I am no longer able to download files from CurseForge due to the new CAPTCHA feature.
First of all, clicking the download links from the file's page does nothing. If I turn off plugins (Flash) and reload the page, I get plain text links which I am able to click, but clicking them brings me to a page that informs me I must pass a CAPTCHA before I can download the file... except I can't see the CAPTCHA.
Re-enabling Flash and reloading the page has no effect. Enabling JavaScript (I normally have it disabled for CurseForge) has no effect. Enabling inline frames (I normally have them disabled globally for security reasons) has no effect.
I have verified that all other features are enabled, and that all content blocking is disabled, and the most I can get to show up is this:
The audio CAPTCHA link does not work; it speaks instructions that reflect the text instructions to type the two words, but then speaks a full or partial sentence (way more than two words) that is very difficult to understand. Even after playing it a dozen times, getting a new one and playing THAT one a dozen times, I can't figure out what every word is. All attempts at typing any two adjacent intelligible words result in "Incorrect. Try again."
Opera 9.64, Windows XP x64 Edition.
Edit: I also posted a ticket on CurseForge, but so far I've gotten an official response for 2 of about 30 tickets, versus a much higher success rate posting things here. :(
recaptcha.net user tracking and JavaScript to download files from wowace.com is UNACCEPTABLE !!!
Even if you are logged in you must use the recaptcha.net/JavaScript CRAP!
UNACCEPTABLE!!!
Kaelten, please remove this!
recaptcha.net-authentication(!)/JavaScript is one more reason why people should/would use other sites to download addons!
Yeah, while I agree that something needed to be done, I do not agree that CAPTCHAs are an acceptable solution. They are famously terrible for accessibility, and while having to pass one to register with a site is doable, having to pass one every time I want to download an update for an addon is simply ridiculous... especially when it isn't even possible to pass one on my system.
If it's going to be a permanent addition to all sites on the Curse network, I'm going to spend a lot more time pestering other addon authors to maintain release pages on WoWInterface. :(
It's annoying for sure but I don't see what a login mechanism can do to stop a spider.
It's trivial to register an account (or multiple) for use by an automated updater.
I do agree that it is not a minor inconvenience for users.. it gets old really-really fast.
How is wowinterface doing it?
I read their bandwidth usage went down by 50% since blocking WM so their method must work too.
I haven't either, and I think that is the problem. I get the flash link, just no captcha. Skips straight to unauthorized. :-/
Ah well. It'll probably work before I get home from work anyway (assuming the servers are up by then - will probably be into the rolling restarts at that point), and it's not like I can't live without addons.
Sorry... I meant to mean that I haven't seen a single CAPTCHA and haven't been stopped from downloading anything. I've tried it both logged-in and logged-out and there's been no change.
Ah well. WoWI's working fine, just can't update from here and Curse.
Info, if anyone wants:
Browser: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8 ) Gecko/2009032811 Iceweasel/3.0.7 (Debian-3.0.7-1)
OS: Hrm...since it's not Windows, I'm not sure if you want a kernel, a distro, or what would be useful here. (And I'll try windows this evening.)
Actually, I just woke up enough to fix my issue. I was running Flash 9.0 r31 and 10.0 r15. It only works with the newer one. Disabled the older version, and life is good.*
*Life is probably actually good because of having finished a cup of coffee now, but the websites are working as well.
The way I see it: If you've registered, and are logged in, you shouldn't have to provide a captcha. If you are downloading anonymously, then hell yes.
break19
Wowmatrix signs up for a dummy account they'll never actually post on, so it won't be discovered. They program their downloader to log in as this user and get it's download. WM is back in business with curseforge.
I think not. Deal with the craptcha, it's not the end of the damn world :P
If this recaptcha.net/whatever CRAP to download files from wowace.com is not removed I will never ever use the wowace repository again.
Why? Because I want to download the addons I submit/support with fixes/update locales!
Sure, I make only small addons for a small user base, so I am not critical nor important for the whole curse/wowace-system. I am just a small cog in the wheel, but I liked the way the wowace repository worked in the past:
- check-in stuff (eg. svn)
- it's packed (nice zip with changelog and eg. libs)
- and than I can download exactly the same packed zip every user can download
This is not working anymore. Not for me, because I will not send anything to recaptcha.net via wowace.com!
In other words: I can check-in stuff (via svn), but I can not download my own addon!!!
Sorry, but this is plain stupid! This is by far the worst idea ever.
The only solution for me is to skip the whole repository thing and just use the forum with an attached file. Not a good solution...will you add the recaptcha.net/whatever-authentication thing to forum attachments too?
Or is it better to forget wowace and move to a better place?
From the wowace.com Homepage: (Announcements)
Curse and WoWInterface working together to help protect our authors and other site-users
Please protect me from recaptcha.net/whatever-authentication!
reCaptcha isn't exactly bulletproof either. I've had it running on forums and it's been cracked by spam bots.
Clever metrics could catch an account if it was used for something like WoWMatrix though. Very few page impressions, a lot of direct downloads, no favorites? Suspicious, activate captcha on that account for a week.
Rollback Post to RevisionRollBack
To post a comment, please login or register a new account.
First of all, clicking the download links from the file's page does nothing. If I turn off plugins (Flash) and reload the page, I get plain text links which I am able to click, but clicking them brings me to a page that informs me I must pass a CAPTCHA before I can download the file... except I can't see the CAPTCHA.
Re-enabling Flash and reloading the page has no effect. Enabling JavaScript (I normally have it disabled for CurseForge) has no effect. Enabling inline frames (I normally have them disabled globally for security reasons) has no effect.
I have verified that all other features are enabled, and that all content blocking is disabled, and the most I can get to show up is this:
http://www.hdimage.org/images/wni2dbi3oqnmrc4f7h_urseorge.jpg
The audio CAPTCHA link does not work; it speaks instructions that reflect the text instructions to type the two words, but then speaks a full or partial sentence (way more than two words) that is very difficult to understand. Even after playing it a dozen times, getting a new one and playing THAT one a dozen times, I can't figure out what every word is. All attempts at typing any two adjacent intelligible words result in "Incorrect. Try again."
Opera 9.64, Windows XP x64 Edition.
Edit: I also posted a ticket on CurseForge, but so far I've gotten an official response for 2 of about 30 tickets, versus a much higher success rate posting things here. :(
Even if you are logged in you must use the recaptcha.net/JavaScript CRAP!
UNACCEPTABLE!!!
Kaelten, please remove this!
recaptcha.net-authentication(!)/JavaScript is one more reason why people should/would use other sites to download addons!
If it's going to be a permanent addition to all sites on the Curse network, I'm going to spend a lot more time pestering other addon authors to maintain release pages on WoWInterface. :(
break19
It's trivial to register an account (or multiple) for use by an automated updater.
I do agree that it is not a minor inconvenience for users.. it gets old really-really fast.
How is wowinterface doing it?
I read their bandwidth usage went down by 50% since blocking WM so their method must work too.
Yes, I'm logged in. Grrrrr.
Ah well. It'll probably work before I get home from work anyway (assuming the servers are up by then - will probably be into the rolling restarts at that point), and it's not like I can't live without addons.
Info, if anyone wants:
Browser: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8 ) Gecko/2009032811 Iceweasel/3.0.7 (Debian-3.0.7-1)
OS: Hrm...since it's not Windows, I'm not sure if you want a kernel, a distro, or what would be useful here. (And I'll try windows this evening.)
*Life is probably actually good because of having finished a cup of coffee now, but the websites are working as well.
Wowmatrix signs up for a dummy account they'll never actually post on, so it won't be discovered. They program their downloader to log in as this user and get it's download. WM is back in business with curseforge.
I think not. Deal with the craptcha, it's not the end of the damn world :P
Why? Because I want to download the addons I submit/support with fixes/update locales!
Sure, I make only small addons for a small user base, so I am not critical nor important for the whole curse/wowace-system. I am just a small cog in the wheel, but I liked the way the wowace repository worked in the past:
- check-in stuff (eg. svn)
- it's packed (nice zip with changelog and eg. libs)
- and than I can download exactly the same packed zip every user can download
This is not working anymore. Not for me, because I will not send anything to recaptcha.net via wowace.com!
In other words: I can check-in stuff (via svn), but I can not download my own addon!!!
Sorry, but this is plain stupid! This is by far the worst idea ever.
The only solution for me is to skip the whole repository thing and just use the forum with an attached file. Not a good solution...will you add the recaptcha.net/whatever-authentication thing to forum attachments too?
Or is it better to forget wowace and move to a better place?
From the wowace.com Homepage: (Announcements)
Please protect me from recaptcha.net/whatever-authentication!
Please remove recaptcha.net/whatever-authentication!
Clever metrics could catch an account if it was used for something like WoWMatrix though. Very few page impressions, a lot of direct downloads, no favorites? Suspicious, activate captcha on that account for a week.