.  I think the security level is set to "ye shall not pass," regardless of whether the captcha is correct or not.  If so, the link probably won't work either.



Title: Re: The captcha for logging in is impossible.
Post by: TryNinja on September 17, 2020, 07:06:21 PM
Is that link specific to the browser I'm using when I'm viewing it?
No. It's your account's unique link.

I just tried on Tor and it works. Even the link you posted above doesn't ask for the captcha. Try cleaning the browser's cache or trying a different one.


Title: Re: The captcha for logging in is impossible.
Post by: Burns531 on September 17, 2020, 07:29:14 PM
Nope.

I went to this page:

https://bitcointalk.org/captcha_code.php

and did a right click right on the link and "open in new Tor window" and it goes straight to the captcha page.

re: clearing the cache - its a Tor window, there is no cache.

"One more step
Please complete the security check to access bitcointalk.org"


Title: Re: The captcha for logging in is impossible.
Post by: TryNinja on September 17, 2020, 07:32:19 PM
re: clearing the cache - its a Tor window, there is no cache.
There can be. Not by default though.

"One more step
Please complete the security check to access bitcointalk.org"
So, you are talking about Cloudflare's captcha? They have nothing to do with the forum's bypass captcha code. If Cloudflare wants you to do a captcha before even seeing the front page, then you need to do it. The captcha bypass code is for when you are logging in.


Title: Re: The captcha for logging in is impossible.
Post by: Burns531 on September 17, 2020, 07:42:28 PM
Well that's a whole different can of worms.  Yes, I'm talking about the captcha to even see the front page.  Not sure if it is cloudflare or who.

You wrote that "I need to do it."  Maybe you missed my earlier message when I said I did, I'm up to 18 tries now, at least a dozen were 100% and it won't let me in.

This captcha is set by your server's security software, probably tied into your server protection software.  Methinks you have it set to high.


Title: Re: The captcha for logging in is impossible.
Post by: Burns531 on September 17, 2020, 07:50:08 PM
I dunno, despite having a commercial pilot's license, maybe I don't know what an airplane looks like  ???

https://i.ibb.co/QNMBFXv/Screenshot-from-2020-09-17-21-38-20.png

https://i.ibb.co/ZdJQnW4/Screenshot-from-2020-09-17-21-43-17.png

https://i.ibb.co/LhZ6phJ/Screenshot-from-2020-09-17-21-43-45.png

https://i.ibb.co/7J2cBWF/Screenshot-from-2020-09-17-21-44-07.png

and back to the beginning for round #19:

https://i.ibb.co/xLh2hfG/Screenshot-from-2020-09-17-21-44-32.png


Title: Re: The captcha for logging in is impossible.
Post by: LoyceV on September 17, 2020, 08:37:04 PM
I copy the link, go to the tor browser, paste and run and it takes me to the captcha page.
I just tested mine: it gets me a login page without captcha on Tor.

I dunno, despite having a commercial pilot's license, maybe I don't know what an airplane looks like  ???
Captcha is almost impossible as a human on Tor nowadays.


Title: Re: The captcha for logging in is impossible.
Post by: TheBeardedBaby on September 17, 2020, 08:52:19 PM
I've been through this as well and opened a thread about it. See here. (https://bitcointalk.org/index.php?topic=5270970.msg55056001#msg55056001)

A suggested solution was to find somewhere a public WiFi, and register an account without using Tor and then use the unique link to login without captcha.


Title: Re: The captcha for logging in is impossible.
Post by: NotATether on September 17, 2020, 09:18:43 PM
Quote
There is a lot of discussion in the TOR community that captcha is puposely blocking sites that come from TOR IPs.
I've had that problem many times too. But I can imagine many Tor users are actually up to no good. I have no idea if Tor is often used by bots though.

There's a standalone version of Tor that is just a SOCKS5 proxy, so you can plug it into any bot, script, or program that supports routing requests through SOCKS5 proxies.

There's actually a way to check if your IP address and browser combo is going to give you a bad reCaptcha score without solving any captchas. Go to this reCaptcha v3 testing page https://recaptcha-demo.appspot.com/recaptcha-v3-request-scores.php (https://recaptcha-demo.appspot.com/recaptcha-v3-request-scores.php), look for the line that says "score" and check the number next to it. The closer it is to 1, the more human it thinks you are.

Some people claim that logging into a Google site before solving a captcha increases your score to near-human (https://stackoverflow.com/a/54718274/12452330).


Title: Re: The captcha for logging in is impossible.
Post by: Chikito on September 17, 2020, 09:47:16 PM

and back to the beginning for round #19:

https://i.ibb.co/xLh2hfG/Screenshot-from-2020-09-17-21-44-32.png
Are you using public wifi?. I ever open bitcointalk site using public wifi then requiring me to solving hCaptcha like this. It doesn't happen when using your home connection or you should try open tethering using your phone to connect.

If get bad router, Tor required google captcha, not hCaptcha.


Title: Re: The captcha for logging in is impossible.
Post by: tranthidung on September 18, 2020, 01:41:09 AM
Problems with captcha when log-in result in (with request from community) captcha by-pass code by theymos.

There are two possible things might happen when you log in with Tor (normally -- without captcha bypass code)
  • You failed when you log in with you captcha. Even you choose them correctly, you still fail to log in. With this case, you have to try multiple times to log in your account
  • You even can not see captcha images at start (I guess this is your problem, isn't it)

As I know of, there is no restrictions on the captcha by-pass code. There is no update on restriction from theymos since it was launched.
You can now bypass the login CAPTCHA by bookmarking the link generated for you here: https://bitcointalk.org/captcha_code.php

If it causes problems, I might restrict it to Jr Members and above or something, but currently anyone can do it.


I know it is not a good option, because it will disclose your privacy.
  • Login your account without Tor, at the IP address is not belong to your home -- somewhere like public wifi. Or a bit better by using VPN like Tunnel Bear (https://www.tunnelbear.com/), ProtonVPN (https://protonvpn.com/), NordVPN (https://nordvpn.com/)
  • Get your captcha bypass code by visiting the link (https://bitcointalk.org/captcha_code.php).
  • Click on reset to get your new captcha code if you want for next on-Tor log-ins. I'd like to reset my captcha code when I log in my account first time with Tor (if I create my first captcha code with public WiFi or VPN.
  • From next log-in, do it with Tor.
  • Keep your code as safely from threats as possible. Don't store it in non-encrypted files

Check for more details:
  • https://www.privacytools.io/providers/vpn/
  • https://thatoneprivacysite.net/

[1] Warning
Quote
Using a VPN will not keep your browsing habits anonymous, nor will it add additional security to non-secure (HTTP) traffic.

If you are looking for anonymity, you should use the Tor Browser instead of a VPN.

If you're looking for added security, you should always ensure you're connecting to websites using encrypted DNS and HTTPS. A VPN is not a replacement for good security practices.

If you're looking for additional privacy from your ISP, on a public Wi-Fi network, or while torrenting files, a VPN may be the solution for you as long as you understand the risks involved.


Title: Re: The captcha for logging in is impossible.
Post by: LoyceV on September 18, 2020, 06:03:55 AM
There's actually a way to check if your IP address and browser combo is going to give you a bad reCaptcha score without solving any captchas. Go to this reCaptcha v3 testing page https://recaptcha-demo.appspot.com/recaptcha-v3-request-scores.php (https://recaptcha-demo.appspot.com/recaptcha-v3-request-scores.php), look for the line that says "score" and check the number next to it. The closer it is to 1, the more human it thinks you are.
I've checked it with 3 different connections, one of them through Tor, and I always get the exact same score:
Code:
"score": 0.9,
I don't think this is working properly.


Title: Re: The captcha for logging in is impossible.
Post by: ranochigo on September 18, 2020, 06:25:33 AM
I've checked it with 3 different connections, one of them through Tor, and I always get the exact same score:
Code:
"score": 0.9,
I don't think this is working properly.
I don't think there is a reliable way to check. Recaptcha is notorious for being secretive with their algorithm and I doubt they would reveal the actual probability this easily. The general rule of the thumb is that; if your IP is listed as a Tor exit node and/or a lot of spammed has passed through that IP, you're going to get ReCaptcha'd.

Some people claim that logging into a Google site before solving a captcha increases your score to near-human (https://stackoverflow.com/a/54718274/12452330).
It does. It counter intuitive if you were to log into your own Google account. It's likely to ask you for a phone verification which isn't difficult to circumvent but is troublesome.


Title: Re: The captcha for logging in is impossible.
Post by: Jet Cash on September 18, 2020, 08:10:02 AM
I don't have any problems with Bitcoin Talk, but I often have problems with other sites when using public WiFi. If the provider decides to block the site, then I use a Tor window in Brave, and ofter the captcha is impossible. In fact if I can't get in within 2 attempts, then I move on. Either I go back to Google, and look for an alternative site, or I wait until I am on a different WiFi network.

I can always tether my mobile, and I'm considering using an unregistered PAYG mobile for this.


Title: Re: The captcha for logging in is impossible.
Post by: ABCbits on September 18, 2020, 10:47:29 AM
I dunno, despite having a commercial pilot's license, maybe I don't know what an airplane looks like  ???

https://i.ibb.co/QNMBFXv/Screenshot-from-2020-09-17-21-38-20.png
--snip--

From the screenshot, i see you're using Brave Browser + Tor.

Try use Tor Browser instead since CloudFlare can detect if you use Tor Browser and would allow you access this forum directly.

There's actually a way to check if your IP address and browser combo is going to give you a bad reCaptcha score without solving any captchas. Go to this reCaptcha v3 testing page https://recaptcha-demo.appspot.com/recaptcha-v3-request-scores.php (https://recaptcha-demo.appspot.com/recaptcha-v3-request-scores.php), look for the line that says "score" and check the number next to it. The closer it is to 1, the more human it thinks you are.
I've checked it with 3 different connections, one of them through Tor, and I always get the exact same score:
Code:
"score": 0.9,
I don't think this is working properly.

I think recaptcha algorithm changed over time, last time i uses that website with Tor Browser & i got score near to 0 most of the times.


Title: Re: The captcha for logging in is impossible.
Post by: LoyceV on September 18, 2020, 11:06:54 AM
From the screenshot, i see you're using Brave Browser + Tor.

Try use Tor Browser instead since CloudFlare can detect if you use Tor Browser and would allow you access this forum directly.
That would explain why the link with the captcha-code still asks to solve a captcha: it's Cloudflare, not the forum software.

In September 2018: Cloudflare ends CAPTCHA challenges for Tor users (https://www.zdnet.com/article/cloudflare-ends-captcha-challenges-for-tor-users/):
Quote
The new Cloudflare Onion Service needed the Tor team to make "a small tweak in the Tor binary," hence it will only work with recent versions of the Tor Browser