-
Captcha
From
MRO@VERT/BBSESINF to
Lord Blackfair on Fri Jul 30 08:26:05 2021
Re: Captchaã By: Lord Blackfair to All on Thu Jul 29 2021 05:48 pmãã > This is probally off topic. But i will post it here so everyone can seeã > it. Since I innitiated my Captcha program on my BBS. Its been keeping theã > bots out and I have not seen any attempts at seeing any scripted bots tryingã > to logon using SSH,ROOT,ADMIN ETC...ã > With the help of another sysop he made a scripted batch file that changesã > the captcha number every 10 minutes, so its not the same with every login. Iã > am still working on the process of using the Randam INT, but am havingã > problems trying to get it to work with the compare. So if anyone wishes toã > use it. I do have it posted for Download on Vert. and if we have anyã > programers out there in Baja that want to help me improve it feel free toã > drop a line.ã > Lord Blackfair (Blackfair's Manor) blackf.synchro.netãã INT I Ý RANDOM I 3 Ý COMPARE I 0 Ý IF_EQUAL Ý [WHATEVER COMMAND YOU WANT] Ý else Ý [WHATEVER COMMAND YOU WANT]ã END_IFã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
-
From
Lord Blackfair@VERT/BLACKF to
MRO on Fri Jul 30 23:21:21 2021
Re: Captchaã By: MRO to Lord Blackfair on Fri Jul 30 2021 08:26 amãã > Re: Captchaã > By: Lord Blackfair to All on Thu Jul 29 2021 05:48 pmã >ã > > This is probally off topic. But i will post it here so everyone can seeã > > it. Since I innitiated my Captcha program on my BBS. Its been keeping theã > > bots out and I have not seen any attempts at seeing any scripted botsã > > trying to logon using SSH,ROOT,ADMIN ETC...ã > > With the help of another sysop he made a scripted batch file thatã > > changes the captcha number every 10 minutes, so its not the same withã > > every login. I am still working on the process of using the Randam INT,ã > > but am having problems trying to get it to work with the compare. So ifã > > anyone wishes to use it. I do have it posted for Download on Vert. and ifã > > we have any programers out there in Baja that want to help me improve itã > > feel free to drop a line.ã > > Lord Blackfair (Blackfair's Manor) blackf.synchro.netã >ã > INT Iã > Ý RANDOM I 3ã > Ý COMPARE I 0ã > Ý IF_EQUALã > Ý [WHATEVER COMMAND YOU WANT]ã > Ý elseã > Ý [WHATEVER COMMAND YOU WANT]ã > END_IFã By using that, wouldnt that only allow if the script picks 0?ãi want to COMPARE I with the STRãã Lord Blackfair (Blackfair's Manor) blackf.synchro.netãã---ã þ Synchronet þ Blackfair's Manor - blackf.synchro.netã
-
From
MRO@VERT/BBSESINF to
Lord Blackfair on Sat Jul 31 02:33:55 2021
Re: Captchaã By: Lord Blackfair to MRO on Fri Jul 30 2021 11:21 pmãã > Re: Captchaã > By: MRO to Lord Blackfair on Fri Jul 30 2021 08:26 amã >ã > > Re: Captchaã > > By: Lord Blackfair to All on Thu Jul 29 2021 05:48 pmã >ã > > > This is probally off topic. But i will post it here so everyoneã >ã > > > canã > > > see it. Since I innitiated my Captcha program on my BBS. Its beenã > > > keeping the bots out and I have not seen any attempts at seeing anyã > > > scripted bots trying to logon using SSH,ROOT,ADMIN ETC...ã > > > With the help of another sysop he made a scripted batch file thatã > > > changes the captcha number every 10 minutes, so its not the same withã > > > every login. I am still working on the process of using the Randamã > > > INT, but am having problems trying to get it to work with the compare.ã > > > So if anyone wishes to use it. I do have it posted for Download onã > > > Vert. and if we have any programers out there in Baja that want toã > > > help me improve it feel free to drop a line.ã > > > Lord Blackfair (Blackfair's Manor) blackf.synchro.netã >ã > > INT Iã > > Ý RANDOM I 3ã > > Ý COMPARE I 0ã > > Ý IF_EQUALã > > Ý [WHATEVER COMMAND YOU WANT]ã > > Ý elseã > > Ý [WHATEVER COMMAND YOU WANT]ã > > END_IFã > By using that, wouldnt that only allow if the script picks 0?ã > i want to COMPARE I with the STRããi believe you copy it to a str and compare itããjust by checking if it's an exact number you can use that code i posted.ãand that's what your capcha does, rightããanyways, those bots will not solve your capcha. they will get confused and sitãon the connection.ãã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
-
From
Digital Man@VERT to
MRO on Sat Jul 31 12:26:15 2021
Re: Captchaã By: MRO to Lord Blackfair on Sat Jul 31 2021 02:33 amãã > anyways, those bots will not solve your capcha. they will get confused andã > sit on the connection.ããYup. Truth be told, you could just print "Hit ESC now to continue" and disconnect if the ESC key (or whatever key you like) isn't hit within a few seconds. No bot is going to hit the ESC key - problem solved. You don't really *need* to display/prompt for a random anything since nobody is going to build a BBS-specific bot (they just aren't a target of interest).ããIf you're running a recent build of Synchronet with a recent login.js, it'll disconnect dumb terminals (those not supporting ANSI or any other emulation) very quickly when no input is sent and that disconnect time is configurable.ã-- ã digital manããRush quote #57:ãHe picks up scraps of information, he's adept at adaptation .. Digital ManãNorco, CA WX: 92.3øF, 35.0% humidity, 2 mph E wind, 0.00 inches rain/24hrsã---ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
-
From
Lord Blackfair@VERT/BLACKF to
All on Wed Aug 4 22:35:21 2021
Got it running, had to tweak some things.ãmade it start before anything else. then load the login matrix as a xtrn_prog.ãã#Captcha program by Keith Cunningham edit to how you would likeã:HomeãINT RãSTR Aãrandom r 999999ãCLSã#menu "Gate"ãPrint "\r\n Welcome to Lord Blackfair's Captcha for Synchronet BBS v4.00\r\n"ãPrint "\r\n To Prove you are not a BOT please enter [ The Number ] below.\r\n"ããprint RãPrint " "ãGETLINE A 6ãCOMPARE R AãIF_falseãgoto wrongãPAUSEã#Print "Welcome to The BBS!!!"ããend_ifãgoto startã:wrongãPrint "\r\nThat is not correct, Please try again.\r\n"ãpauseãgoto homeã:startãPrint "Welcome to The BBS!!!"ãexec_xtrn matrixãã Lord Blackfair (Blackfair's Manor) blackf.synchro.netãã---ã þ Synchronet þ Blackfair's Manor - blackf.synchro.netã
-
From
MRO@VERT/BBSESINF to
Lord Blackfair on Thu Aug 5 09:20:03 2021
Re: Captchaã By: Lord Blackfair to All on Wed Aug 04 2021 10:35 pmãã > Got it running, had to tweak some things.ã > made it start before anything else. then load the login matrix as aã > xtrn_prog.ã >ããso you have something for the bots to sit there and perhaps loop back if they enter any input.ããand your users have to enter a long number each time.ããi would rethink that.ã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
-
From
Digital Man@VERT to
MRO on Thu Aug 5 11:53:47 2021
Re: Captchaã By: MRO to Lord Blackfair on Thu Aug 05 2021 09:20 amãã > Re: Captchaã > By: Lord Blackfair to All on Wed Aug 04 2021 10:35 pmã >ã > > Got it running, had to tweak some things.ã > > made it start before anything else. then load the login matrix as aã > > xtrn_prog.ã >ã >ã > so you have something for the bots to sit there and perhaps loop back ifã > they enter any input.ã >ã > and your users have to enter a long number each time.ã >ã > i would rethink that.ããIf his goal is to experiment with/learn Baja, then he's achieving that. If the goal is keep bots from tieing up nodes, there's much easier solutions. If the goal is prevent bots from trying to authenticate with a username and password (why?), there's easier solutions (e.g. just prompt for a specific key, like ESC).ããActually letting a bot send a username and password is a good way to detect and auto-block them and that support is built-into SBBS:ã
https://wiki.synchro.net/howto:block-hackersã-- ã digital manããSynchronet "Real Fact" #1:ãDevelopment began in 1990 of the (unnamed at the time) Synchronet BBS software.ãNorco, CA WX: 89.5øF, 40.0% humidity, 4 mph WNW wind, 0.00 inches rain/24hrsã---ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
-
From
Lord Blackfair@VERT/BLACKF to
MRO on Thu Aug 5 21:31:05 2021
Re: Captchaã By: MRO to Lord Blackfair on Thu Aug 05 2021 09:20 amãã > Re: Captchaã > By: Lord Blackfair to All on Wed Aug 04 2021 10:35 pmã >ã > > Got it running, had to tweak some things.ã > > made it start before anything else. then load the login matrix as aã > > xtrn_prog.ã I could always rewite it so that a user has to press a key, but so far its working and i get no complaints yet.ãã Lord Blackfair (Blackfair's Manor) blackf.synchro.netãã---ã þ Synchronet þ Blackfair's Manor - blackf.synchro.netã
-
From
MRO@VERT/BBSESINF to
Digital Man on Thu Aug 5 21:43:26 2021
Re: Captchaã By: Digital Man to MRO on Thu Aug 05 2021 11:53 amãã > Re: Captchaã > By: MRO to Lord Blackfair on Thu Aug 05 2021 09:20 amã >ã > > Re: Captchaã > > By: Lord Blackfair to All on Wed Aug 04 2021 10:35 pmã >ã > > > Got it running, had to tweak some things.ã > > > made it start before anything else. then load the login matrix as aã > > > xtrn_prog.ã >ã >ã > > so you have something for the bots to sit there and perhaps loop back ifã > > they enter any input.ã >ã > > and your users have to enter a long number each time.ã >ã > > i would rethink that.ã >ã > If his goal is to experiment with/learn Baja, then he's achieving that. Ifã > the goal is keep bots from tieing up nodes, there's much easier solutions.ã > If the goal is prevent bots from trying to authenticate with a username andã > password (why?), there's easier solutions (e.g. just prompt for a specificã > key, like ESC).ã >ã > Actually letting a bot send a username and password is a good way to detectã > and auto-block them and that support is built-into SBBS:ã >
https://wiki.synchro.net/howto:block-hackersããand in my case i block all the ones that fail my challenge code. so, eventually the .can file gets so huge it slows down synchronet.ã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
-
From
Digital Man@VERT to
MRO on Thu Aug 5 20:11:39 2021
Re: Captchaã By: MRO to Digital Man on Thu Aug 05 2021 09:43 pmãã > and in my case i block all the ones that fail my challenge code. so,ã > eventually the .can file gets so huge it slows down synchronet.ããMaybe you should rethink that design then.ã-- ã digital manããSynchronet "Real Fact" #117:ãSynchronet v1b r0 (for MS-DOS) was released on September 25, 1992ãNorco, CA WX: 77.1øF, 54.0% humidity, 3 mph ENE wind, 0.00 inches rain/24hrsã---ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
-
From
MRO@VERT/BBSESINF to
Lord Blackfair on Fri Aug 6 08:31:41 2021
Re: Captchaã By: Lord Blackfair to MRO on Thu Aug 05 2021 09:31 pmãã > Re: Captchaã > By: MRO to Lord Blackfair on Thu Aug 05 2021 09:20 amã >ã > > Re: Captchaã > > By: Lord Blackfair to All on Wed Aug 04 2021 10:35 pmã >ã > > > Got it running, had to tweak some things.ã > > > made it start before anything else. then load the login matrix as aã > > > xtrn_prog.ã > I could always rewite it so that a user has to press a key, but so far itsã > working and i get no complaints yet.ã >ããi complained.ã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
-
From
MRO@VERT/BBSESINF to
Digital Man on Fri Aug 6 08:32:00 2021
Re: Captchaã By: Digital Man to MRO on Thu Aug 05 2021 08:11 pmãã > Re: Captchaã > By: MRO to Digital Man on Thu Aug 05 2021 09:43 pmã >ã > > and in my case i block all the ones that fail my challenge code. so,ã > > eventually the .can file gets so huge it slows down synchronet.ã >ã > Maybe you should rethink that design then.ããi just trim it down every year.ã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
-
From
Lord Blackfair@VERT/BLACKF to
MRO on Fri Aug 6 17:59:27 2021
Re: Captchaã By: MRO to Lord Blackfair on Fri Aug 06 2021 08:31 amãã > Re: Captchaã > By: Lord Blackfair to MRO on Thu Aug 05 2021 09:31 pmã >ã > > Re: Captchaã > > By: MRO to Lord Blackfair on Thu Aug 05 2021 09:20 amã >ã > > > Re: Captchaã > > > By: Lord Blackfair to All on Wed Aug 04 2021 10:35 pmã >ã > > > > Got it running, had to tweak some things.ã > > > > made it start before anything else. then load the login matrix as aã > > > > xtrn_prog.ã > > I could always rewite it so that a user has to press a key, but so farã > > its working and i get no complaints yet.ã >ã >ã > i complained.ã Yes you did. And you have a right to.ã Lord Blackfair (Blackfair's Manor) blackf.synchro.netãã---ã þ Synchronet þ Blackfair's Manor - blackf.synchro.netã