website/blog/say-hello-to-mcaptcha/index.html

251 lines
14 KiB
HTML
Raw Normal View History

<!doctype html>
<html lang="en-US">
<head>
<meta charset="utf-8">
<meta http-equiv="x-ua-compatible" content="ie=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<link rel="preload" as="font" href="/fonts/vendor/jost/jost-v4-latin-regular.woff2" type="font/woff2" crossorigin>
<link rel="preload" as="font" href="/fonts/vendor/jost/jost-v4-latin-700.woff2" type="font/woff2" crossorigin>
<link rel="stylesheet" href="/main.b63ce50dfa61fad6110b3083ff8c73329c5faa56efa9fce74542ba32665b6f205859f41203427020164409ce1a5ad12d0114f490f7a4b511dc1f99b633255661.css" integrity="sha512-tjzlDfph&#43;tYRCzCD/4xzMpxfqlbvqfznRUK6MmZbbyBYWfQSA0JwIBZECc4aWtEtART0kPektRHcH5m2MyVWYQ==" crossorigin="anonymous">
<noscript><style>img.lazyload { display: none; }</style></noscript>
<meta name="robots" content="index, follow">
<meta name="googlebot" content="index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1">
<meta name="bingbot" content="index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1">
<title>Say hello to mCaptcha - mCaptcha</title>
<meta name="description" content="Introducing mCaptcha, a kickass CAPTCHA systems that gives (DDoS) attackers a run for their money. Oh and UX is great too!">
<link rel="canonical" href="/blog/say-hello-to-mcaptcha/">
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:image" content="/blog/say-hello-to-mcaptcha/icon.png">
<meta name="twitter:title" content="Say hello to mCaptcha">
<meta name="twitter:description" content="Introducing mCaptcha, a kickass CAPTCHA systems that gives (DDoS) attackers a run for their money. Oh and UX is great too!">
<meta name="twitter:site" content="@">
<meta name="twitter:creator" content="@">
<meta property="og:title" content="Say hello to mCaptcha">
<meta property="og:description" content="Introducing mCaptcha, a kickass CAPTCHA systems that gives (DDoS) attackers a run for their money. Oh and UX is great too!">
<meta property="og:type" content="article">
<meta property="og:url" content="/blog/say-hello-to-mcaptcha/">
<meta property="og:image" content="/blog/say-hello-to-mcaptcha/icon.png">
<meta property="article:published_time" content="2021-05-26T00:00:00+00:00">
<meta property="article:modified_time" content="2021-12-02T10:25:42+05:30">
<meta property="og:site_name" content="mCaptcha">
<meta property="article:publisher" content="https://www.facebook.com/">
<meta property="article:author" content="https://www.facebook.com/">
<meta property="og:locale" content="en_US">
<script type="application/ld+json">
{
"@context": "http://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [{
"@type": "ListItem",
"position": 1 ,
"name": "Home",
"item": "\/"
},{
"@type": "ListItem",
"position": 2 ,
"name": "Blogsay Hello to Mcaptcha",
"item": "\/blogsay-hello-to-mcaptcha\/"
}]
}
</script>
<meta name="theme-color" content="#fff">
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
<link rel="manifest" href="/site.webmanifest">
</head>
<body class="blog single">
<div class="header-bar fixed-top"></div>
<header class="navbar fixed-top navbar-expand-md navbar-light">
<div class="container">
<input class="menu-btn order-0" type="checkbox" id="menu-btn">
<label class="menu-icon d-md-none" for="menu-btn"><span class="navicon"></span></label>
<a class="navbar-brand order-1 order-md-0 me-auto" href="/">mCaptcha</a>
<button id="mode" class="btn btn-link order-2 order-md-4" type="button" aria-label="Toggle mode">
<span class="toggle-dark"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-moon"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"></path></svg></span>
<span class="toggle-light"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-sun"><circle cx="12" cy="12" r="5"></circle><line x1="12" y1="1" x2="12" y2="3"></line><line x1="12" y1="21" x2="12" y2="23"></line><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"></line><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"></line><line x1="1" y1="12" x2="3" y2="12"></line><line x1="21" y1="12" x2="23" y2="12"></line><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"></line><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"></line></svg></span>
</button>
<ul class="navbar-nav social-nav order-3 order-md-5">
<li class="nav-item">
<a class="nav-link" href="https://github.com/mCaptcha"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-github"><path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37 0 0 0-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44 0 0 0 20 4.77 5.07 5.07 0 0 0 19.91 1S18.73.65 16 2.48a13.38 13.38 0 0 0-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07 0 0 0 5 4.77a5.44 5.44 0 0 0-1.5 3.78c0 5.42 3.3 6.61 6.44 7A3.37 3.37 0 0 0 9 18.13V22"></path></svg><span class="ms-2 visually-hidden">GitHub</span></a>
</li>
</ul>
<div class="collapse navbar-collapse order-4 order-md-1">
<ul class="navbar-nav main-nav me-auto order-5 order-md-2"><li class="nav-item active">
<a class="nav-link" href="/blog/">Blog</a>
</li>
<li class="nav-item">
<a class="nav-link" href="/community/">Community</a>
</li>
<li class="nav-item">
<a class="nav-link" href="/contact/">Contact</a>
</li>
<li class="nav-item">
<a class="nav-link" href="/about/">About</a>
</li>
<li class="nav-item">
<a class="nav-link" href="/docs/webmasters/installing-captcha/">Docs</a>
</li>
</ul>
<div class="break order-6 d-md-none"></div>
<form class="navbar-form flex-grow-1 order-7 order-md-3">
<input id="userinput" class="form-control is-search" type="search" placeholder="Search docs..." aria-label="Search docs..." autocomplete="off">
<div id="suggestions" class="shadow bg-white rounded"></div>
</form>
</div>
</div>
</header>
<div class="wrap container" role="document">
<div class="content">
<div class="row flex-xl-nowrap">
<nav class="docs-toc d-none d-xl-block col-xl-3" aria-label="Secondary navigation">
<div class="page-links">
<h3>On this page</h3>
<nav id="TableOfContents">
<ul>
<li><a href="#how-does-it-work">How does it work?</a></li>
<li><a href="#okay-but-what-about-bad-actors">Okay, but what about bad actors?</a></li>
<li><a href="#why-use-mcaptcha">Why use mCaptcha?</a></li>
<li><a href="#how-to-migrate">How to migrate?</a></li>
<li><a href="#our-philosophy">Our Philosophy</a></li>
<li><a href="#resources">Resources</a></li>
</ul>
</nav>
</div>
</nav>
<main class="docs-content col-lg-11 col-xl-9 mx-xl-auto">
<article>
<div class="blog-header">
<h1>Say hello to mCaptcha</h1>
<p><small>Posted May 26, 2021 by <a class="stretched-link position-relative" href="/contributors/aravinth-manivannan/">Aravinth Manivannan</a>&nbsp;&hyphen;&nbsp;<strong>2&nbsp;min read</strong></small><p>
<p><small>Last Edited December 2, 2021</small><p>
</div>
<p class="lead">We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?</p>
<p>At mCaptcha, we believe in digital freedom and privacy and so we built a
<a href="https://en.wikipedia.org/wiki/Proof_of_work">proof-of-work</a> based
2023-02-13 16:52:49 +05:30
CAPTCHA system that doesn&rsquo;t track. Seriously, no tracking. But that
isn&rsquo;t the killer feature, our system doesn&rsquo;t require the user to
pick cars or ID sidewalks &mdash; our system does it&rsquo;s thing(usually
at the click of a button) and gets out of the way.</p>
<h2 id="how-does-it-work">How does it work?</h2>
<p>mCaptcha uses SHA256 based proof-of-work(PoW) to rate limit users.</p>
<p>When a user wants to do something on an mCaptcha-protected website,</p>
<ol>
<li>
<p>they will have to generate proof-of-work(a bunch of math that will
takes time to compute) and submit it to mCaptcha.</p>
</li>
<li>
<p>We&rsquo;ll validate the proof:</p>
</li>
</ol>
<ul>
<li>if validation is unsuccessful, they will be prevented from accessing
the destination website</li>
<li>if validation is successful, read on,</li>
</ul>
<ol start="3">
<li>
<p>They will be issued a token that should be submit along with the
request/form to the destination website.</p>
</li>
<li>
<p>The destination website validates the submitted token with
mCaptcha before processing the request.</p>
</li>
</ol>
<p>The whole process is automated from the user&rsquo;s point of view. All they
have to do is click on a button to initiate the process.</p>
<h2 id="okay-but-what-about-bad-actors">Okay, but what about bad actors?</h2>
<p>mCaptcha makes interacting with websites (computationally)expensive for
2023-02-13 16:52:49 +05:30
the user. A well-behaving user will experience a slight delay(no delay
when under moderate load to 2-3 seconds when under attack; PoW difficulty is
variable) but if someone wants to hammer your site, they will have to do
more work to send requests than your server you will have to do to respond
to their request.</p>
<h2 id="why-use-mcaptcha">Why use mCaptcha?</h2>
<ul>
<li><strong>Free software, privacy focused</strong></li>
<li><strong>Seamless</strong> UX &mdash; No more annoying CAPTCHAs!</li>
<li><strong>IP address independent:</strong> your users are behind a NAT? We got you covered!</li>
<li><strong>Automatic bot throttling</strong></li>
<li><strong>Resistant to replay attacks:</strong> proof-of-work configurations have short lifetimes(30s) and can be used only once. If a user submits a PoW to an already used configuration or an expired one, their proof will be rejected.</li>
</ul>
<h2 id="how-to-migrate">How to migrate?</h2>
<p>Our client libraries are mostly compatible with reCAPTCHA and hCaptcha.
A detailed guide will be published soon.</p>
<h2 id="our-philosophy">Our Philosophy</h2>
<p>Man has has come so far only because our ancestors chose to
2023-02-13 16:52:49 +05:30
share their knowledge with others. If everything was labeled
intellectual property, we might still be stuck in Stone Age. The idea of
intellectual property is alien to us. For this reason, all of our source
code is freely available(both as in freedom and beers) at <a href="https://github.com/mCaptcha/">our
GitHub</a>.</p>
<h2 id="resources">Resources</h2>
<ul>
<li><a href="https://github.com/mCaptcha/guard">guard</a> - mCaptcha backend <code>AGPL</code></li>
<li><a href="https://github.com/mCaptcha/browser">frontend library</a> - mCaptcha frontend library. <code>MIT/APACHE</code></li>
</ul>
</article>
<div class="docs-navigation d-flex justify-content-between">
<a href="/blog/pow-performance/">
<div class="card my-1">
<div class="card-body py-2">
&larr; PoW performance
</div>
</div>
</a>
</div>
<p class="edit-page"><a href="https://git.batsense.net/mCaptcha/website/blob/master/content/blog/say-hello-to-mcaptcha/index.md"><svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-edit-2"><path d="M17 3a2.828 2.828 0 1 1 4 4L7.5 20.5 2 22l1.5-5.5L17 3z"></path></svg>Edit this page on git.batsense.net</a></p>
</main>
</div>
</div>
</div>
<footer class="footer text-muted">
<div class="container">
<div class="row">
<div class="col-lg-8 order-last order-lg-first">
<ul class="list-inline">
<li class="list-inline-item">Powered by <a href="https://gohugo.io/">Hugo</a>, and <a href="https://getdoks.org/">Doks</a></li>
</ul>
</div>
<div class="col-lg-8 order-first order-lg-last text-lg-end">
<ul class="list-inline">
<li class="list-inline-item"><a href="/about/">About</a></li>
<li class="list-inline-item"><a href="/donate">Donate</a></li>
<li class="list-inline-item"><a href="/privacy-policy/">Privacy</a></li>
<li class="list-inline-item"><a href="/security">Security</a></li>
<li class="list-inline-item"><a href="https://stats.uptimerobot.com/GK7VLFJnBl">Status</a></li>
<li class="list-inline-item"><a href="/thanks">Thanks</a></li>
</ul>
</div>
</div>
</div>
</footer>
<script src="/main.min.bc2465e4e1abda257c622bf89b85235da437778b3e3f80e01762312382cc27d4e50a8a4de22e464dc82e3a61039da8aef9d6d5e62b76711fa93d9663860b1926.js" integrity="sha512-vCRl5OGr2iV8Yiv4m4UjXaQ3d4s&#43;P4DgF2IxI4LMJ9TlCopN4i5GTcguOmEDnaiu&#43;dbV5it2cR&#43;pPZZjhgsZJg==" crossorigin="anonymous" defer></script>
<script src="/index.min.39f65050268d816f7a57ee89577dd6b7c861ed858fdbfd100931444f0bb1609ea23d7d4ddc1997c8401f4553ca412051d7fd12a5b0a675c6053b7d9dc9c2cc98.js" integrity="sha512-OfZQUCaNgW96V&#43;6JV33Wt8hh7YWP2/0QCTFETwuxYJ6iPX1N3BmXyEAfRVPKQSBR1/0SpbCmdcYFO32dycLMmA==" crossorigin="anonymous" defer></script>
</body>
</html>