• Tiff
          link
          fedilink
          410 months ago

          As I said in another comment. The captcha system was dependent on websockets, and exactly what the Devs have said, the captcha system was easy to break. I’m sure my old OCR python 2 code could have broken it.

          So when we ditched the inefficient websocket system the captcha system stopped working

        • CaptainApathetic
          link
          fedilink
          210 months ago

          Tbh I’m not sure now much captias actually help, they are trivial to bypass, you can literally do it with a browser extention

        • Tiff
          link
          fedilink
          910 months ago

          It’s still a stupid amount of active users in 1-2 weeks on a platform that had 2k active users for quite a long time

        • Tiff
          link
          fedilink
          410 months ago

          Who knows. They are not even good names, the usernames are usually part of the email. It’s usually super easy to figure out. Captcha’s were dependent on web sockets, so once the Devs got rid of those the captchas broke anyway.

          Tinfoil hat mode With enough accounts you could influence the algorithm by voting up content you want vs content you don’t want. Or basically DDoS servers. As every like on a post for a community is sent to every other instance that federates with that community.

          Or it could be people creating accounts to inflate the numbers of the fediverse to write this content and make silly headlines like these.

        • @Acetamide@lemmy.world
          link
          fedilink
          2
          edit-2
          10 months ago

          I think most of the bots at the moment don’t have any real purpose other than showing that it is possible to create so many bots. Gathering from posts on the subject and the modlog, many bots have far from a natural name in the form of [random word][long number]. I suspect many of these hots have been created by the same person and/or script.

          It will be a matter of time though before real problems start occuring if the sign up process does not become more secure. Fortunately, several pull requests exist for this at the Lemmy GitHub.