FS#48395 - Can't register on the Wiki
Attached to Project:
Arch Linux
Opened by Emilio Cobos Álvarez (emiliocobos) - Wednesday, 02 March 2016, 00:30 GMT
Last edited by Jelle van der Waa (jelly) - Sunday, 13 September 2020, 11:38 GMT
Opened by Emilio Cobos Álvarez (emiliocobos) - Wednesday, 02 March 2016, 00:30 GMT
Last edited by Jelle van der Waa (jelly) - Sunday, 13 September 2020, 11:38 GMT
|
Details
Description:
Hi, I was trying to register the Wiki to add information about a difficult-to-debug SANE+CUPS conflict. When I was trying to register, filling all the fields, but it keeps telling me that my answer is wrong. The question was: * What's the output of "pacman -V|base32|head -1" Actually that command echoes on my system: BIQC4LJNFYQCAIBAEAQCAIBAEAQCAIBAEAQCAICQMFRW2YLOEB3DKLRQFYYSALJANRUWEYLMOBWS Output of "pacman -V": .--. Pacman v5.0.1 - libalpm v10.0.1 / _.-' .-. .-. .-. Copyright (C) 2006-2016 Pacman Development Team \ '-. '-' '-' '-' Copyright (C) 2002-2006 Judd Vinet '--' This program may be freely redistributed under the terms of the GNU General Public License. Sorry if this is not the place to report something like this. |
This task depends upon
This is pretty fragile. Really bad when we have different versions of pacman in Core and Testing.
BIQC4LJNFYQCAIBAEAQCAIBAEAQCAIBAEAQCAICQMFRW2YLOEB3DKLRQFYYSALJANRUWEYLMOBWS
The correct string is:
BIQC4LJNFYQCAIBAEAQCAIBAEAQCAIBAEAQCAICQMFRW2YLOEB3DKLRQFYZCALJANRUWEYLMOBWS
Same for people who use a live ISO with an older version of pacman (which may happen towards the end of a month).
And most importantly, this will lock out all people who haven't got a running Arch Linux system (live or installed).
--edit: Sorry, was talking out of my ***, this concerns the Wiki, not the BBS. Please ignore my comment.
Correct string is BIQC4LJNFYQCAIBAEAQCAIBAEAQCAIBAEAQCAICQMFRW2YLOEB3DKLRQFYYSALJANRUWEYLMOBWS
- Blocking random bots from creating accounts: it works equally well to a request to enter any preset string.
- Blocking attackers intentionally assaulting the Wiki: doesn’t work, as the string is fixed.
Maybe it would be simpler to just remove it and replace with the equivalent solution? Like: “please enter the second word: ‘cat dog dragon’”? Does the same, simpler to maintain, no unintended side-effects on version changes. If one needs a question, that would be hard to solve for human solvers, it can be an output of any common *nix command.
I agree with that. But I'm not the wiki maintainer, and I would want to have his take on this before starting to make changes to the wiki's code. Having said that, we can think of better captchas across the board.
date -u +%V$(uname)|sha256sum|sed 's/\W//g'
but then it changed back, or maybe it's random.
Took me a while to figure this out and find this bug ticket.