<![CDATA[Save-Point - Feedback and Suggestions]]>

<![CDATA[Are the New Security Questions Too Hard?]]> https://www.save-point.org/thread-11488.html Sat, 15 Feb 2025 19:05:04 +0000 DerVVulfman]]> https://www.save-point.org/thread-11488.html

The short version

Dear friends,

For quite some time, we have been hit with a large number of incoming spambots and bot accounts. Do remember that it was in late 2019 that we had the massive flood of 500 bots after our forum was attacked. We have implemented counter measures since then, but a large number of accounts of malicious nature are still incoming.

Since the 2019 aggression, every account has undergone an after-creation test with other tools. These tests can indicate fraudulent eMail addresses and more. And over seventy (70) such bot accounts were created, identified and subsequently banned this past January alone. That is not to say the security measures we have in place do not function. In fact, the measures have good reputations, and the sheer number of bots they have prevented from intruding is outstanding.

But current systems are becoming more advanced. Features such as the "hidden field" or honeypot security measure has existed for so long, bot systems have become advanced enough to skip what can be best described as a trick question. And it may surprise some, but Captcha systems were not even developed as anti-spam services. In fact, the word-obscuring feature was actually used for the training of AI such as OCR (Optical Character Reader) programs for transcribing books to the internet, even when in extremely poor conditions.

And so... I have replaced the previous batch of security questions with new ones, also updating the window that exists within our Registration Form thus:

This should make it very clear to new applicants why there are security questions, and that one "may need to view the forum board itself for answers."

There are now five security questions within the forum's roster. And as of their creation, and time of this poll's posting, not a single bot account has been created. There have been roughly 150 views of these questions with no correct responses, so I am hoping that it is only deterring spambots alone.

So that is why I seek opinion.

[i]For those who are willing, please open a 'separate' browser and enter/view the Registration Page for Save-Point and cycle through the five security questions. I am emphasizing separate solely because the answers to most of the questions are found within the main page of the forum itself as the Anti-Spammer Security Question window indeed states.[/i]

And so this poll asks those who have examined the questions, are the questions too hard or are they just fine?

If anyone has a suggestion for any other security question, feel free to PM me. But it must be related to the forum, likely requiring the viewing of the forum board itself.

Thank you.

EDIT: Two of the security questions are based on previous questions that did garner correct answers in the past. However, they now have been worded differently or have their 'hints' in new locations due to changes made in the forum layout.

Security.png (Size: 7.55 KB / Downloads: 748) ]]>