From 0c6d53e33b4356dbc99ee3f7daf56133ad99bb2f Mon Sep 17 00:00:00 2001 From: Aravinth Manivannan Date: Mon, 8 Jan 2024 00:33:38 +0530 Subject: [PATCH] $(date -$) --- .hugo_build.lock | 0 404.html | 150 ++++- about/index.html | 191 +++++- blog/december-2021-monthly-report/index.html | 252 ++++++- blog/february-2023-monthly-report/index.html | 222 ++++++- blog/index.html | 228 ++++++- blog/index.xml | 92 ++- blog/introducing-mcaptcha-net/index.html | 244 ++++++- ...fffad281cd7ba_53366_20x0_resize_box_3.png} | Bin ...ffad281cd7ba_53366_500x0_resize_box_3.png} | Bin ...ffad281cd7ba_53366_600x0_resize_box_3.png} | Bin ...ffad281cd7ba_53366_700x0_resize_box_3.png} | Bin ...ffad281cd7ba_53366_800x0_resize_box_3.png} | Bin ...ffad281cd7ba_53366_900x0_resize_box_3.png} | Bin ...5b6b3f0d9a9a_322974_20x0_resize_box_3.png} | Bin ...b6b3f0d9a9a_322974_500x0_resize_box_3.png} | Bin ...b6b3f0d9a9a_322974_600x0_resize_box_3.png} | Bin ...b6b3f0d9a9a_322974_700x0_resize_box_3.png} | Bin ...b6b3f0d9a9a_322974_800x0_resize_box_3.png} | Bin ...b6b3f0d9a9a_322974_900x0_resize_box_3.png} | Bin blog/july-2022-monthly-report/index.html | 266 +++++++- blog/june-2022-monthly-report/index.html | 219 ++++++- blog/may-2022-monthly-report/index.html | 380 ++++++++--- blog/pow-performance/index.html | 414 +++++++++++- blog/say-hello-to-mcaptcha/index.html | 255 +++++++- blog/sitemap.xml | 67 +- blog/survey/index.html | 215 +++++- community/index.html | 187 +++++- contact/index.html | 180 ++++- contributors/aravinth-manivannan/index.html | 230 ++++++- contributors/aravinth-manivannan/index.xml | 93 ++- contributors/index.html | 162 ++++- contributors/index.xml | 21 +- docs/api/browser/index.html | 257 +++++++- docs/api/index.html | 207 +++++- docs/api/index.xml | 41 +- docs/api/mcaptcha-system/index.html | 229 ++++++- docs/api/pow-sha256/index.html | 247 ++++++- docs/api/sitemap.xml | 25 +- docs/help/faq/index.html | 216 +++++- docs/help/index.html | 201 +++++- docs/help/index.xml | 28 +- docs/help/sitemap.xml | 18 +- docs/help/troubleshooting/index.html | 227 ++++++- docs/index.html | 278 +++++++- docs/index.xml | 12 +- docs/self-hosting/ansible/index.html | 259 +++++++- docs/self-hosting/bare-metal/index.html | 396 +++++++++-- docs/self-hosting/dependencies/index.html | 30 - docs/self-hosting/docker/index.html | 279 +++++++- docs/self-hosting/getting-started/index.html | 226 ++++++- docs/self-hosting/index.html | 212 +++++- docs/self-hosting/index.xml | 53 +- docs/self-hosting/sitemap.xml | 32 +- docs/sitemap.xml | 129 +++- docs/user-manual/cli/index.html | 368 +++++++++-- .../how-to-mcaptcha-without-js/index.html | 227 ++++++- docs/user-manual/index.html | 201 +++++- docs/user-manual/index.xml | 30 +- docs/user-manual/sitemap.xml | 18 +- .../configuring-difficulty-factor/index.html | 263 +++++++- ...832a52b37239b_23312_20x0_resize_box_3.png} | Bin ...32a52b37239b_23312_500x0_resize_box_3.png} | Bin ...32a52b37239b_23312_600x0_resize_box_3.png} | Bin ...32a52b37239b_23312_700x0_resize_box_3.png} | Bin ...32a52b37239b_23312_800x0_resize_box_3.png} | Bin ...32a52b37239b_23312_900x0_resize_box_3.png} | Bin ...3a2d78fa015c8_26636_20x0_resize_box_3.png} | Bin ...a2d78fa015c8_26636_500x0_resize_box_3.png} | Bin ...a2d78fa015c8_26636_600x0_resize_box_3.png} | Bin ...a2d78fa015c8_26636_700x0_resize_box_3.png} | Bin ...a2d78fa015c8_26636_800x0_resize_box_3.png} | Bin ...a2d78fa015c8_26636_900x0_resize_box_3.png} | Bin ...83a1abb694c9a_63890_20x0_resize_box_3.png} | Bin ...3a1abb694c9a_63890_500x0_resize_box_3.png} | Bin ...3a1abb694c9a_63890_600x0_resize_box_3.png} | Bin ...3a1abb694c9a_63890_700x0_resize_box_3.png} | Bin ...3a1abb694c9a_63890_800x0_resize_box_3.png} | Bin ...3a1abb694c9a_63890_900x0_resize_box_3.png} | Bin docs/webmasters/faq/index.html | 239 ++++++- ...97af482e11285_26958_20x0_resize_box_3.png} | Bin ...7af482e11285_26958_500x0_resize_box_3.png} | Bin ...7af482e11285_26958_600x0_resize_box_3.png} | Bin ...7af482e11285_26958_700x0_resize_box_3.png} | Bin ...7af482e11285_26958_800x0_resize_box_3.png} | Bin docs/webmasters/index.html | 213 +++++- docs/webmasters/index.xml | 47 +- docs/webmasters/installing-captcha/index.html | 351 ++++++++-- ...00c2c83dd77fb_28299_20x0_resize_box_3.png} | Bin ...0c2c83dd77fb_28299_500x0_resize_box_3.png} | Bin ...0c2c83dd77fb_28299_600x0_resize_box_3.png} | Bin ...0c2c83dd77fb_28299_700x0_resize_box_3.png} | Bin ...0c2c83dd77fb_28299_800x0_resize_box_3.png} | Bin ...e26fb8eb1b427_65746_20x0_resize_box_3.png} | Bin ...26fb8eb1b427_65746_500x0_resize_box_3.png} | Bin ...26fb8eb1b427_65746_600x0_resize_box_3.png} | Bin ...26fb8eb1b427_65746_700x0_resize_box_3.png} | Bin ...26fb8eb1b427_65746_800x0_resize_box_3.png} | Bin ...26fb8eb1b427_65746_900x0_resize_box_3.png} | Bin ...31adaa9c5a5e6_30108_20x0_resize_box_3.png} | Bin ...1adaa9c5a5e6_30108_500x0_resize_box_3.png} | Bin ...1adaa9c5a5e6_30108_600x0_resize_box_3.png} | Bin ...1adaa9c5a5e6_30108_700x0_resize_box_3.png} | Bin ...1adaa9c5a5e6_30108_800x0_resize_box_3.png} | Bin ...1adaa9c5a5e6_30108_900x0_resize_box_3.png} | Bin docs/webmasters/sitemap.xml | 32 +- docs/webmasters/terminology/index.html | 297 ++++++++- donate/index.html | 188 +++++- ...b2d59d7a34dd33_7547_20x0_resize_box_3.png} | Bin ...2d59d7a34dd33_7547_500x0_resize_box_3.png} | Bin ...2d59d7a34dd33_7547_600x0_resize_box_3.png} | Bin ...2d59d7a34dd33_7547_700x0_resize_box_3.png} | Bin ...2d59d7a34dd33_7547_800x0_resize_box_3.png} | Bin ...2d59d7a34dd33_7547_900x0_resize_box_3.png} | Bin index.html | 195 +++++- ...1041ff2c4f8c2ea5b8372142777b552db3f5167.js | 614 ++++++++++++++++++ ...2c418c5672cc76fe8b7fbd441bc9b4497b01e2c.js | 1 - index.xml | 113 +++- ...5d49b0692a89702d12c76f9b8d315ea33c0b87.css | 10 - ...f2192dc9a7847c62393718246d9f3e634a4e4d.css | 10 + ...ddb5369bc072c42486b426dc54057495ba99e97.js | 14 + ...3186cc8bc280b1077b7e37c2d64f36f118099bb.js | 1 - privacy-policy/index.html | 201 +++++- security/index.html | 362 ++++++++++- sitemap.xml | 293 ++++++++- thanks/index.html | 202 +++++- 126 files changed, 11446 insertions(+), 714 deletions(-) create mode 100644 .hugo_build.lock rename blog/introducing-mcaptcha-net/{installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_20x0_resize_box_2.png => installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_20x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_500x0_resize_box_2.png => installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_500x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_600x0_resize_box_2.png => installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_600x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_700x0_resize_box_2.png => installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_700x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_800x0_resize_box_2.png => installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_800x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_900x0_resize_box_2.png => installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_900x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_20x0_resize_box_2.png => working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_20x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_500x0_resize_box_2.png => working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_500x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_600x0_resize_box_2.png => working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_600x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_700x0_resize_box_2.png => working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_700x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_800x0_resize_box_2.png => working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_800x0_resize_box_3.png} (100%) rename blog/introducing-mcaptcha-net/{working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_900x0_resize_box_2.png => working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_900x0_resize_box_3.png} (100%) delete mode 100644 docs/self-hosting/dependencies/index.html rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_20x0_resize_box_2.png => new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_20x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_500x0_resize_box_2.png => new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_500x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_600x0_resize_box_2.png => new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_600x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_700x0_resize_box_2.png => new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_700x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_800x0_resize_box_2.png => new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_800x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_900x0_resize_box_2.png => new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_900x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_20x0_resize_box_2.png => new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_20x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_500x0_resize_box_2.png => new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_500x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_600x0_resize_box_2.png => new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_600x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_700x0_resize_box_2.png => new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_700x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_800x0_resize_box_2.png => new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_800x0_resize_box_3.png} (100%) rename docs/webmasters/configuring-difficulty-factor/{new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_900x0_resize_box_2.png => new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_900x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_20x0_resize_box_2.png => copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_20x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_500x0_resize_box_2.png => copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_500x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_600x0_resize_box_2.png => copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_600x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_700x0_resize_box_2.png => copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_700x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_800x0_resize_box_2.png => copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_800x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_900x0_resize_box_2.png => copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_900x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_20x0_resize_box_2.png => sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_20x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_500x0_resize_box_2.png => sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_500x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_600x0_resize_box_2.png => sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_600x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_700x0_resize_box_2.png => sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_700x0_resize_box_3.png} (100%) rename docs/webmasters/faq/{sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_800x0_resize_box_2.png => sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_800x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_20x0_resize_box_2.png => mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_20x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_500x0_resize_box_2.png => mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_500x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_600x0_resize_box_2.png => mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_600x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_700x0_resize_box_2.png => mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_700x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_800x0_resize_box_2.png => mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_800x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_20x0_resize_box_2.png => new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_20x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_500x0_resize_box_2.png => new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_500x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_600x0_resize_box_2.png => new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_600x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_700x0_resize_box_2.png => new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_700x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_800x0_resize_box_2.png => new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_800x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_900x0_resize_box_2.png => new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_900x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_20x0_resize_box_2.png => new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_20x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_500x0_resize_box_2.png => new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_500x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_600x0_resize_box_2.png => new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_600x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_700x0_resize_box_2.png => new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_700x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_800x0_resize_box_2.png => new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_800x0_resize_box_3.png} (100%) rename docs/webmasters/installing-captcha/{new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_900x0_resize_box_2.png => new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_900x0_resize_box_3.png} (100%) rename donate/{mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_20x0_resize_box_2.png => mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_20x0_resize_box_3.png} (100%) rename donate/{mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_500x0_resize_box_2.png => mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_500x0_resize_box_3.png} (100%) rename donate/{mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_600x0_resize_box_2.png => mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_600x0_resize_box_3.png} (100%) rename donate/{mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_700x0_resize_box_2.png => mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_700x0_resize_box_3.png} (100%) rename donate/{mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_800x0_resize_box_2.png => mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_800x0_resize_box_3.png} (100%) rename donate/{mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_900x0_resize_box_2.png => mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_900x0_resize_box_3.png} (100%) create mode 100644 index.min.93b8a8c2342494612b6248052a9ee91028f73ecaca031e57b8e7bdbf1b6bea8ac3cc0db982f0bd4450facb3921041ff2c4f8c2ea5b8372142777b552db3f5167.js delete mode 100644 index.min.f18447d9c620cb9696d186b0cc7079f71111f203e448bff2fe9e9b193a06f75a977f586aa48c2372ffc8ddd322c418c5672cc76fe8b7fbd441bc9b4497b01e2c.js delete mode 100644 main.c5ebec6f69f6fedddbd813e6fbeec336e7050cd17bb6fef39275d0956f6115409a7083647b41bca8cc86d5c0a35d49b0692a89702d12c76f9b8d315ea33c0b87.css create mode 100644 main.daf9ee98168127ebe801fa49abea19e9b93a1e6615b5fb8613d39531c652f02d2d15c7680cf20e2047c2887b04f2192dc9a7847c62393718246d9f3e634a4e4d.css create mode 100644 main.min.3ee0ac4f86a3696df8d8100a6b908e1d916e5ba581515d6ca65d6849444faf247f83e42d5c7e31046edd28842ddb5369bc072c42486b426dc54057495ba99e97.js delete mode 100644 main.min.993b2b4c58b07e7a4bb3423cf18ccd78a85d0063680c0fc9bf6d9cc02be98e08793034d984dd8f7c60ad5b70f3186cc8bc280b1077b7e37c2d64f36f118099bb.js diff --git a/.hugo_build.lock b/.hugo_build.lock new file mode 100644 index 0000000..e69de29 diff --git a/404.html b/404.html index d0805b6..bf3eead 100644 --- a/404.html +++ b/404.html @@ -1,4 +1,146 @@ -404 Page not found - mCaptcha

Page not found :(

The page you are looking for doesn't exist or has been moved.

\ No newline at end of file + + + + + + + + + + + +404 Page not found - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+
+

Page not found :(

+

The page you are looking for doesn't exist or has been moved.

+
+
+
+ +
+
+ + + + + + + + + diff --git a/about/index.html b/about/index.html index 7f85085..4912827 100644 --- a/about/index.html +++ b/about/index.html @@ -1,17 +1,190 @@ -About - mCaptcha

About

mCaptcha is a kickass CAPTCHA systems that gives (DDoS) + + + + + + + + + + + + + + About - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +

About

+

+

mCaptcha is a kickass CAPTCHA systems that gives (DDoS) attackers a run for their money. And we do all of this without tracking -your users. Oh and did I mention our UX is great?

At mCaptcha, we believe in digital freedom and privacy and so we built +your users. Oh and did I mention our UX is great?

+

At mCaptcha, we believe in digital freedom and privacy and so we built a proof-of-work based CAPTCHA system that doesn’t track. Seriously, no tracking. But that isn’t the killer feature, our system doesn’t require the user to pick cars or ID sidewalks — our system does it’s -thing(usually at the click of a button) and gets out of the way.

Philosophy

Man has has come so far only because our ancestors chose to share their +thing(usually at the click of a button) and gets out of the way.

+

Philosophy

+

Man has has come so far only because our ancestors chose to share their knowledge with others. If everything was labeled intellectual property, we might still be stuck in Stone Age. The idea of intellectual property is alien to us. For this reason, all of our source code is freely -available(both as in freedom and beers) at our GitHub.

People

\ No newline at end of file +Security Advisor

+ + + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/december-2021-monthly-report/index.html b/blog/december-2021-monthly-report/index.html index 3cfddc9..6f90f06 100644 --- a/blog/december-2021-monthly-report/index.html +++ b/blog/december-2021-monthly-report/index.html @@ -1,22 +1,244 @@ -December, 2021: Monthly Report - mCaptcha

December, 2021: Monthly Report

Posted December 23, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited June 14, 2022

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Hello and welcome to the first edition of the monthly report!

I believe free software like mCaptcha is critical to a healthy internet + + + + + + + + + + + + + + December, 2021: Monthly Report - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

December, 2021: Monthly Report

+

Posted December 23, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited June 14, 2022

+ +

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Hello and welcome to the first edition of the monthly report!

+

I believe free software like mCaptcha is critical to a healthy internet but being a one-person show, there’s hardly any accountability in the way software is built. I hope, through monthly reports, I can explain the logic and intentions behind decisions taken in the development -process.

This month, the following things were accomplished:

1. Full LibreJS Compliance

The CAPTCHA widget and the admin dashboard are 100% LibreJS compliant!

Screenshot of mCaptcha admin dashboard with GNU LibreJS extension's report in frame.LibreJS reports that all scripts in this webpage are accepted(and hence free software) and are licensed under the AGPL license.
LibreJS report of the dashboard webpage
Screenshot of mCaptcha client-side widget(I'm-not-a-robot widget) with GNU LibreJS extension's report in frame. LibreJS reports that all scripts in this webpage are accepted(and hence free software) and are licensed under the X11(aka MIT license). It should also detect the Apache licensing but I probably botched it up.
LibreJS report of the CAPTCHA widget webpage

2. JavaScript PolyFill

mCaptcha relied on a WebAssembly(WASM) port of the proof-of-work +process.

+

This month, the following things were accomplished:

+

1. Full LibreJS Compliance

+

The CAPTCHA widget and the admin dashboard are 100% LibreJS compliant!

+
+ Screenshot of mCaptcha admin dashboard with GNU LibreJS extension's report in frame.LibreJS reports that all scripts in this webpage are accepted(and hence free software) and are licensed under the AGPL license. + +
LibreJS report of the dashboard webpage
+
+
+ Screenshot of mCaptcha client-side widget(I'm-not-a-robot widget) with GNU LibreJS extension's report in frame. LibreJS reports that all scripts in this webpage are accepted(and hence free software) and are licensed under the X11(aka MIT license). It should also detect the Apache licensing but I probably botched it up. + +
LibreJS report of the CAPTCHA widget webpage
+
+

2. JavaScript PolyFill

+

mCaptcha relied on a WebAssembly(WASM) port of the proof-of-work algorithm used in mCaptcha. This meanth browsers without WASM support -couldn’t process CAPTCHAs. This month, a pure JavaScript(TypeScript, -technically) implementation was released to -overcome this limitation.

3. Integration libraries for Vanilla JS, React and Svelte:

To make migration from existing CAPTCHA deployments to mCaptha, -integration libraries for Vanilla -JS, React +couldn’t process CAPTCHAs. This month, a pure JavaScript(TypeScript, +technically) implementation + was released to +overcome this limitation.

+

3. Integration libraries for Vanilla JS, React and Svelte:

+

To make migration from existing CAPTCHA deployments to mCaptha, +integration libraries for Vanilla +JS, React Js and -Svelte with +Svelte with similar APIs very similar to that of Google’s reCAPTCHA and Cloudflare’s -hCaptcha.

4. Beginner friendly CAPTCHA configuration options.

The original configuration panel offers a comprehensive but daunting -task for folks that are justgetting started with mCaptcha.

Screenshot of mCaptcha admin dashboard CAPTCHA creation form with advance configuration options
CAPTCHA creation with advance configuration options

A new CAPTCHA creation format is rolled out which generates a +hCaptcha.

+ +

4. Beginner friendly CAPTCHA configuration options.

+

The original configuration panel offers a comprehensive but daunting +task for folks that are justgetting started with mCaptcha.

+
+ Screenshot of mCaptcha admin dashboard CAPTCHA creation form with advance configuration options + +
CAPTCHA creation with advance configuration options
+
+

A new CAPTCHA creation format is rolled out which generates a configuration from familiar metrics like average, peak and traffic that -took the user’s website down.

Screenshot of mCaptcha admin dashboard CAPTCHA creation form with easy configuration options
CAPTCHA creation with easy configuration options

Of course, the advance option is available and can always be swished to -at any moment!

Edit this page on git.batsense.net

\ No newline at end of file +took the user’s website down.

+
+ Screenshot of mCaptcha admin dashboard CAPTCHA creation form with easy configuration options + +
CAPTCHA creation with easy configuration options
+
+

Of course, the advance option is available and can always be swished to +at any moment!

+ +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/february-2023-monthly-report/index.html b/blog/february-2023-monthly-report/index.html index 79a772a..5754547 100644 --- a/blog/february-2023-monthly-report/index.html +++ b/blog/february-2023-monthly-report/index.html @@ -1,20 +1,218 @@ -February, 2023: Monthly Report - mCaptcha

February, 2023: Monthly Report

Posted March 8, 2023 by Aravinth Manivannan ‐ 2 min read

Last Edited March 9, 2023

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Hello and welcome to the (August 2022 to) February, 2023 monthly report!

TL;DR

Gusted and I secured funding from NLnet to work + + + + + + + + + + + + + + February, 2023: Monthly Report - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

February, 2023: Monthly Report

+

Posted March 8, 2023 by Aravinth Manivannan ‐ 2 min read

+

Last Edited March 9, 2023

+ +

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Hello and welcome to the (August 2022 to) February, 2023 monthly report!

+

TL;DR

+

Gusted and I secured funding from NLnet to work on mCaptcha in 2023, we suffered an outage from 15 January to February -6, polyfill benchmarking support in mCaptcha

We have funding!

Gusted and I applied and secured funding through -2023 development is funded through the NGI0 -Entrust Fund, via NLnet.

The full list of tasks that we’ll be working on in the period is is +6, polyfill benchmarking support in mCaptcha

+

We have funding!

+

Gusted and I applied and secured funding through +2023 development is funded through the NGI0 +Entrust Fund, via NLnet.

+

The full list of tasks that we’ll be working on in the period is is available -here.

Infrastructure outage: 15 January, 2023 to February 6, 2023

A hard disk on of the servers hosting mCaptcha infrastructure failed, +here.

+

Infrastructure outage: 15 January, 2023 to February 6, 2023

+

A hard disk on of the servers hosting mCaptcha infrastructure failed, which caused the outage. Fixing the hard disk lead to additional problems, the fan on that server was failing and we couldn’t get spares -sooner.

We had current backups, so there was no data loss.

Going forward, we are planning to create Infrastructure-as-Code to fully +sooner.

+

We had current backups, so there was no data loss.

+

Going forward, we are planning to create Infrastructure-as-Code to fully restore all mCaptcha infrastructure, so that in the even of an outage, -we could restore our infrastructure in much shorter duration.

mCaptcha/survey now includes polyfill benchmarking

mCaptcha/survey runs benchmarks with mCaptcha’s PoW algorithm to collect +we could restore our infrastructure in much shorter duration.

+

mCaptcha/survey now includes polyfill benchmarking

+

mCaptcha/survey runs benchmarks with mCaptcha’s PoW algorithm to collect statistics on how mCaptcha performs on various browsers and devices. So far, we’ve only been running benchmarks with the WebAssembly -implementation. This pull request added support for running benchmarks +implementation. This pull request added support for running benchmarks with the JavaScript polyfill implementation on browsers without -WebAssembly support.

Edit this page on git.batsense.net

\ No newline at end of file +WebAssembly support.

+ +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/index.html b/blog/index.html index 3711a56..4fccd91 100644 --- a/blog/index.html +++ b/blog/index.html @@ -1,4 +1,224 @@ -Blog - mCaptcha

Blog

Introducing mCaptcha net

A network of mCaptcha instances sharing PoW stats to make mCaptcha more efficient and accessible

Posted October 19, 2023 by Aravinth Manivannan ‐ 2 min read

Last Edited October 21, 2023

February, 2023: Monthly Report

Gusted and I secured funding from NLnet to work on mCaptcha in 2023, we suffered an outage from 15 January to February 6, polyfill benchmarking support in mCaptcha

Posted March 8, 2023 by Aravinth Manivannan ‐ 2 min read

Last Edited March 9, 2023

July, 2022: Monthly Report

Codeberg is trying out mCaptcha, Gitea is getting mCaptcha support, mCaptcha supports MariaDB, I've applied for NLnet and Open Tech Fund, documentation is updated: tutorials and glossary is added and glue libraries have new releases.

Posted August 4, 2022 by Aravinth Manivannan ‐ 2 min read

Last Edited February 13, 2023

June, 2022: Monthly Report

mCaptcha is successfully incorporated in India and ideas for mCaptcha commercial operations

Posted July 7, 2022 by Aravinth Manivannan ‐ 2 min read

Last Edited July 7, 2022

May, 2022: Monthly Report

Python bindings to mCaptcha PoW, DDoS effectiveness measurement, major refactoring to prepare for support for other databases, We also tried to test its DoS defence effectiveness, and some exciting news regarding managed hosting!

Posted June 10, 2022 by Aravinth Manivannan ‐ 4 min read

Last Edited June 14, 2022

December, 2021: Monthly Report

New features, improved accessibility and software integrations

Posted December 23, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited June 14, 2022

Survey

We are conducting a survey to benchmark and gather performance metrics of our system on various devices

Posted October 28, 2021 by Aravinth Manivannan ‐ 1 min read

Last Edited December 23, 2021

PoW performance

PoW performance of native and WASM implementations. Does the native implementation have and edge over the WASM library?

Posted September 1, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited September 1, 2021

Say hello to mCaptcha

Introducing mCaptcha, a kickass CAPTCHA systems that gives (DDoS) attackers a run for their money. Oh and UX is great too!

Posted May 26, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited December 2, 2021

\ No newline at end of file + + + + + + + + + + + + + + Blog - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+
+

Blog

+
+
+
+
+

Introducing mCaptcha net

+

A network of mCaptcha instances sharing PoW stats to make mCaptcha more efficient and accessible

+

Posted October 19, 2023 by Aravinth Manivannan ‐ 2 min read

+

Last Edited October 21, 2023

+

+
+
+
+

February, 2023: Monthly Report

+

Gusted and I secured funding from NLnet to work on mCaptcha in 2023, we suffered an outage from 15 January to February 6, polyfill benchmarking support in mCaptcha

+

Posted March 8, 2023 by Aravinth Manivannan ‐ 2 min read

+

Last Edited March 9, 2023

+

+
+
+
+

July, 2022: Monthly Report

+

Codeberg is trying out mCaptcha, Gitea is getting mCaptcha support, mCaptcha supports MariaDB, I've applied for NLnet and Open Tech Fund, documentation is updated: tutorials and glossary is added and glue libraries have new releases.

+

Posted August 4, 2022 by Aravinth Manivannan ‐ 2 min read

+

Last Edited February 13, 2023

+

+
+
+
+

June, 2022: Monthly Report

+

mCaptcha is successfully incorporated in India and ideas for mCaptcha commercial operations

+

Posted July 7, 2022 by Aravinth Manivannan ‐ 2 min read

+

Last Edited July 7, 2022

+

+
+
+
+

May, 2022: Monthly Report

+

Python bindings to mCaptcha PoW, DDoS effectiveness measurement, major refactoring to prepare for support for other databases, We also tried to test its DoS defence effectiveness, and some exciting news regarding managed hosting!

+

Posted June 10, 2022 by Aravinth Manivannan ‐ 4 min read

+

Last Edited June 14, 2022

+

+
+
+
+

December, 2021: Monthly Report

+

New features, improved accessibility and software integrations

+

Posted December 23, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited June 14, 2022

+

+
+
+
+

Survey

+

We are conducting a survey to benchmark and gather performance metrics of our system on various devices

+

Posted October 28, 2021 by Aravinth Manivannan ‐ 1 min read

+

Last Edited December 23, 2021

+

+
+
+
+

PoW performance

+

PoW performance of native and WASM implementations. Does the native implementation have and edge over the WASM library?

+

Posted September 1, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited September 1, 2021

+

+
+
+
+

Say hello to mCaptcha

+

Introducing mCaptcha, a kickass CAPTCHA systems that gives (DDoS) attackers a run for their money. Oh and UX is great too!

+

Posted May 26, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited December 2, 2021

+

+
+
+
+
+
+ +
+
+ + + + + + + + + diff --git a/blog/index.xml b/blog/index.xml index 57d0ab1..7407dfa 100644 --- a/blog/index.xml +++ b/blog/index.xml @@ -1,18 +1,74 @@ -Blog on/blog/Recent content in Blog onHugo -- gohugo.ioen-USIntroducing mCaptcha net/blog/introducing-mcaptcha-net/Thu, 19 Oct 2023 00:00:00 +0000/blog/introducing-mcaptcha-net/mCaptcha uses a Proof-of-Work (PoW) based algorithm to offer Denial-of-Service protection, because of its excellent accessibility characteristics. PoW within mCaptcha is configuration — webmasters can configure difficulty factors for their installations, which determines waiting time for visitors. But PoW can become inaccessible if webmasters choose a very high difficulty factor. So they have to maintain a balance which imposes sufficient load on DDoS attackers while also being accessible to common folk.February, 2023: Monthly Report/blog/february-2023-monthly-report/Wed, 08 Mar 2023 00:00:00 +0000/blog/february-2023-monthly-report/Hello and welcome to the (August 2022 to) February, 2023 monthly report! -TL;DR Gusted and I secured funding from NLnet to work on mCaptcha in 2023, we suffered an outage from 15 January to February 6, polyfill benchmarking support in mCaptcha -We have funding! Gusted and I applied and secured funding through 2023 development is funded through the NGI0 Entrust Fund, via NLnet. -The full list of tasks that we’ll be working on in the period is is available here.July, 2022: Monthly Report/blog/july-2022-monthly-report/Thu, 04 Aug 2022 00:00:00 +0000/blog/july-2022-monthly-report/Hello and welcome to the July, 2022 monthly report! -TL;DR Codeberg is trying out mCaptcha, Gitea is getting mCaptcha support, mCaptcha supports MariaDB, I’ve applied for NLnet and Open Tech Fund, documentation is updated: tutorials and glossary is added and glue libraries have new releases. -Codeberg is deploying mCaptcha Codeberg is committed to trying out mCaptcha to make their platform more accessible: they currently use a text-based CAPTCHA, which will be replaced by mCaptcha.June, 2022: Monthly Report/blog/june-2022-monthly-report/Thu, 07 Jul 2022 00:00:00 +0000/blog/june-2022-monthly-report/Hello and welcome to the June 2022 edition of the monthly report! -mCaptcha is incorporated! I spent June doing non-technical tasks but I made significant progress: I had been trying to do it since summer 2021, but I faced various setbacks along the way. A family friend, who is also an auditor helped me finally get mCaptcha incorporated! -And we’ve already filed successfully filed the first tax return too! -GSTIN 33DGKPA2253J1ZN Ideas for Commercial Operations Commercial operations will take a while longer(end of 2022, most probably).May, 2022: Monthly Report/blog/may-2022-monthly-report/Fri, 10 Jun 2022 00:00:00 +0000/blog/may-2022-monthly-report/Hello and welcome to the May 2022 edition of the monthly report! -mCaptcha, for a while was showing all the signs of a dead project: no commits on the repositories and no monthly updates. But the project is far from dead! -Python bindings to mCaptcha PoW pow_py contains bindings to pow_sha256, the proof-of-work library that mCaptcha uses. For the uninitiated, the bindings allow for python programs to automatically solve mCaptcha.December, 2021: Monthly Report/blog/december-2021-monthly-report/Thu, 23 Dec 2021 00:00:00 +0000/blog/december-2021-monthly-report/Hello and welcome to the first edition of the monthly report! -I believe free software like mCaptcha is critical to a healthy internet but being a one-person show, there’s hardly any accountability in the way software is built. I hope, through monthly reports, I can explain the logic and intentions behind decisions taken in the development process. -This month, the following things were accomplished: -1. Full LibreJS Compliance The CAPTCHA widget and the admin dashboard are 100% LibreJS compliant!Survey/blog/survey/Thu, 28 Oct 2021 00:00:00 +0000/blog/survey/Survey link: https://survey.mcaptcha.org/survey/campaigns/b717e51e-24d4-4ab6-912f-de2dfe3ce1fe/about -NOTE: The survey(at least, the lucky draw is temporarily suspended due to some logistical reasons. Apologies for any inconvenience caused. -mCaptcha relies on a proof-of-work(PoW) mechanism to guard against bots. In order for this to be effective, the difficulty factor should be configured properly. If the difficulty factor is too high all the time, it will inconvenience the users and if it’s too low during attack, the defence will be weak.PoW performance/blog/pow-performance/Wed, 01 Sep 2021 00:00:00 +0000/blog/pow-performance/mCaptcha uses a proof-of-work(PoW) mechanism to rate limit users or potential bots. In order for this to be effective, the PoW should be configured properly. The difficulty requirement can’t be too high, as it could cause accessibility issues on the client-side while at the same time, it shouldn’t be too low, as it wouldn’t offer proper protection against bots. -Malicious bots(the ones that wreak havoc), run native code which is capable of running in a multi-threaded context.Say hello to mCaptcha/blog/say-hello-to-mcaptcha/Wed, 26 May 2021 00:00:00 +0000/blog/say-hello-to-mcaptcha/At mCaptcha, we believe in digital freedom and privacy and so we built a proof-of-work based CAPTCHA system that doesn’t track. Seriously, no tracking. But that isn’t the killer feature, our system doesn’t require the user to pick cars or ID sidewalks — our system does it’s thing(usually at the click of a button) and gets out of the way. -How does it work? mCaptcha uses SHA256 based proof-of-work(PoW) to rate limit users. \ No newline at end of file + + + + Blog on + /blog/ + Recent content in Blog on + Hugo -- gohugo.io + en-US + + + Introducing mCaptcha net + /blog/introducing-mcaptcha-net/ + Thu, 19 Oct 2023 00:00:00 +0000 + /blog/introducing-mcaptcha-net/ + mCaptcha uses a Proof-of-Work (PoW) based algorithm to offer Denial-of-Service protection, because of its excellent accessibility characteristics. PoW within mCaptcha is configuration — webmasters can configure difficulty factors for their installations, which determines waiting time for visitors. But PoW can become inaccessible if webmasters choose a very high difficulty factor. So they have to maintain a balance which imposes sufficient load on DDoS attackers while also being accessible to common folk. + + + February, 2023: Monthly Report + /blog/february-2023-monthly-report/ + Wed, 08 Mar 2023 00:00:00 +0000 + /blog/february-2023-monthly-report/ + Hello and welcome to the (August 2022 to) February, 2023 monthly report! TL;DR Gusted and I secured funding from NLnet to work on mCaptcha in 2023, we suffered an outage from 15 January to February 6, polyfill benchmarking support in mCaptcha We have funding! Gusted and I applied and secured funding through 2023 development is funded through the NGI0 Entrust Fund, via NLnet. The full list of tasks that we’ll be working on in the period is is available here. + + + July, 2022: Monthly Report + /blog/july-2022-monthly-report/ + Thu, 04 Aug 2022 00:00:00 +0000 + /blog/july-2022-monthly-report/ + Hello and welcome to the July, 2022 monthly report! TL;DR Codeberg is trying out mCaptcha, Gitea is getting mCaptcha support, mCaptcha supports MariaDB, I’ve applied for NLnet and Open Tech Fund, documentation is updated: tutorials and glossary is added and glue libraries have new releases. Codeberg is deploying mCaptcha Codeberg is committed to trying out mCaptcha to make their platform more accessible: they currently use a text-based CAPTCHA, which will be replaced by mCaptcha. + + + June, 2022: Monthly Report + /blog/june-2022-monthly-report/ + Thu, 07 Jul 2022 00:00:00 +0000 + /blog/june-2022-monthly-report/ + Hello and welcome to the June 2022 edition of the monthly report! mCaptcha is incorporated! I spent June doing non-technical tasks but I made significant progress: I had been trying to do it since summer 2021, but I faced various setbacks along the way. A family friend, who is also an auditor helped me finally get mCaptcha incorporated! And we’ve already filed successfully filed the first tax return too! GSTIN 33DGKPA2253J1ZN Ideas for Commercial Operations Commercial operations will take a while longer(end of 2022, most probably). + + + May, 2022: Monthly Report + /blog/may-2022-monthly-report/ + Fri, 10 Jun 2022 00:00:00 +0000 + /blog/may-2022-monthly-report/ + Hello and welcome to the May 2022 edition of the monthly report! mCaptcha, for a while was showing all the signs of a dead project: no commits on the repositories and no monthly updates. But the project is far from dead! Python bindings to mCaptcha PoW pow_py contains bindings to pow_sha256, the proof-of-work library that mCaptcha uses. For the uninitiated, the bindings allow for python programs to automatically solve mCaptcha. + + + December, 2021: Monthly Report + /blog/december-2021-monthly-report/ + Thu, 23 Dec 2021 00:00:00 +0000 + /blog/december-2021-monthly-report/ + Hello and welcome to the first edition of the monthly report! I believe free software like mCaptcha is critical to a healthy internet but being a one-person show, there’s hardly any accountability in the way software is built. I hope, through monthly reports, I can explain the logic and intentions behind decisions taken in the development process. This month, the following things were accomplished: 1. Full LibreJS Compliance The CAPTCHA widget and the admin dashboard are 100% LibreJS compliant! + + + Survey + /blog/survey/ + Thu, 28 Oct 2021 00:00:00 +0000 + /blog/survey/ + Survey link: https://survey.mcaptcha.org/survey/campaigns/b717e51e-24d4-4ab6-912f-de2dfe3ce1fe/about NOTE: The survey(at least, the lucky draw is temporarily suspended due to some logistical reasons. Apologies for any inconvenience caused. mCaptcha relies on a proof-of-work(PoW) mechanism to guard against bots. In order for this to be effective, the difficulty factor should be configured properly. If the difficulty factor is too high all the time, it will inconvenience the users and if it’s too low during attack, the defence will be weak. + + + PoW performance + /blog/pow-performance/ + Wed, 01 Sep 2021 00:00:00 +0000 + /blog/pow-performance/ + mCaptcha uses a proof-of-work(PoW) mechanism to rate limit users or potential bots. In order for this to be effective, the PoW should be configured properly. The difficulty requirement can’t be too high, as it could cause accessibility issues on the client-side while at the same time, it shouldn’t be too low, as it wouldn’t offer proper protection against bots. Malicious bots(the ones that wreak havoc), run native code which is capable of running in a multi-threaded context. + + + Say hello to mCaptcha + /blog/say-hello-to-mcaptcha/ + Wed, 26 May 2021 00:00:00 +0000 + /blog/say-hello-to-mcaptcha/ + At mCaptcha, we believe in digital freedom and privacy and so we built a proof-of-work based CAPTCHA system that doesn’t track. Seriously, no tracking. But that isn’t the killer feature, our system doesn’t require the user to pick cars or ID sidewalks — our system does it’s thing(usually at the click of a button) and gets out of the way. How does it work? mCaptcha uses SHA256 based proof-of-work(PoW) to rate limit users. + + + diff --git a/blog/introducing-mcaptcha-net/index.html b/blog/introducing-mcaptcha-net/index.html index 716c5a8..ac595d6 100644 --- a/blog/introducing-mcaptcha-net/index.html +++ b/blog/introducing-mcaptcha-net/index.html @@ -1,32 +1,240 @@ -Introducing mCaptcha net - mCaptcha

Introducing mCaptcha net

Posted October 19, 2023 by Aravinth Manivannan ‐ 2 min read

Last Edited October 21, 2023

mCaptcha uses a Proof-of-Work (PoW) based algorithm to offer -Denial-of-Service protection, because of its excellent accessibility + + + + + + + + + + + + + + Introducing mCaptcha net - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

Introducing mCaptcha net

+

Posted October 19, 2023 by Aravinth Manivannan ‐ 2 min read

+

Last Edited October 21, 2023

+ +

+

+

mCaptcha uses a Proof-of-Work (PoW) based algorithm to offer +Denial-of-Service protection, because of its excellent accessibility characteristics. PoW within mCaptcha is configuration — webmasters can configure -difficulty factors for their +difficulty factors for their installations, which determines waiting time for visitors. But PoW can become inaccessible if webmasters choose a very high difficulty factor. So they have to maintain a balance which imposes sufficient load on DDoS -attackers while also being accessible to common folk.

To help webmasters correctly configure difficult factors, we are +attackers while also being accessible to common folk.

+ +

To help webmasters correctly configure difficult factors, we are building a feedback loop which would gather performance statistics from voluntary mCaptcha installations and make them available to other mCaptcha installations. The performance statistics can be used by all mCaptcha instances to automatically optimize an installation. We are -calling this the mCaptcha net.

Participation is optional

Participation in the mCaptcha net is disabled by default and is +calling this the mCaptcha net.

+

Participation is optional

+

Participation in the mCaptcha net is disabled by default and is optional as it has privacy implications: it will reveal the -existence of an mCaptcha instance.

The admins of mCaptcha instances can choose to upload truly anonymous -PoW performance statistics to a number of mCaptcha/survey instances. +existence of an mCaptcha instance.

+

The admins of mCaptcha instances can choose to upload truly anonymous +PoW performance statistics to a number of mCaptcha/survey instances. The data uploaded is public and so is accessible to all mCaptcha -instances.

We also offer opt-in controls at installation level:

A screenshot of the 'add sitekey' form on the mCaptcha dashboard with a checkbox for anonymously publishing performance statistics. It is not checked by default.
Add sitekey form on the mCaptcha dashboard with a checkbox for anonymously publishing performance statistics. It is not checked by default.

Ensuring anonymity

mCaptcha doesn’t fingerprint its users. Performance parameters include:

  1. Time taken to generate PoW
  2. The difficulty factor for which the PoW was computed
  3. Type of client library used.
1"time":14,
-2"difficulty_factor":50000,
-3"worker_type":"wasm"
-

This doesn’t include the usual fingerprinting parameters like +instances.

+

We also offer opt-in controls at installation level:

+
+ A screenshot of the 'add sitekey' form on the mCaptcha dashboard with a checkbox for anonymously publishing performance statistics. It is not checked by default. + +
Add sitekey form on the mCaptcha dashboard with a checkbox for anonymously publishing performance statistics. It is not checked by default.
+
+

Ensuring anonymity

+

mCaptcha doesn’t fingerprint its users. Performance parameters include:

+
    +
  1. Time taken to generate PoW
  2. +
  3. The difficulty factor for which the PoW was computed
  4. +
  5. Type of client library used.
  6. +
+
1"time":14,
+2"difficulty_factor":50000,
+3"worker_type":"wasm"
+

This doesn’t include the usual fingerprinting parameters like User-Agent, cookies, and IP address. Additionally, we use pseudo IDs -at both mCaptcha/mCaptcha and mCaptcha/survey to avoid exposing installations.

A screenshot of a tmux window with logs of mCaptcha/mCaptcha and mCapctha/survey showing both of them talking to eachother
mCaptcha/mCaptcha uploading performance statistics to a mCaptcha/survey instance

Status

We now have performance statistics uploads to mCaptcha/survey instances -working. Pull request mCaptcha/mCaptcha#92 +at both mCaptcha/mCaptcha and mCaptcha/survey to avoid exposing installations.

+
+ A screenshot of a tmux window with logs of mCaptcha/mCaptcha and mCapctha/survey showing both of them talking to eachother + +
mCaptcha/mCaptcha uploading performance statistics to a mCaptcha/survey instance
+
+

Status

+

We now have performance statistics uploads to mCaptcha/survey instances +working. Pull request mCaptcha/mCaptcha#92 added abilities to mCaptcha to upload statistics to mCaptcha/survey instances and -mCaptcha/survey#40 enable survey to process the uploaded data. We will soon build a +mCaptcha/survey#40 enable survey to process the uploaded data. We will soon build a self-tuning algorithm within mCaptcha to use this data and optimize -installations automatically.

Edit this page on git.batsense.net

\ No newline at end of file +installations automatically.

+ +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_20x0_resize_box_2.png b/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_20x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_20x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_20x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_500x0_resize_box_2.png b/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_500x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_500x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_500x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_600x0_resize_box_2.png b/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_600x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_600x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_600x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_700x0_resize_box_2.png b/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_700x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_700x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_700x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_800x0_resize_box_2.png b/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_800x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_800x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_800x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_900x0_resize_box_2.png b/blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_900x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_900x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/installation-level-opt-in_huf73c7a9ce7ec84ce553fffad281cd7ba_53366_900x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_20x0_resize_box_2.png b/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_20x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_20x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_20x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_500x0_resize_box_2.png b/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_500x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_500x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_500x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_600x0_resize_box_2.png b/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_600x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_600x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_600x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_700x0_resize_box_2.png b/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_700x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_700x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_700x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_800x0_resize_box_2.png b/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_800x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_800x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_800x0_resize_box_3.png diff --git a/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_900x0_resize_box_2.png b/blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_900x0_resize_box_3.png similarity index 100% rename from blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_900x0_resize_box_2.png rename to blog/introducing-mcaptcha-net/working-rpc_huca78e586ec60552618ec5b6b3f0d9a9a_322974_900x0_resize_box_3.png diff --git a/blog/july-2022-monthly-report/index.html b/blog/july-2022-monthly-report/index.html index e243d83..7b463b3 100644 --- a/blog/july-2022-monthly-report/index.html +++ b/blog/july-2022-monthly-report/index.html @@ -1,40 +1,256 @@ -July, 2022: Monthly Report - mCaptcha

July, 2022: Monthly Report

Posted August 4, 2022 by Aravinth Manivannan ‐ 2 min read

Last Edited February 13, 2023

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Hello and welcome to the July, 2022 monthly report!

TL;DR

Codeberg is trying out mCaptcha, Gitea is getting mCaptcha support, + + + + + + + + + + + + + + July, 2022: Monthly Report - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

July, 2022: Monthly Report

+

Posted August 4, 2022 by Aravinth Manivannan ‐ 2 min read

+

Last Edited February 13, 2023

+ +

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Hello and welcome to the July, 2022 monthly report!

+

TL;DR

+

Codeberg is trying out mCaptcha, Gitea is getting mCaptcha support, mCaptcha supports MariaDB, I’ve applied for NLnet and Open Tech Fund, documentation is updated: tutorials and glossary is added and glue libraries -have new releases.

Codeberg is deploying mCaptcha

Codeberg is committed to trying out mCaptcha to make their platform more +have new releases.

+

Codeberg is deploying mCaptcha

+

Codeberg is committed to trying out mCaptcha to make their platform more accessible: they currently use a text-based CAPTCHA, which will be replaced by mCaptcha. The decision was finalized after I presented mCaptcha to them at a meeting their organized. Please see -here for -slides.

Gitea gets mCaptcha support

@Gusted from Codeberg is working on integrating +here for +slides.

+

Gitea gets mCaptcha support

+

@Gusted from Codeberg is working on integrating mCaptcha in Gitea so that Codeberg can deploy it. Please see -here for related the -pull request.

This project is yet to see usage, so we are venturing into uncharted +here for related the +pull request.

+

This project is yet to see usage, so we are venturing into uncharted territory: should you face issues with either deploying or -integrating mCaptcha, please feel free to reach out.

mCaptcha supports MariaDB:

Codeberg uses MariaDB. To facilitate Codeberg deployment, I implemented -support for MariaDB. The work done in +integrating mCaptcha, please feel free to reach out.

+

mCaptcha supports MariaDB:

+

Codeberg uses MariaDB. To facilitate Codeberg deployment, I implemented +support for MariaDB. The work done in May, 2022 made implementing support easy. Support for MariaDB is first class in mCaptcha: automatic testing exist to run tests with both Postgres and -MariaDB, so I expect things to be stable.

Applied for Funding: NLnet and Open Tech Fund

I’ve applied for NLnet and Open Tech Fund[0], Please find the +MariaDB, so I expect things to be stable.

+

Applied for Funding: NLnet and Open Tech Fund

+

I’ve applied for NLnet and Open Tech Fund[0], Please find the applications -here +here and -here -respectively.

If funding is granted:

  1. I’ll be able to work full-time for a year at the rate of 2,000 EUR/month
  2. We’ll have a dedicated build server
  3. We’ll have funds to run a DDoS test to gauge mCaptcha’s effectiveness

Documentation updates

mCaptcha docs over the months have become inconsistent and incorrect. I -cleaned up some of the mess and added a +here +respectively.

+

If funding is granted:

+
    +
  1. I’ll be able to work full-time for a year at the rate of 2,000 EUR/month
  2. +
  3. We’ll have a dedicated build server
  4. +
  5. We’ll have funds to run a DDoS test to gauge mCaptcha’s effectiveness
  6. +
+

Documentation updates

+

mCaptcha docs over the months have become inconsistent and incorrect. I +cleaned up some of the mess and added a tutorial to help folks install -mCaptcha on their website. The docs also gets a +mCaptcha on their website. The docs also gets a glossary, which contain explanations -to mCaptcha jargon.

New releases: glue libraries

0.1.0-alpha-2 for -vanilla, -react and -svelte glue +to mCaptcha jargon.

+

New releases: glue libraries

+

0.1.0-alpha-2 for +vanilla, +react and +svelte glue libraries were released. They now hand over widget sizing to the client -code(associated PR).

Footnotes

  • [0]: Special thanks to -@humantech for his thoughtful -reviews and to @dachary for pointing me towards -OTF.

Edit this page on git.batsense.net

\ No newline at end of file +code(associated PR).

+

Footnotes

+
    +
  • [0]: Special thanks to +@humantech for his thoughtful +reviews and to @dachary for pointing me towards +OTF.
  • +
+ +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/june-2022-monthly-report/index.html b/blog/june-2022-monthly-report/index.html index cdaacac..b77c187 100644 --- a/blog/june-2022-monthly-report/index.html +++ b/blog/june-2022-monthly-report/index.html @@ -1,25 +1,222 @@ -June, 2022: Monthly Report - mCaptcha

June, 2022: Monthly Report

Posted July 7, 2022 by Aravinth Manivannan ‐ 2 min read

Last Edited July 7, 2022

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Hello and welcome to the June 2022 edition of the monthly report!

mCaptcha is incorporated!

I spent June doing non-technical tasks but I made significant + + + + + + + + + + + + + + June, 2022: Monthly Report - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

June, 2022: Monthly Report

+

Posted July 7, 2022 by Aravinth Manivannan ‐ 2 min read

+

Last Edited July 7, 2022

+ +

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Hello and welcome to the June 2022 edition of the monthly report!

+

mCaptcha is incorporated!

+

I spent June doing non-technical tasks but I made significant progress: I had been trying to do it since summer 2021, but I faced various setbacks along the way. A family friend, who is also an auditor -helped me finally get mCaptcha incorporated!

And we’ve already filed successfully filed the first tax return too!

GSTIN

33DGKPA2253J1ZN
-

Ideas for Commercial Operations

Commercial operations will take a while longer(end of 2022, most -probably). For Hostea, I wrote a dashboard with +helped me finally get mCaptcha incorporated!

+

And we’ve already filed successfully filed the first tax return too!

+

GSTIN

+
33DGKPA2253J1ZN
+

Ideas for Commercial Operations

+

Commercial operations will take a while longer(end of 2022, most +probably). For Hostea, I wrote a dashboard with payments capabilities(via Stripe) so that experience will help me do the same for mCaptcha. Working on Hostea has been truly enlightening: it’s probably the first effort to offer a fully libre, infrastructure-as-code and payments software included, hosting service. I would like to do the same for mCaptcha so that service that I setup goes rogue or if someone wants to offer mCaptcha hosted services, they can replicate my set up -with ease.

But the commercial offering will at no point force me or future +with ease.

+

But the commercial offering will at no point force me or future maintainers turn mCaptcha into adopting a non-free license like the -Server Side Public +Server Side Public License. So the following months will see administrative changes within mCaptcha to device mechanisms to prevent me or any future party with influence in -mCaptcha development from hurting the project by it non-free.

Hostea is also an experiment in Free Software commercial operations, so +mCaptcha development from hurting the project by it non-free.

+

Hostea is also an experiment in Free Software commercial operations, so naturally I’m highly impressed by the ideas that are being discussed there. mCaptcha, too, will borrow ideas from that project to make its -development economically sustainable.

Edit this page on git.batsense.net

\ No newline at end of file +development economically sustainable.

+ +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/may-2022-monthly-report/index.html b/blog/may-2022-monthly-report/index.html index 71c8f51..e3437c9 100644 --- a/blog/may-2022-monthly-report/index.html +++ b/blog/may-2022-monthly-report/index.html @@ -1,116 +1,328 @@ -May, 2022: Monthly Report - mCaptcha

May, 2022: Monthly Report

Posted June 10, 2022 by Aravinth Manivannan ‐ 4 min read

Last Edited June 14, 2022

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Hello and welcome to the May 2022 edition of the monthly report!

mCaptcha, for a while was showing all the signs of a dead project: + + + + + + + + + + + + + + May, 2022: Monthly Report - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

May, 2022: Monthly Report

+

Posted June 10, 2022 by Aravinth Manivannan ‐ 4 min read

+

Last Edited June 14, 2022

+ +

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Hello and welcome to the May 2022 edition of the monthly report!

+

mCaptcha, for a while was showing all the signs of a dead project: no commits on the repositories and no monthly updates. But the project -is far from dead!

Python bindings to mCaptcha PoW

pow_py contains bindings to -pow_sha256, the -proof-of-work library +is far from dead!

+

Python bindings to mCaptcha PoW

+

pow_py contains bindings to +pow_sha256, the +proof-of-work library that mCaptcha uses. For the uninitiated, the bindings allow for python -programs to automatically solve mCaptcha.

So if you are writing a script to do some chore on your favourite +programs to automatically solve mCaptcha.

+

So if you are writing a script to do some chore on your favourite website that is protected by mCaptcha, you can now solve the mCaptcha -automatically from within the program.

Here’s an example:

 1import os
- 2
- 3import mcaptcha_pow_py
- 4import requests
- 5
- 6# get the sitekey that is used in the mCaptcha protected form
- 7SITEKEY = os.getenv("MCAPTCHA_CAPTCHA_SITEKEY")
- 8# the hostname of the mCaptcha instance that the form is using
- 9MCAPTCHA_HOST = os.getenv("MCAPTCHA_CAPTCHA_HOST")
-10
-11
-12GET_CONFIG_ROUTE = f"{MCAPTCHA_HOST}/api/v1/pow/config"
-13VERIFY_POW_ROUTE = f"{MCAPTCHA_HOST}/api/v1/pow/verify"
-14
-15def solve_captcha():
-16
-17    # get challenge configuration
-18    key = {"key": sitekey}
-19    challenge_config = requests.post(GET_CONFIG_ROUTE, json=key)
-20    challenge_config = challenge_config.json()
-21
-22    # extract configuration data
-23    config = mcaptcha_pow_py.PoWConfig(challenge_config["salt"])
-24    pow_string = challenge_config["string"]
-25    pow_difficulty_factor = challenge_config["difficulty_factor"]
-26
-27    # generate work
-28    work = config.work(pow_string, pow_difficulty_factor)
-29
-30    # verify PoW
-31    proof = {
-32        "key": SITEKEY,
-33        "nonce": work.nonce,
-34        "result": work.result,
-35        "string": challenge_config["string"],
-36    }
-37    resp = requests.post(VERIFY_POW_ROUTE, json=proof)
-38    resp = resp.json()
-39
-40    # extract verification token
-41    token = resp["token"]
-42
-43    return token
-44
-45
-46token = solve_captcha()
-47data = {
-48    "username": "me",
-49    "password": "superlongpassword",
-50    "confirm_password": "superlongpassword",
-51    "mcaptcha__token": token,
-52}
-53response = requests.post("/mCaptcha-protected-form", data=data)
-

This could be missed for building DDoS bots(more on that -here) but this could also be +automatically from within the program.

+

Here’s an example:

+
 1import os
+ 2
+ 3import mcaptcha_pow_py
+ 4import requests
+ 5
+ 6# get the sitekey that is used in the mCaptcha protected form
+ 7SITEKEY = os.getenv("MCAPTCHA_CAPTCHA_SITEKEY")
+ 8# the hostname of the mCaptcha instance that the form is using
+ 9MCAPTCHA_HOST = os.getenv("MCAPTCHA_CAPTCHA_HOST")
+10
+11
+12GET_CONFIG_ROUTE = f"{MCAPTCHA_HOST}/api/v1/pow/config"
+13VERIFY_POW_ROUTE = f"{MCAPTCHA_HOST}/api/v1/pow/verify"
+14
+15def solve_captcha():
+16
+17    # get challenge configuration
+18    key = {"key": sitekey}
+19    challenge_config = requests.post(GET_CONFIG_ROUTE, json=key)
+20    challenge_config = challenge_config.json()
+21
+22    # extract configuration data
+23    config = mcaptcha_pow_py.PoWConfig(challenge_config["salt"])
+24    pow_string = challenge_config["string"]
+25    pow_difficulty_factor = challenge_config["difficulty_factor"]
+26
+27    # generate work
+28    work = config.work(pow_string, pow_difficulty_factor)
+29
+30    # verify PoW
+31    proof = {
+32        "key": SITEKEY,
+33        "nonce": work.nonce,
+34        "result": work.result,
+35        "string": challenge_config["string"],
+36    }
+37    resp = requests.post(VERIFY_POW_ROUTE, json=proof)
+38    resp = resp.json()
+39
+40    # extract verification token
+41    token = resp["token"]
+42
+43    return token
+44
+45
+46token = solve_captcha()
+47data = {
+48    "username": "me",
+49    "password": "superlongpassword",
+50    "confirm_password": "superlongpassword",
+51    "mcaptcha__token": token,
+52}
+53response = requests.post("/mCaptcha-protected-form", data=data)
+

This could be missed for building DDoS bots(more on that +here) but this could also be used to make CAPTCHA solving automated within screen readers and other -accessibility devices!

Measuring DDoS protection effectiveness

Proof-of-work has historically been a good method to achieve rate +accessibility devices!

+

Measuring DDoS protection effectiveness

+

Proof-of-work has historically been a good method to achieve rate limiting but how much attack can it, specifically mCaptcha’s implementation, withstand when compared to an unprotected endpoint? To find out, we used the recently created Python bindings to the mCaptcha PoW library, the excellent load testing tool, -locust and wrote -mCaptcha/dos!

VIT AP kindly permitted me, @realaravinth, to use their network +locust and wrote +mCaptcha/dos!

+

VIT AP kindly permitted me, @realaravinth, to use their network security lab for setting up a isolated, contained testing environment to -mount a DDoS attack on a test +mount a DDoS attack on a test server -instance.

The initial topology consisted of one mCaptcha instance, one DDoS demo +instance.

+

The initial topology consisted of one mCaptcha instance, one DDoS demo server, one locust node running in leader configuration and six locust nodes running in follower configuration. I was authorised to use the netsec lab for three days, which unfortunately wasn’t enough to go -finish running the experiment. Dr. Sibi Chakkaravarthy +finish running the experiment. Dr. Sibi Chakkaravarthy Sethuraman has kindly offered to arrange authorisation to use the netsec lab once again in July 2022, -during which I hope to finish running the experiment

Special thanks to ackr-8 and -alan2000alex for help with setting up -infrastructure of the experiment.

Refactor

mCaptcha underwent a major refactor during the month of May: We re-wrote +during which I hope to finish running the experiment

+

Special thanks to ackr-8 and +alan2000alex for help with setting up +infrastructure of the experiment.

+

Refactor

+

mCaptcha underwent a major refactor during the month of May: We re-wrote and cleaned up all database-related stuff for higher flexibility and generally good architecture. This refactor lays the foundation for implementing support for alternate database software -programs(we currently support PostgreSQL only).

mCaptcha is now on the Fediverse

We recently joined the Fediverse on a -GoToSocial instance run by +programs(we currently support PostgreSQL only).

+

mCaptcha is now on the Fediverse

+

We recently joined the Fediverse on a +GoToSocial instance run by @realaravinth. We’ll soon be deleting our Twitter account in favour of -the Fediverse account.

Fediverse account: -@mCaptcha@batsense.net

Generic hosting

I, @realaravinth, have been busy with ForgeFlux -and Hostea — both of which are software +the Fediverse account.

+

Fediverse account: +@mCaptcha@batsense.net

+

Generic hosting

+

I, @realaravinth, have been busy with ForgeFlux +and Hostea — both of which are software forge related and so when usable, will mostly improve the Free Software ecosystem. Hostea is a project that aims to create a libre software development ecosystem and -provide managed hosting for the same. The project is built by a +provide managed hosting for the same. The project is built by a horizontal community, which allows for multiple service providers who adhere to the Hostea policies to operate under the Hostea umbrella — essentially allowing for the creation of -smaller, highly localised cooperatives.

Cooperatives are interesting, and we believe that mCaptcha, too, can +smaller, highly localised cooperatives.

+

Cooperatives are interesting, and we believe that mCaptcha, too, can benefit from such an architecture as it will prevent any one party from single-handedly sabotaging the project. The experience gained from -Hostea will be reused in providing managed hosting for mCaptcha.

By the end of this year, mCaptcha will reorganise into a horizontal -community and adopt radical transparency to improve trust and -reliability of the project

P.S: I, realaravinth, would do it sooner but I’m a little busy right +Hostea will be reused in providing managed hosting for mCaptcha.

+

By the end of this year, mCaptcha will reorganise into a horizontal +community and adopt radical transparency to improve trust and +reliability of the project

+
+

P.S: I, realaravinth, would do it sooner but I’m a little busy right now, so if someone is interested to help out do reach out and so that -we could do it sooner!

In context of mCaptcha, radical transparency will include all decisions +we could do it sooner!

+
+

In context of mCaptcha, radical transparency will include all decisions publicly made, funding and expenses publicly documented, and all collaborations, too, publicly documented. This of course doesn’t imply that private, personally identifiable information(addresses and phone numbers, for instance) will be publicly disclosed. Such information will -be redacted and published.

Edit this page on git.batsense.net

\ No newline at end of file +be redacted and published.

+ +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/pow-performance/index.html b/blog/pow-performance/index.html index df754e9..0256ee1 100644 --- a/blog/pow-performance/index.html +++ b/blog/pow-performance/index.html @@ -1,25 +1,411 @@ -PoW performance - mCaptcha

PoW performance

Posted September 1, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited September 1, 2021

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

mCaptcha uses a -proof-of-work(PoW) mechanism + + + + + + + + + + + + + + PoW performance - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

PoW performance

+

Posted September 1, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited September 1, 2021

+ +

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

mCaptcha uses a +proof-of-work(PoW) mechanism to rate limit users or potential bots. In order for this to be effective, the PoW should be configured properly. The difficulty requirement can’t be too high, as it could cause accessibility issues on the client-side while at the same time, it shouldn’t be too low, as it -wouldn’t offer proper protection against bots.

Malicious bots(the ones that wreak havoc), run native code which is +wouldn’t offer proper protection against bots.

+

Malicious bots(the ones that wreak havoc), run native code which is capable of running in a multi-threaded context. This creates an unfair advantage for crackers using these bots over legitimate users, who -usually use browsers to access a website.

I wanted to see how much of an advantage a native program would have -over our WASM library.

Benchmark tools

So I wrote these to compare native and WASM performances:

Results

The tests were run on my development machine featuring an Intel Core -i7-9750h.

Native

DifficultyRealUserSys
5000000m0.220s0m0.197s0m0.006s
10000000m0.203s0m0.203s0m0.000s
15000000m0.198s0m0.198s0m0.000s
20000000m0.203s0m0.203s0m0.000s
25000000m0.758s0m0.752s0m0.003s
30000000m0.776s0m0.769s0m0.003s
35000000m2.010s0m1.998s0m0.000s
40000000m2.038s0m2.033s0m0.003s
45000000m2.014s0m2.013s0m0.000s

Browser

I ran the tests on both Firefox and Chromium to compare results

Firefox

  • User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
  • Hardware concurrency: 12
DifficultyDuration(in ms)
500000401
1000000413
1500000398
2000000394
25000001495
30000001556
35000003971
40000004235
45000004116

To be fair, my Firefox installation is loaded with a gazillion +usually use browsers to access a website.

+

I wanted to see how much of an advantage a native program would have +over our WASM library.

+

Benchmark tools

+

So I wrote these to compare native and WASM performances:

+ + +

Results

+

The tests were run on my development machine featuring an Intel Core +i7-9750h.

+

Native

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
DifficultyRealUserSys
5000000m0.220s0m0.197s0m0.006s
10000000m0.203s0m0.203s0m0.000s
15000000m0.198s0m0.198s0m0.000s
20000000m0.203s0m0.203s0m0.000s
25000000m0.758s0m0.752s0m0.003s
30000000m0.776s0m0.769s0m0.003s
35000000m2.010s0m1.998s0m0.000s
40000000m2.038s0m2.033s0m0.003s
45000000m2.014s0m2.013s0m0.000s
+

Browser

+

I ran the tests on both Firefox and Chromium to compare results

+

Firefox

+
    +
  • User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
  • +
  • Hardware concurrency: 12
  • +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
DifficultyDuration(in ms)
500000401
1000000413
1500000398
2000000394
25000001495
30000001556
35000003971
40000004235
45000004116
+
+

To be fair, my Firefox installation is loaded with a gazillion extensions while the Chromium instance is clean, as I don’t use it -much

Chromium

  • User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36
  • Hardware concurrency: 12
DifficultyDuration(in ms)
500000399.40000000037253
1000000354.6000000014901
1500000351.19999999925494
2000000353.80000000074506
25000001337.800000000745
30000001311.199999999255
35000003417.5999999996275
40000003488.800000000745
45000003458.2999999988824

Conclusion

At the highest difficulty factor, the native implementation was a almost second +much

+
+

Chromium

+
    +
  • User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36
  • +
  • Hardware concurrency: 12
  • +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
DifficultyDuration(in ms)
500000399.40000000037253
1000000354.6000000014901
1500000351.19999999925494
2000000353.80000000074506
25000001337.800000000745
30000001311.199999999255
35000003417.5999999996275
40000003488.800000000745
45000003458.2999999988824
+

Conclusion

+

At the highest difficulty factor, the native implementation was a almost second faster than the WASM library. But the fact that both of them were able -to run to completion in under 5 seconds is impressive!

So, in my opinion, native implementation is only slightly faster than +to run to completion in under 5 seconds is impressive!

+

So, in my opinion, native implementation is only slightly faster than the WASM library and for all intents and purposes, this shouldn’t matter -much.


P.S Work is underway to benchmark multiple platforms. A detailed report -will be published when that data is available.

For this post, I asked some of my friends to run the tests on their +much.

+
+

P.S Work is underway to benchmark multiple platforms. A detailed report +will be published when that data is available.

+

For this post, I asked some of my friends to run the tests on their computers. The results slightly varied but even the slowest case generated proof for 4500000 difficulty(the highest in this test), in under -15 seconds!

Edit this page on git.batsense.net

\ No newline at end of file +15 seconds!

+ +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/say-hello-to-mcaptcha/index.html b/blog/say-hello-to-mcaptcha/index.html index eeeb34c..6e3aa16 100644 --- a/blog/say-hello-to-mcaptcha/index.html +++ b/blog/say-hello-to-mcaptcha/index.html @@ -1,25 +1,250 @@ -Say hello to mCaptcha - mCaptcha

Say hello to mCaptcha

Posted May 26, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited December 2, 2021

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

At mCaptcha, we believe in digital freedom and privacy and so we built a -proof-of-work based + + + + + + + + + + + + + + Say hello to mCaptcha - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

Say hello to mCaptcha

+

Posted May 26, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited December 2, 2021

+ +

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

At mCaptcha, we believe in digital freedom and privacy and so we built a +proof-of-work based CAPTCHA system that doesn’t track. Seriously, no tracking. But that isn’t the killer feature, our system doesn’t require the user to pick cars or ID sidewalks — our system does it’s thing(usually -at the click of a button) and gets out of the way.

How does it work?

mCaptcha uses SHA256 based proof-of-work(PoW) to rate limit users.

When a user wants to do something on an mCaptcha-protected website,

  1. they will have to generate proof-of-work(a bunch of math that will -takes time to compute) and submit it to mCaptcha.

  2. We’ll validate the proof:

  • if validation is unsuccessful, they will be prevented from accessing -the destination website
  • if validation is successful, read on,
  1. They will be issued a token that should be submit along with the -request/form to the destination website.

  2. The destination website validates the submitted token with -mCaptcha before processing the request.

The whole process is automated from the user’s point of view. All they -have to do is click on a button to initiate the process.

Okay, but what about bad actors?

mCaptcha makes interacting with websites (computationally)expensive for +at the click of a button) and gets out of the way.

+

How does it work?

+

mCaptcha uses SHA256 based proof-of-work(PoW) to rate limit users.

+

When a user wants to do something on an mCaptcha-protected website,

+
    +
  1. +

    they will have to generate proof-of-work(a bunch of math that will +takes time to compute) and submit it to mCaptcha.

    +
  2. +
  3. +

    We’ll validate the proof:

    +
  4. +
+
    +
  • if validation is unsuccessful, they will be prevented from accessing +the destination website
  • +
  • if validation is successful, read on,
  • +
+
    +
  1. +

    They will be issued a token that should be submit along with the +request/form to the destination website.

    +
  2. +
  3. +

    The destination website validates the submitted token with +mCaptcha before processing the request.

    +
  4. +
+

The whole process is automated from the user’s point of view. All they +have to do is click on a button to initiate the process.

+

Okay, but what about bad actors?

+

mCaptcha makes interacting with websites (computationally)expensive for the user. A well-behaving user will experience a slight delay(no delay when under moderate load to 2-3 seconds when under attack; PoW difficulty is variable) but if someone wants to hammer your site, they will have to do more work to send requests than your server you will have to do to respond -to their request.

Why use mCaptcha?

  • Free software, privacy focused
  • Seamless UX — No more annoying CAPTCHAs!
  • IP address independent: your users are behind a NAT? We got you covered!
  • Automatic bot throttling
  • Resistant to replay attacks: proof-of-work configurations have short lifetimes(30s) and can be used only once. If a user submits a PoW to an already used configuration or an expired one, their proof will be rejected.

How to migrate?

Our client libraries are mostly compatible with reCAPTCHA and hCaptcha. -A detailed guide will be published soon.

Our Philosophy

Man has has come so far only because our ancestors chose to +to their request.

+

Why use mCaptcha?

+
    +
  • Free software, privacy focused
  • +
  • Seamless UX — No more annoying CAPTCHAs!
  • +
  • IP address independent: your users are behind a NAT? We got you covered!
  • +
  • Automatic bot throttling
  • +
  • Resistant to replay attacks: proof-of-work configurations have short lifetimes(30s) and can be used only once. If a user submits a PoW to an already used configuration or an expired one, their proof will be rejected.
  • +
+

How to migrate?

+

Our client libraries are mostly compatible with reCAPTCHA and hCaptcha. +A detailed guide will be published soon.

+

Our Philosophy

+

Man has has come so far only because our ancestors chose to share their knowledge with others. If everything was labeled intellectual property, we might still be stuck in Stone Age. The idea of intellectual property is alien to us. For this reason, all of our source -code is freely available(both as in freedom and beers) at our -GitHub.

Resources

Edit this page on git.batsense.net

\ No newline at end of file +code is freely available(both as in freedom and beers) at our +GitHub.

+

Resources

+ + +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/blog/sitemap.xml b/blog/sitemap.xml index c593c63..dd72c9e 100644 --- a/blog/sitemap.xml +++ b/blog/sitemap.xml @@ -1 +1,66 @@ -/blog/introducing-mcaptcha-net/2023-10-21T16:48:55+05:30weekly0.5/blog/february-2023-monthly-report/2023-03-09T02:30:43+05:30weekly0.5/blog/july-2022-monthly-report/2023-02-13T14:50:39+05:30weekly0.5/blog/june-2022-monthly-report/2022-07-07T20:05:57+05:30weekly0.5/blog/may-2022-monthly-report/2022-06-14T15:39:59+05:30weekly0.5/blog/december-2021-monthly-report/2022-06-14T15:39:59+05:30weekly0.5/blog/survey/2021-12-23T23:26:38+05:30weekly0.5/blog/pow-performance/2021-09-01T15:33:12+05:30weekly0.5/blog/say-hello-to-mcaptcha/2021-12-02T10:25:42+05:30weekly0.5 \ No newline at end of file + + + + /blog/introducing-mcaptcha-net/ + 2023-10-21T16:48:55+05:30 + weekly + 0.5 + + + + /blog/february-2023-monthly-report/ + 2023-03-09T02:30:43+05:30 + weekly + 0.5 + + + + /blog/july-2022-monthly-report/ + 2023-02-13T14:50:39+05:30 + weekly + 0.5 + + + + /blog/june-2022-monthly-report/ + 2022-07-07T20:05:57+05:30 + weekly + 0.5 + + + + /blog/may-2022-monthly-report/ + 2022-06-14T15:39:59+05:30 + weekly + 0.5 + + + + /blog/december-2021-monthly-report/ + 2022-06-14T15:39:59+05:30 + weekly + 0.5 + + + + /blog/survey/ + 2021-12-23T23:26:38+05:30 + weekly + 0.5 + + + + /blog/pow-performance/ + 2021-09-01T15:33:12+05:30 + weekly + 0.5 + + + + /blog/say-hello-to-mcaptcha/ + 2021-12-02T10:25:42+05:30 + weekly + 0.5 + + \ No newline at end of file diff --git a/blog/survey/index.html b/blog/survey/index.html index 12efd7b..88ef794 100644 --- a/blog/survey/index.html +++ b/blog/survey/index.html @@ -1,15 +1,210 @@ -Survey - mCaptcha

Survey

Posted October 28, 2021 by Aravinth Manivannan ‐ 1 min read

Last Edited December 23, 2021

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Survey link: https://survey.mcaptcha.org/survey/campaigns/b717e51e-24d4-4ab6-912f-de2dfe3ce1fe/about

NOTE: The survey(at least, the lucky draw is temporarily suspended -due to some logistical reasons. Apologies for any inconvenience caused.

mCaptcha relies on a -proof-of-work(PoW) + + + + + + + + + + + + + + Survey - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +
+
+

Survey

+

Posted October 28, 2021 by Aravinth Manivannan ‐ 1 min read

+

Last Edited December 23, 2021

+ +

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Survey link: https://survey.mcaptcha.org/survey/campaigns/b717e51e-24d4-4ab6-912f-de2dfe3ce1fe/about

+

NOTE: The survey(at least, the lucky draw is temporarily suspended +due to some logistical reasons. Apologies for any inconvenience caused.

+

mCaptcha relies on a +proof-of-work(PoW) mechanism to guard against bots. In order for this to be effective, the difficulty factor should be configured properly. If the difficulty factor is too high all the time, it will inconvenience the users and if -it’s too low during attack, the defence will be weak.

So we are conducting a survey to gather performance benchmarks from +it’s too low during attack, the defence will be weak.

+

So we are conducting a survey to gather performance benchmarks from various devices and browsers. The data collected from the survey will be made public, we believe it will guide sysadmins configure difficulty factor -properly.

If you are interested in the lucky draw, please save the submission ID and the proof will be presented -to you at the end of the survey.

survey lucky draw identifier credentials
Lucky draw credentials

Winners

This blog post will be updated with the winning submission IDs and the -winners should provide the matching proof to claim their rewards.

Edit this page on git.batsense.net

\ No newline at end of file +properly.

+

If you are interested in the lucky draw, please save the submission ID and the proof will be presented +to you at the end of the survey.

+
+ survey lucky draw identifier credentials + +
Lucky draw credentials
+
+

Winners

+

This blog post will be updated with the winning submission IDs and the +winners should provide the matching proof to claim their rewards.

+ +
+ + +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/community/index.html b/community/index.html index 9359fd2..f8a6bd2 100644 --- a/community/index.html +++ b/community/index.html @@ -1,8 +1,181 @@ -Community - mCaptcha

Community

Matrix Community

Come say hi at our Matrix community!

Fediverse handle

We are on the Fediverse at -@mCapthca@batsense.net, toot at -us for queries and whatnot :)

Official Twitter handle

The project also has a twitter twitter presence at @m_captcha(Nitter + + + + + + + + + + + + + + Community - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ +
+ +

Community

+

+

Matrix Community

+

Come say hi at our Matrix community!

+

Fediverse handle

+

We are on the Fediverse at +@mCapthca@batsense.net, toot at +us for queries and whatnot :)

+

Official Twitter handle

+

The project also has a twitter twitter presence at @m_captcha(Nitter hyperlink). This space is used in -addition to the blog to post short updates.

Lead developer email

Write to me at realaravinth@batsense.net!

Bug reports

We use GitHub for managing tickets

Edit this page on git.batsense.net

\ No newline at end of file +addition to the blog to post short updates.

+

Lead developer email

+

Write to me at realaravinth@batsense.net!

+

Bug reports

+

We use GitHub for managing tickets

+ +

Edit this page on git.batsense.net

+ +
+
+ +
+
+ + + + + + + + + diff --git a/contact/index.html b/contact/index.html index ddf4b58..a531f97 100644 --- a/contact/index.html +++ b/contact/index.html @@ -1,9 +1,173 @@ -Contact - mCaptcha
+ + + + + + + + + diff --git a/contributors/aravinth-manivannan/index.html b/contributors/aravinth-manivannan/index.html index 026afed..80954ca 100644 --- a/contributors/aravinth-manivannan/index.html +++ b/contributors/aravinth-manivannan/index.html @@ -1,4 +1,226 @@ -Aravinth Manivannan - mCaptcha

Aravinth Manivannan

Creator of mCaptcha.

@realaravinth

Introducing mCaptcha net

Posted October 19, 2023 by Aravinth Manivannan ‐ 2 min read

Last Edited October 21, 2023

February, 2023: Monthly Report

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Posted March 8, 2023 by Aravinth Manivannan ‐ 2 min read

Last Edited March 9, 2023

July, 2022: Monthly Report

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Posted August 4, 2022 by Aravinth Manivannan ‐ 2 min read

Last Edited February 13, 2023

June, 2022: Monthly Report

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Posted July 7, 2022 by Aravinth Manivannan ‐ 2 min read

Last Edited July 7, 2022

May, 2022: Monthly Report

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Posted June 10, 2022 by Aravinth Manivannan ‐ 4 min read

Last Edited June 14, 2022

December, 2021: Monthly Report

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Posted December 23, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited June 14, 2022

Survey

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Posted October 28, 2021 by Aravinth Manivannan ‐ 1 min read

Last Edited December 23, 2021

PoW performance

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Posted September 1, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited September 1, 2021

Say hello to mCaptcha

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

Posted May 26, 2021 by Aravinth Manivannan ‐ 2 min read

Last Edited December 2, 2021

\ No newline at end of file + + + + + + + + + + + + + + Aravinth Manivannan - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+
+

Aravinth Manivannan

+

Creator of mCaptcha.

+

@realaravinth

+
+
+
+
+

Introducing mCaptcha net

+

+

Posted October 19, 2023 by Aravinth Manivannan ‐ 2 min read

+

Last Edited October 21, 2023

+

+
+
+
+

February, 2023: Monthly Report

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Posted March 8, 2023 by Aravinth Manivannan ‐ 2 min read

+

Last Edited March 9, 2023

+

+
+
+
+

July, 2022: Monthly Report

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Posted August 4, 2022 by Aravinth Manivannan ‐ 2 min read

+

Last Edited February 13, 2023

+

+
+
+
+

June, 2022: Monthly Report

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Posted July 7, 2022 by Aravinth Manivannan ‐ 2 min read

+

Last Edited July 7, 2022

+

+
+
+
+

May, 2022: Monthly Report

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Posted June 10, 2022 by Aravinth Manivannan ‐ 4 min read

+

Last Edited June 14, 2022

+

+
+
+
+

December, 2021: Monthly Report

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Posted December 23, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited June 14, 2022

+

+
+
+
+

Survey

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Posted October 28, 2021 by Aravinth Manivannan ‐ 1 min read

+

Last Edited December 23, 2021

+

+
+
+
+

PoW performance

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Posted September 1, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited September 1, 2021

+

+
+
+
+

Say hello to mCaptcha

+

We are mCaptcha. We build kickass CAPTCHA systems that give (DDoS) attackers a run for their money. And we do all of this without tracking your users. Oh and did I mention our UX is great?

+

Posted May 26, 2021 by Aravinth Manivannan ‐ 2 min read

+

Last Edited December 2, 2021

+

+
+
+
+
+
+ +
+
+ + + + + + + + + diff --git a/contributors/aravinth-manivannan/index.xml b/contributors/aravinth-manivannan/index.xml index 8e89d0a..837e067 100644 --- a/contributors/aravinth-manivannan/index.xml +++ b/contributors/aravinth-manivannan/index.xml @@ -1,18 +1,75 @@ -Aravinth Manivannan on/contributors/aravinth-manivannan/Recent content in Aravinth Manivannan onHugo -- gohugo.ioen-USWed, 26 May 2021 00:00:00 +0000Introducing mCaptcha net/blog/introducing-mcaptcha-net/Thu, 19 Oct 2023 00:00:00 +0000/blog/introducing-mcaptcha-net/mCaptcha uses a Proof-of-Work (PoW) based algorithm to offer Denial-of-Service protection, because of its excellent accessibility characteristics. PoW within mCaptcha is configuration — webmasters can configure difficulty factors for their installations, which determines waiting time for visitors. But PoW can become inaccessible if webmasters choose a very high difficulty factor. So they have to maintain a balance which imposes sufficient load on DDoS attackers while also being accessible to common folk.February, 2023: Monthly Report/blog/february-2023-monthly-report/Wed, 08 Mar 2023 00:00:00 +0000/blog/february-2023-monthly-report/Hello and welcome to the (August 2022 to) February, 2023 monthly report! -TL;DR Gusted and I secured funding from NLnet to work on mCaptcha in 2023, we suffered an outage from 15 January to February 6, polyfill benchmarking support in mCaptcha -We have funding! Gusted and I applied and secured funding through 2023 development is funded through the NGI0 Entrust Fund, via NLnet. -The full list of tasks that we’ll be working on in the period is is available here.July, 2022: Monthly Report/blog/july-2022-monthly-report/Thu, 04 Aug 2022 00:00:00 +0000/blog/july-2022-monthly-report/Hello and welcome to the July, 2022 monthly report! -TL;DR Codeberg is trying out mCaptcha, Gitea is getting mCaptcha support, mCaptcha supports MariaDB, I’ve applied for NLnet and Open Tech Fund, documentation is updated: tutorials and glossary is added and glue libraries have new releases. -Codeberg is deploying mCaptcha Codeberg is committed to trying out mCaptcha to make their platform more accessible: they currently use a text-based CAPTCHA, which will be replaced by mCaptcha.June, 2022: Monthly Report/blog/june-2022-monthly-report/Thu, 07 Jul 2022 00:00:00 +0000/blog/june-2022-monthly-report/Hello and welcome to the June 2022 edition of the monthly report! -mCaptcha is incorporated! I spent June doing non-technical tasks but I made significant progress: I had been trying to do it since summer 2021, but I faced various setbacks along the way. A family friend, who is also an auditor helped me finally get mCaptcha incorporated! -And we’ve already filed successfully filed the first tax return too! -GSTIN 33DGKPA2253J1ZN Ideas for Commercial Operations Commercial operations will take a while longer(end of 2022, most probably).May, 2022: Monthly Report/blog/may-2022-monthly-report/Fri, 10 Jun 2022 00:00:00 +0000/blog/may-2022-monthly-report/Hello and welcome to the May 2022 edition of the monthly report! -mCaptcha, for a while was showing all the signs of a dead project: no commits on the repositories and no monthly updates. But the project is far from dead! -Python bindings to mCaptcha PoW pow_py contains bindings to pow_sha256, the proof-of-work library that mCaptcha uses. For the uninitiated, the bindings allow for python programs to automatically solve mCaptcha.December, 2021: Monthly Report/blog/december-2021-monthly-report/Thu, 23 Dec 2021 00:00:00 +0000/blog/december-2021-monthly-report/Hello and welcome to the first edition of the monthly report! -I believe free software like mCaptcha is critical to a healthy internet but being a one-person show, there’s hardly any accountability in the way software is built. I hope, through monthly reports, I can explain the logic and intentions behind decisions taken in the development process. -This month, the following things were accomplished: -1. Full LibreJS Compliance The CAPTCHA widget and the admin dashboard are 100% LibreJS compliant!Survey/blog/survey/Thu, 28 Oct 2021 00:00:00 +0000/blog/survey/Survey link: https://survey.mcaptcha.org/survey/campaigns/b717e51e-24d4-4ab6-912f-de2dfe3ce1fe/about -NOTE: The survey(at least, the lucky draw is temporarily suspended due to some logistical reasons. Apologies for any inconvenience caused. -mCaptcha relies on a proof-of-work(PoW) mechanism to guard against bots. In order for this to be effective, the difficulty factor should be configured properly. If the difficulty factor is too high all the time, it will inconvenience the users and if it’s too low during attack, the defence will be weak.PoW performance/blog/pow-performance/Wed, 01 Sep 2021 00:00:00 +0000/blog/pow-performance/mCaptcha uses a proof-of-work(PoW) mechanism to rate limit users or potential bots. In order for this to be effective, the PoW should be configured properly. The difficulty requirement can’t be too high, as it could cause accessibility issues on the client-side while at the same time, it shouldn’t be too low, as it wouldn’t offer proper protection against bots. -Malicious bots(the ones that wreak havoc), run native code which is capable of running in a multi-threaded context.Say hello to mCaptcha/blog/say-hello-to-mcaptcha/Wed, 26 May 2021 00:00:00 +0000/blog/say-hello-to-mcaptcha/At mCaptcha, we believe in digital freedom and privacy and so we built a proof-of-work based CAPTCHA system that doesn’t track. Seriously, no tracking. But that isn’t the killer feature, our system doesn’t require the user to pick cars or ID sidewalks — our system does it’s thing(usually at the click of a button) and gets out of the way. -How does it work? mCaptcha uses SHA256 based proof-of-work(PoW) to rate limit users. \ No newline at end of file + + + + Aravinth Manivannan on + /contributors/aravinth-manivannan/ + Recent content in Aravinth Manivannan on + Hugo -- gohugo.io + en-US + Wed, 26 May 2021 00:00:00 +0000 + + + Introducing mCaptcha net + /blog/introducing-mcaptcha-net/ + Thu, 19 Oct 2023 00:00:00 +0000 + /blog/introducing-mcaptcha-net/ + mCaptcha uses a Proof-of-Work (PoW) based algorithm to offer Denial-of-Service protection, because of its excellent accessibility characteristics. PoW within mCaptcha is configuration — webmasters can configure difficulty factors for their installations, which determines waiting time for visitors. But PoW can become inaccessible if webmasters choose a very high difficulty factor. So they have to maintain a balance which imposes sufficient load on DDoS attackers while also being accessible to common folk. + + + February, 2023: Monthly Report + /blog/february-2023-monthly-report/ + Wed, 08 Mar 2023 00:00:00 +0000 + /blog/february-2023-monthly-report/ + Hello and welcome to the (August 2022 to) February, 2023 monthly report! TL;DR Gusted and I secured funding from NLnet to work on mCaptcha in 2023, we suffered an outage from 15 January to February 6, polyfill benchmarking support in mCaptcha We have funding! Gusted and I applied and secured funding through 2023 development is funded through the NGI0 Entrust Fund, via NLnet. The full list of tasks that we’ll be working on in the period is is available here. + + + July, 2022: Monthly Report + /blog/july-2022-monthly-report/ + Thu, 04 Aug 2022 00:00:00 +0000 + /blog/july-2022-monthly-report/ + Hello and welcome to the July, 2022 monthly report! TL;DR Codeberg is trying out mCaptcha, Gitea is getting mCaptcha support, mCaptcha supports MariaDB, I’ve applied for NLnet and Open Tech Fund, documentation is updated: tutorials and glossary is added and glue libraries have new releases. Codeberg is deploying mCaptcha Codeberg is committed to trying out mCaptcha to make their platform more accessible: they currently use a text-based CAPTCHA, which will be replaced by mCaptcha. + + + June, 2022: Monthly Report + /blog/june-2022-monthly-report/ + Thu, 07 Jul 2022 00:00:00 +0000 + /blog/june-2022-monthly-report/ + Hello and welcome to the June 2022 edition of the monthly report! mCaptcha is incorporated! I spent June doing non-technical tasks but I made significant progress: I had been trying to do it since summer 2021, but I faced various setbacks along the way. A family friend, who is also an auditor helped me finally get mCaptcha incorporated! And we’ve already filed successfully filed the first tax return too! GSTIN 33DGKPA2253J1ZN Ideas for Commercial Operations Commercial operations will take a while longer(end of 2022, most probably). + + + May, 2022: Monthly Report + /blog/may-2022-monthly-report/ + Fri, 10 Jun 2022 00:00:00 +0000 + /blog/may-2022-monthly-report/ + Hello and welcome to the May 2022 edition of the monthly report! mCaptcha, for a while was showing all the signs of a dead project: no commits on the repositories and no monthly updates. But the project is far from dead! Python bindings to mCaptcha PoW pow_py contains bindings to pow_sha256, the proof-of-work library that mCaptcha uses. For the uninitiated, the bindings allow for python programs to automatically solve mCaptcha. + + + December, 2021: Monthly Report + /blog/december-2021-monthly-report/ + Thu, 23 Dec 2021 00:00:00 +0000 + /blog/december-2021-monthly-report/ + Hello and welcome to the first edition of the monthly report! I believe free software like mCaptcha is critical to a healthy internet but being a one-person show, there’s hardly any accountability in the way software is built. I hope, through monthly reports, I can explain the logic and intentions behind decisions taken in the development process. This month, the following things were accomplished: 1. Full LibreJS Compliance The CAPTCHA widget and the admin dashboard are 100% LibreJS compliant! + + + Survey + /blog/survey/ + Thu, 28 Oct 2021 00:00:00 +0000 + /blog/survey/ + Survey link: https://survey.mcaptcha.org/survey/campaigns/b717e51e-24d4-4ab6-912f-de2dfe3ce1fe/about NOTE: The survey(at least, the lucky draw is temporarily suspended due to some logistical reasons. Apologies for any inconvenience caused. mCaptcha relies on a proof-of-work(PoW) mechanism to guard against bots. In order for this to be effective, the difficulty factor should be configured properly. If the difficulty factor is too high all the time, it will inconvenience the users and if it’s too low during attack, the defence will be weak. + + + PoW performance + /blog/pow-performance/ + Wed, 01 Sep 2021 00:00:00 +0000 + /blog/pow-performance/ + mCaptcha uses a proof-of-work(PoW) mechanism to rate limit users or potential bots. In order for this to be effective, the PoW should be configured properly. The difficulty requirement can’t be too high, as it could cause accessibility issues on the client-side while at the same time, it shouldn’t be too low, as it wouldn’t offer proper protection against bots. Malicious bots(the ones that wreak havoc), run native code which is capable of running in a multi-threaded context. + + + Say hello to mCaptcha + /blog/say-hello-to-mcaptcha/ + Wed, 26 May 2021 00:00:00 +0000 + /blog/say-hello-to-mcaptcha/ + At mCaptcha, we believe in digital freedom and privacy and so we built a proof-of-work based CAPTCHA system that doesn’t track. Seriously, no tracking. But that isn’t the killer feature, our system doesn’t require the user to pick cars or ID sidewalks — our system does it’s thing(usually at the click of a button) and gets out of the way. How does it work? mCaptcha uses SHA256 based proof-of-work(PoW) to rate limit users. + + + diff --git a/contributors/index.html b/contributors/index.html index bfff89f..e5c8deb 100644 --- a/contributors/index.html +++ b/contributors/index.html @@ -1,4 +1,158 @@ -Contributors - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + Contributors - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+ +
+
+ +
+
+ + + + + + + + + diff --git a/contributors/index.xml b/contributors/index.xml index ba79a45..132cc64 100644 --- a/contributors/index.xml +++ b/contributors/index.xml @@ -1,2 +1,19 @@ -Contributors on/contributors/Recent content in Contributors onHugo -- gohugo.ioen-USWed, 26 May 2021 00:00:00 +0000Aravinth Manivannan/contributors/aravinth-manivannan/Wed, 26 May 2021 00:00:00 +0000/contributors/aravinth-manivannan/Creator of mCaptcha. -@realaravinth \ No newline at end of file + + + + Contributors on + /contributors/ + Recent content in Contributors on + Hugo -- gohugo.io + en-US + Wed, 26 May 2021 00:00:00 +0000 + + + Aravinth Manivannan + /contributors/aravinth-manivannan/ + Wed, 26 May 2021 00:00:00 +0000 + /contributors/aravinth-manivannan/ + Creator of mCaptcha. @realaravinth + + + diff --git a/docs/api/browser/index.html b/docs/api/browser/index.html index 7e7be18..8d0ece9 100644 --- a/docs/api/browser/index.html +++ b/docs/api/browser/index.html @@ -1,16 +1,249 @@ -Browser libraries - mCaptcha

Browser libraries

The browser part of mCaptcha is divided into three components.

  • Glue code
  • Widget program
  • Proof-of-Work libraries(WebAssembly and JavaScript polyfill)

Glue code

This is the code that links mCaptcha with your website’s frontend code. + + + + + + + + + + + + + + Browser libraries - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ + +
+ +

Browser libraries

+

+

The browser part of mCaptcha is divided into three components.

+
    +
  • Glue code
  • +
  • Widget program
  • +
  • Proof-of-Work libraries(WebAssembly and JavaScript polyfill)
  • +
+

Glue code

+

This is the code that links mCaptcha with your website’s frontend code. It creates an iframe containing the mCaptcha widget and injects the -received verification proof token into a hidden input field.

Support is available for various frameworks, see -mCaptcha/glue for the full list.

For frameworks without official support, a low-level library, -@mcaptcha/core-glue, -can be used to implement support.

Widget Program

This part is served by the mCaptcha backend. It fetches PoW config from +received verification proof token into a hidden input field.

+

Support is available for various frameworks, see +mCaptcha/glue for the full list.

+

For frameworks without official support, a low-level library, +@mcaptcha/core-glue, +can be used to implement support.

+

Widget Program

+

This part is served by the mCaptcha backend. It fetches PoW config from the backend, generates proof and submits it for verification. If verification is successful, it sends a message containing the verification proof token to the parent window, assuming it’s loaded as -an iframe.

WebAssembly library which generates Proofs of Work for mCaptcha systems.

Proof-of-Work(PoW) library

WebAssembly bindings(mCaptcha/pow_wasm) are available for the main rust library(mCaptcha/pow_sha256).

For browsers without support WebAssembly, a -polyfill(pow_sha256-polyfill) -is available.

Edit this page on git.batsense.net

\ No newline at end of file +an iframe.

+ +

WebAssembly library which generates Proofs of Work for mCaptcha systems.

+

Proof-of-Work(PoW) library

+

WebAssembly bindings(mCaptcha/pow_wasm) are available for the main rust library(mCaptcha/pow_sha256).

+

For browsers without support WebAssembly, a +polyfill(pow_sha256-polyfill) +is available.

+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/api/index.html b/docs/api/index.html index 45c41b8..96c2191 100644 --- a/docs/api/index.html +++ b/docs/api/index.html @@ -1,4 +1,203 @@ -API - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + API - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+ +
+
+ +
+
+ + + + + + + + + diff --git a/docs/api/index.xml b/docs/api/index.xml index f4b689d..c29ab98 100644 --- a/docs/api/index.xml +++ b/docs/api/index.xml @@ -1,8 +1,33 @@ -API on/docs/api/Recent content in API onHugo -- gohugo.ioen-USTue, 06 Oct 2020 08:48:23 +0000Browser libraries/docs/api/browser/Thu, 11 Mar 2021 00:00:00 +0000/docs/api/browser/The browser part of mCaptcha is divided into three components. -Glue code Widget program Proof-of-Work libraries(WebAssembly and JavaScript polyfill) Glue code This is the code that links mCaptcha with your website’s frontend code. It creates an iframe containing the mCaptcha widget and injects the received verification proof token into a hidden input field. -Support is available for various frameworks, see mCaptcha/glue for the full list. -For frameworks without official support, a low-level library, @mcaptcha/core-glue, can be used to implement support.mCaptcha System Library/docs/api/mcaptcha-system/Thu, 11 Mar 2021 00:00:00 +0000/docs/api/mcaptcha-system/Documentation for the library used in mCaptcha core. -Versions master-branch 0.1.3 0.1.2 0.1.1 0.1.0pow_sha256/docs/api/pow-sha256/Thu, 11 Mar 2021 00:00:00 +0000/docs/api/pow-sha256/Rust crate which generates SHA256 Proofs of Work on serializable datatypes. -This is a fork of the pow library by @robkorn) with some new additions. Primary of these being: -PoW datatype now offers a constructor Salt is no longer hard coded into the library, users can provide unique salts. Other small changes have also been included of various importance but mostly just stylistic/ease of use improvements. -Versions master-branch 0. \ No newline at end of file + + + + API on + /docs/api/ + Recent content in API on + Hugo -- gohugo.io + en-US + Tue, 06 Oct 2020 08:48:23 +0000 + + + Browser libraries + /docs/api/browser/ + Thu, 11 Mar 2021 00:00:00 +0000 + /docs/api/browser/ + The browser part of mCaptcha is divided into three components. Glue code Widget program Proof-of-Work libraries(WebAssembly and JavaScript polyfill) Glue code This is the code that links mCaptcha with your website’s frontend code. It creates an iframe containing the mCaptcha widget and injects the received verification proof token into a hidden input field. Support is available for various frameworks, see mCaptcha/glue for the full list. For frameworks without official support, a low-level library, @mcaptcha/core-glue, can be used to implement support. + + + mCaptcha System Library + /docs/api/mcaptcha-system/ + Thu, 11 Mar 2021 00:00:00 +0000 + /docs/api/mcaptcha-system/ + Documentation for the library used in mCaptcha core. Versions master-branch 0.1.3 0.1.2 0.1.1 0.1.0 + + + pow_sha256 + /docs/api/pow-sha256/ + Thu, 11 Mar 2021 00:00:00 +0000 + /docs/api/pow-sha256/ + Rust crate which generates SHA256 Proofs of Work on serializable datatypes. This is a fork of the pow library by @robkorn) with some new additions. Primary of these being: PoW datatype now offers a constructor Salt is no longer hard coded into the library, users can provide unique salts. Other small changes have also been included of various importance but mostly just stylistic/ease of use improvements. Versions master-branch 0.2.1 0.2.0 0. + + + diff --git a/docs/api/mcaptcha-system/index.html b/docs/api/mcaptcha-system/index.html index e2a0521..5b5b3d0 100644 --- a/docs/api/mcaptcha-system/index.html +++ b/docs/api/mcaptcha-system/index.html @@ -1,4 +1,225 @@ -mCaptcha System Library - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + mCaptcha System Library - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+ + +
+ +

mCaptcha System Library

+

+

Documentation for the library used in mCaptcha core.

+

Versions

+ + +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/api/pow-sha256/index.html b/docs/api/pow-sha256/index.html index 1f0e8fd..fe334f9 100644 --- a/docs/api/pow-sha256/index.html +++ b/docs/api/pow-sha256/index.html @@ -1,9 +1,238 @@ -pow_sha256 - mCaptcha

pow_sha256

Rust crate which generates SHA256 Proofs of Work on serializable datatypes.

This is a fork of the pow library by -@robkorn) with some new -additions. Primary of these being:

  • PoW datatype now offers a constructor
  • Salt is no longer hard coded into the library, users can provide -unique salts.

Other small changes have also been included of various importance but -mostly just stylistic/ease of use improvements.

Versions

Changelog

Changelog is available at the project’s -repository

Edit this page on git.batsense.net

\ No newline at end of file + + + + + + + + + + + + + + pow_sha256 - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+ + +
+ +

pow_sha256

+

+

Rust crate which generates SHA256 Proofs of Work on serializable datatypes.

+

This is a fork of the pow library by +@robkorn) with some new +additions. Primary of these being:

+
    +
  • PoW datatype now offers a constructor
  • +
  • Salt is no longer hard coded into the library, users can provide +unique salts.
  • +
+

Other small changes have also been included of various importance but +mostly just stylistic/ease of use improvements.

+

Versions

+ +

Changelog

+

Changelog is available at the project’s +repository

+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/api/sitemap.xml b/docs/api/sitemap.xml index 09b7be2..57dcc67 100644 --- a/docs/api/sitemap.xml +++ b/docs/api/sitemap.xml @@ -1 +1,24 @@ -/docs/api/browser/2022-08-01T20:24:18+05:30weekly0.5/docs/api/mcaptcha-system/2022-08-01T20:24:18+05:30weekly0.5/docs/api/pow-sha256/2022-08-01T20:24:18+05:30weekly0.5 \ No newline at end of file + + + + /docs/api/browser/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + + + /docs/api/mcaptcha-system/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + + + /docs/api/pow-sha256/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + \ No newline at end of file diff --git a/docs/help/faq/index.html b/docs/help/faq/index.html index 8250b38..3937e23 100644 --- a/docs/help/faq/index.html +++ b/docs/help/faq/index.html @@ -1,4 +1,212 @@ -FAQ - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + FAQ - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+ + +
+ +

FAQ

+

Answers to frequently asked questions.

+

Coming soon

+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/help/index.html b/docs/help/index.html index c94d3ab..32f7280 100644 --- a/docs/help/index.html +++ b/docs/help/index.html @@ -1,4 +1,197 @@ -Help - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + Help - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+
+

Help

+
+
+ + + + + + + + + + + +
+
+ FAQ → +
+
+ + + + + + + + + + + + + + + + + + + + + + + + +
+
+
+
+ +
+
+ + + + + + + + + diff --git a/docs/help/index.xml b/docs/help/index.xml index 80ede88..17c62d3 100644 --- a/docs/help/index.xml +++ b/docs/help/index.xml @@ -1,2 +1,26 @@ -Help on/docs/help/Recent content in Help onHugo -- gohugo.ioen-USTue, 06 Oct 2020 08:49:15 +0000Troubleshooting/docs/help/troubleshooting/Mon, 01 Jan 0001 00:00:00 +0000/docs/help/troubleshooting/Q: I just setup an instance but I am unable to login mCaptcha by default is configured to server at localhost hostname. If the instance is deployed at another hostname, please try setting MCAPTCHA_SERVER_DOMAIN environment variable to the hostname at which your instance is deployed or setting the equivalent in config.toml: -1[server] 2domain=mydomainFAQ/docs/help/faq/Mon, 01 Jan 0001 00:00:00 +0000/docs/help/faq/Coming soon \ No newline at end of file + + + + Help on + /docs/help/ + Recent content in Help on + Hugo -- gohugo.io + en-US + Tue, 06 Oct 2020 08:49:15 +0000 + + + Troubleshooting + /docs/help/troubleshooting/ + Mon, 01 Jan 0001 00:00:00 +0000 + /docs/help/troubleshooting/ + Q: I just setup an instance but I am unable to login mCaptcha by default is configured to server at localhost hostname. If the instance is deployed at another hostname, please try setting MCAPTCHA_SERVER_DOMAIN environment variable to the hostname at which your instance is deployed or setting the equivalent in config.toml: 1[server] 2domain=mydomain + + + FAQ + /docs/help/faq/ + Mon, 01 Jan 0001 00:00:00 +0000 + /docs/help/faq/ + Coming soon + + + diff --git a/docs/help/sitemap.xml b/docs/help/sitemap.xml index 73bf3c3..1172705 100644 --- a/docs/help/sitemap.xml +++ b/docs/help/sitemap.xml @@ -1 +1,17 @@ -/docs/help/troubleshooting/2022-08-01T22:24:30+05:30weekly0.5/docs/help/faq/2022-08-01T19:16:21+05:30weekly0.5 \ No newline at end of file + + + + /docs/help/troubleshooting/ + 2022-08-01T22:24:30+05:30 + weekly + 0.5 + + + + /docs/help/faq/ + 2022-08-01T19:16:21+05:30 + weekly + 0.5 + + \ No newline at end of file diff --git a/docs/help/troubleshooting/index.html b/docs/help/troubleshooting/index.html index 641ebd8..0320202 100644 --- a/docs/help/troubleshooting/index.html +++ b/docs/help/troubleshooting/index.html @@ -1,9 +1,222 @@ -Troubleshooting - mCaptcha

Troubleshooting

Solutions to common problems.

Q: I just setup an instance but I am unable to login

mCaptcha by default is configured to server at localhost hostname. If + + + + + + + + + + + + + + Troubleshooting - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ + +
+ +

Troubleshooting

+

Solutions to common problems.

+

Q: I just setup an instance but I am unable to login

+

mCaptcha by default is configured to server at localhost hostname. If the instance is deployed at another hostname, please try setting MCAPTCHA_SERVER_DOMAIN environment variable to the hostname at which -your instance is deployed or setting the equivalent in config.toml:

1[server]
-2domain=mydomain
-

Edit this page on git.batsense.net

\ No newline at end of file +your instance is deployed or setting the equivalent in config.toml:

+
1[server]
+2domain=mydomain
+
+

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/index.html b/docs/index.html index e02f282..753421c 100644 --- a/docs/index.html +++ b/docs/index.html @@ -1,4 +1,274 @@ -mCaptcha - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + mCaptcha - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+
+

mCaptcha

+
+
+ + + + + + + +
+ +
+ + + + + + + + + + + +
+
+ FAQ → +
+
+ + + + + + + + + + + + + + + +
+ +
+ + + +
+ +
+ + + + + + + + + + + + + + + + + + + + + + +
+
+
+
+ +
+
+ + + + + + + + + diff --git a/docs/index.xml b/docs/index.xml index 4cf1128..1e3bb54 100644 --- a/docs/index.xml +++ b/docs/index.xml @@ -1 +1,11 @@ -mCaptcha on/docs/Recent content in mCaptcha onHugo -- gohugo.ioen-US \ No newline at end of file + + + + mCaptcha on + /docs/ + Recent content in mCaptcha on + Hugo -- gohugo.io + en-US + + + diff --git a/docs/self-hosting/ansible/index.html b/docs/self-hosting/ansible/index.html index 679c3b5..0c5bad3 100644 --- a/docs/self-hosting/ansible/index.html +++ b/docs/self-hosting/ansible/index.html @@ -1,11 +1,250 @@ -Using Ansible - mCaptcha

Using Ansible

Deploy mCaptcha software using Ansible playbooks

Ansible playbooks to install mCaptcha are available here.

Instructions

Installation

  1. Clone the repository:
1git clone https://git.batsense.net/mCaptcha/iac && cd iac
-
  1. Create inventory file. You should have SSH access to the remote + + + + + + + + + + + + + + Using Ansible - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

    + + +
    +
    + +
    + + +
    + +

    Using Ansible

    +

    Deploy mCaptcha software using Ansible playbooks

    +

    Ansible playbooks to install mCaptcha are available here.

    +

    Instructions

    +

    Installation

    +
      +
    1. Clone the repository:
    2. +
    +
    1git clone https://git.batsense.net/mCaptcha/iac && cd iac
    +
      +
    1. +

      Create inventory file. You should have SSH access to the remote machine, and the user must have sudo privileges. Example inventory -file:

      1[mcaptcha_hosts]
      -2"mcaptcha_hosts"
      -3<node name> ansible_host=<node IP> ansible_user=<remote username>
      -

      It is important that the group name be mcaptcha_hosts.

    2. Configure installation by editing ansible/vars/mcaptcha/vars.yml. Most parameters have defaults, and the required parameters are annotated.

    3. Run playbook:

    1	ansible-playbook -i path/to/inventory-file -f 10 ./ansible/mcaptcha.yml
    -

    Update

    1. Pull changes from Git repository
    2. Rerun playbook

    Edit this page on git.batsense.net

    \ No newline at end of file +file:

    +
    1[mcaptcha_hosts]
    +2"mcaptcha_hosts"
    +3<node name> ansible_host=<node IP> ansible_user=<remote username>
    +

    It is important that the group name be mcaptcha_hosts.

    +
  2. +
  3. +

    Configure installation by editing ansible/vars/mcaptcha/vars.yml. Most parameters have defaults, and the required parameters are annotated.

    +
  4. +
  5. +

    Run playbook:

    +
  6. +
+
1	ansible-playbook -i path/to/inventory-file -f 10 ./ansible/mcaptcha.yml
+

Update

+
    +
  1. Pull changes from Git repository
  2. +
  3. Rerun playbook
  4. +
+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/self-hosting/bare-metal/index.html b/docs/self-hosting/bare-metal/index.html index 19422df..da71ec5 100644 --- a/docs/self-hosting/bare-metal/index.html +++ b/docs/self-hosting/bare-metal/index.html @@ -1,46 +1,350 @@ -Deploy bare metal - mCaptcha

Deploy bare metal

Bare metal deployment is tedious, most of this will be automated with a script in the future.

2. Configure

mcaptcha is highly configurable.

Configuration is applied/merged in the following order:

  1. path to configuration file passed in via MCAPTCHA_CONFIG
  2. ./config/default.toml
  3. /etc/mcaptcha/config.toml
  4. environment variables.

1. Install postgres if you don’t have it already.

For Debian based distributions:

1sudo apt install postgres
-

2. Create new user for running mcaptcha

1$ sudo useradd -b /srv -m -s /usr/bin/zsh mcaptcha
-

3. Create new user in Postgres

1$ sudo -iu postgres # switch to `postgres` user
-2$ psql
-3postgres=#  CREATE USER mcaptcha WITH PASSWORD 'my super long password and yes you need single quote`;
-4$  createdb -O mcaptcha mcaptcha # create db 'mcaptcha' with 'mcaptcha' as owner
-

4. Install and load mCaptcha/cache module:

See mCaptcha/cache for more -details.

4. Build mcaptcha

To build mcaptcha, you need the following dependencies:

  1. rust
  2. node(v14.16.0)
  3. yarn(JavaScript package manager)
  4. make

How to build

  1. Install Cargo using rustup with:
1$ curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
-
  1. Install node(v14.16.0)

  2. Install yarn(JavaScript package manager)

  3. Build with make:

1$ make dev-env && \
-2	make release
-

5. Install package:

1$ sudo cp ./target/release/mcaptcha /usr/bin/ && \
-2	mkdir sudo /etc/mcaptcha && \
-3	sudo cp config/default.toml /etc/mcaptcha/config.toml
-

6. Systemd service configuration:

  1. Copy the following to /etc/systemd/system/mcaptcha.service:
 1[Unit]
- 2Description=mCaptcha: a CAPTCHA system that gives attackers a run for their money
- 3
- 4[Service]
- 5Type=simple
- 6User=mcaptcha
- 7ExecStart=/usr/bin/mcaptcha
- 8Restart=on-failure
- 9RestartSec=1
-10SuccessExitStatus=3 4
-11RestartForceExitStatus=3 4
-12SystemCallArchitectures=native
-13MemoryDenyWriteExecute=true
-14NoNewPrivileges=true
-15Environment="RUST_LOG=info"
-16
-17[Unit]
-18After=sound.target
-19Wants=network-online.target
-20Wants=network-online.target
-21Requires=postgresql.service
-22After=syslog.target
-23
-24[Install]
-25WantedBy=multi-user.target
-
  1. Enable service:
1$ sudo systemctl daemon-reload && \
-2	sudo systemctl enable mcaptcha && \ # Auto startup during boot
-3	sudo systemctl start mcaptcha
-4``
-

Edit this page on git.batsense.net

\ No newline at end of file + + + + + + + + + + + + + + Deploy bare metal - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+ + +
+ +

Deploy bare metal

+

Bare metal deployment is tedious, most of this will be automated with a script in the future.

+

1. Install Database

+

The following databases are supported:

+
    +
  1. Postgres
  2. +
  3. MariaDB
  4. +
+

Please install the database of your choice. Then:

+
    +
  1. Create new database user for mCaptcha
  2. +
  3. Create new database for mCaptcha
  4. +
+

mCaptcha binary has migrations baked-in and is applied on start up. The +choice of database is described using the scheme of the database URL. For +instance:

+
    +
  1. Postgres: postgres://mcaptcha:password@localhost:5432/mcaptcha
  2. +
  3. Mariadb: mysql://mcaptcha:password@localhost:3306/mcaptcha
  4. +
+

2. Optionally, install mCaptcha/cache

+

We recommend this for larger instances. For single-user instances or for +instances that protect personal websites, we recommend using the +internal cache system. To do so, please comment out the +redis section of the configuration file.

+

Please see mCaptcha/cache for more details.

+

3. Install mCaptcha

+

3.1 Install from source

+

To build mcaptcha, you need the following dependencies:

+
    +
  1. rust
  2. +
  3. node(v20)
  4. +
  5. yarn(JavaScript package manager)
  6. +
  7. make
  8. +
+

With all dependencies installed, run:

+
make dev-env && make release
+

And the following commands to install the compiled binary:

+
sudo cp ./target/release/mcaptcha /usr/bin/ && \
+	mkdir sudo /etc/mcaptcha && \
+	sudo cp config/default.toml /etc/mcaptcha/config.toml
+

3.2 Install pre-compiled binary

+

i. Download assets

+
wget https://dl.mcaptcha.org/mcaptcha/mCaptcha/master/mcaptcha-master-linux-amd64.tar.gz.asc
+wget https://dl.mcaptcha.org/mcaptcha/mCaptcha/master/mcaptcha-master-linux-amd64.tar.gz.sha256
+wget https://dl.mcaptcha.org/mcaptcha/mCaptcha/master/mcaptcha-master-linux-amd64.tar.gz
+

ii Verify checksum

+
sha256sum -c mcaptcha-master-linux-amd64.tar.gz.sha256
+

iii Verify GPG signature

+

All mcaptcha binaries are signed with our GPG +key. +Please verify signatures to verify authenticity.

+
gpg --keyserver keyserver.ubuntu.com --recv 73DAC973A9ADBB9ADCB5CDC4595A08135BA9FF73
+gpg --verify mcaptcha-master-linux-amd64.tar.gz.asc
+

iv. Install

+
tar -xvzf mcaptcha-master-linux-amd64.tar.gz \
+  && sudo cp mcaptcha-master-linux-amd64/mcaptcha /usr/local/bin \
+  && sudo mkdir /etc/mcaptcha \
+  && sudo cp mcaptcha-master-linux-amd64/config.toml /etc/mcaptcha/
+

4. Configuration

+

mCaptcha is highly configurable.

+

Configuration is applied/merged in the following order:

+
    +
  1. path to configuration file passed in via MCAPTCHA_CONFIG
  2. +
  3. ./config/default.toml
  4. +
  5. /etc/mcaptcha/config.toml
  6. +
  7. environment variables. Please see +here for a full list of environment variables.
  8. +
+

5. Systemd service configuration:

+
    +
  1. Copy the following to /etc/systemd/system/mcaptcha.service:
  2. +
+
[Unit]
+Description=mCaptcha: a CAPTCHA system that gives attackers a run for their money
+
+[Service]
+Type=simple
+User=mcaptcha
+ExecStart=/usr/bin/mcaptcha
+Restart=on-failure
+RestartSec=1
+SuccessExitStatus=3 4
+RestartForceExitStatus=3 4
+SystemCallArchitectures=native
+MemoryDenyWriteExecute=true
+NoNewPrivileges=true
+Environment="RUST_LOG=info"
+
+[Unit]
+After=sound.target
+Wants=network-online.target
+Wants=network-online.target
+Requires=postgresql.service
+After=syslog.target
+
+[Install]
+WantedBy=multi-user.target
+
    +
  1. Enable service:
  2. +
+
sudo systemctl daemon-reload && \
+	sudo systemctl enable mcaptcha && \ # Auto startup during boot
+	sudo systemctl start mcaptcha
+

6. Install and configure Nginx

+

mCaptcha doesn’t implement SSL yet. Please use a reverse proxy like +Nginx to add SSL to your deployment. Here’s an example virtual host +configuration for Nginx:

+
server {
+  server_name <your mcaptcha hostname>;
+	listen 80;
+	listen [::]:80;
+
+	location / {
+		proxy_pass http://127.0.0.1:<mcaptcha_port>;
+		proxy_set_header Host $host;
+    proxy_set_header Host $host;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "upgrade";
+    proxy_set_header X-Forwarded-For $remote_addr;
+    proxy_set_header X-Forwarded-Proto $scheme;
+	}
+
+}
+
+

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/self-hosting/dependencies/index.html b/docs/self-hosting/dependencies/index.html deleted file mode 100644 index 87c52bc..0000000 --- a/docs/self-hosting/dependencies/index.html +++ /dev/null @@ -1,30 +0,0 @@ -Database and cache - mCaptcha

Database and cache

mCaptcha server requires dependencies like a Postgres database and a Redis cache

Notes

Database

  • Database migrations are baked into the server binary so don’t worry -about them.

  • When compiling from source, unset database configuration(comment out -database configuration/ unset relevant environment variables). -mCaptcha uses sqlx database client -library which checks SQL queries at compile time. So if you are starting -with a fresh database without migrations applied, compilation will fail.

Redis

  • Redis is an optional dependency. Currently, the non-Redis configuration -doesn’t persist CAPTCHA heat. So if there’s a systems failure, CAPTCHA -heat will be reset and visitor count will start from 0. For small -installations, this should post a problem as heat is short lived and is -reset anyways at cool down period.

  • mCaptcha uses a custom Redis module called -cache to overcome some of Redis' -limitations.

Instructions

Once again, there are two ways to go about this:

  1. Docker
  2. Bare metal

Docker

Database

Download and run Postgres

1docker create --name mcaptcha-postgres \
-2  -e POSTGRES_PASSWORD=<database-password> \
-3  -p 5432:5432 \
-4  postgres && docker start mcaptcha-postgres
-

Redis

1docker create --name mcaptcha-cache \
-2  -p 6379:6379 \
-3  mcaptcha/cache && docker start mcaptcha-cache
-

See mCaptcha/cache for more -details.

1. Install Postgres if you don’t have it already.

For Debian based distributions:

1sudo apt install postgres
-

2. Create new user for running mCaptcha

1$ sudo useradd -b /srv -m -s /usr/bin/bash mcaptcha
-

3. Create new user in Postgres

1$ sudo -iu postgres # switch to `postgres` user
-2$ psql
-3postgres=#  CREATE USER mcaptcha WITH PASSWORD 'my super long password and yes you need single quote';
-4$  createdb -O mcaptcha mcaptcha # create db 'mcaptcha' with 'mcaptcha' as owner
-

4. Install mCaptcha/cache

See mCaptcha/cache for more -details.

Edit this page on git.batsense.net

\ No newline at end of file diff --git a/docs/self-hosting/docker/index.html b/docs/self-hosting/docker/index.html index 02e93ec..e9d7fd4 100644 --- a/docs/self-hosting/docker/index.html +++ b/docs/self-hosting/docker/index.html @@ -1,15 +1,264 @@ -Using Docker - mCaptcha

Using Docker

With Docker

1. Configure

mcaptcha is highly configurable.

Configuration is applied/merged in the following order:

  1. path to configuration file passed in via MCAPTCHA_CONFIG
  2. ./config/default.toml
  3. /etc/mcaptcha/config.toml
  4. environment variables.

See -CONFIGURATION.md -for configurable options.

2. Run image

If you have already have a Postgres instance running, then:

1docker run -p <host-machine-port>:<port-in-configuration-file> \
-2	--add-host=database:<database-ip-addrss> \
-3	-e RUST_LOG=debug \
-4	-e DATABASE_URL="postgres://<db-user>:<db-password>@database:<db-port>/<db-name>" \
-5	mcaptcha/mcaptcha:latest
-

If you don’t have a Postgres instance running, you can either install -one using a package manager or launch one with docker. A docker-compose -configuration is available that will launch both -a database instance mcaptcha instance.

With docker-compose

  1. Follow steps above to build docker image.

  2. Set database password docker-compose configuration.

  3. Launch network

1docker-compose up -d
-

Edit this page on git.batsense.net

\ No newline at end of file + + + + + + + + + + + + + + Using Docker - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+ + +
+ +

Using Docker

+

+

With Docker

+

1. Configure

+

mcaptcha is highly configurable.

+

Configuration is applied/merged in the following order:

+
    +
  1. path to configuration file passed in via MCAPTCHA_CONFIG
  2. +
  3. ./config/default.toml
  4. +
  5. /etc/mcaptcha/config.toml
  6. +
  7. environment variables.
  8. +
+

See +CONFIGURATION.md +for configurable options.

+

2. Run image

+

If you have already have a Postgres instance running, then:

+
docker run -p <host-machine-port>:<port-in-configuration-file> \
+	--add-host=database:<database-ip-addrss> \
+	-e RUST_LOG=debug \
+	-e DATABASE_URL="postgres://<db-user>:<db-password>@database:<db-port>/<db-name>" \
+	mcaptcha/mcaptcha:latest
+

If you don’t have a Postgres instance running, you can either install +one using a package manager or launch one with docker.

+

With docker-compose

+
    +
  1. Download docker-compose file and the configuration file:
  2. +
+
wget https://raw.githubusercontent.com/mCaptcha/mCaptcha/master/.env.docker-compose
+wget https://raw.githubusercontent.com/mCaptcha/mCaptcha/master/docker-compose.yml
+
    +
  1. +

    Configure deployment using .env.docker-compose environment variable +file

    +
  2. +
  3. +

    Launch containers:

    +
  4. +
+
docker-compose up -d
+
    +
  1. Configure SSL using reverse proxy: mCaptcha doesn’t support SSL at +the moment, so please use a reverse proxy to secure your instance. A +reference nginx virtual host configuration file is available here.
  2. +
+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/self-hosting/getting-started/index.html b/docs/self-hosting/getting-started/index.html index 3e783e9..f4c8246 100644 --- a/docs/self-hosting/getting-started/index.html +++ b/docs/self-hosting/getting-started/index.html @@ -1,4 +1,222 @@ -Getting started - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + Getting started - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+ + +
+ +

Getting started

+

Get started with self-hosting mCaptcha

+

Get started

+

There are two main ways to self-host mCaptcha:

+
    +
  1. Bare metal
  2. +
  3. With Docker
  4. +
  5. With Ansible
  6. +
+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/self-hosting/index.html b/docs/self-hosting/index.html index e36d95c..2dbe307 100644 --- a/docs/self-hosting/index.html +++ b/docs/self-hosting/index.html @@ -1,4 +1,208 @@ -Self-Hosting - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + Self-Hosting - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+ +
+
+ +
+
+ + + + + + + + + diff --git a/docs/self-hosting/index.xml b/docs/self-hosting/index.xml index 4f12dfb..c8ca6c3 100644 --- a/docs/self-hosting/index.xml +++ b/docs/self-hosting/index.xml @@ -1,14 +1,39 @@ -Self-Hosting on/docs/self-hosting/Recent content in Self-Hosting onHugo -- gohugo.ioen-USGetting started/docs/self-hosting/getting-started/Mon, 01 Jan 0001 00:00:00 +0000/docs/self-hosting/getting-started/Get started There are two main ways to self-host mCaptcha: -Bare metal With Docker With AnsibleDeploy bare metal/docs/self-hosting/bare-metal/Mon, 01 Jan 0001 00:00:00 +0000/docs/self-hosting/bare-metal/2. Configure mcaptcha is highly configurable. -Configuration is applied/merged in the following order: -path to configuration file passed in via MCAPTCHA_CONFIG ./config/default.toml /etc/mcaptcha/config.toml environment variables. 1. Install postgres if you don&rsquo;t have it already. For Debian based distributions: -1sudo apt install postgres 2. Create new user for running mcaptcha 1$ sudo useradd -b /srv -m -s /usr/bin/zsh mcaptcha 3. Create new user in Postgres 1$ sudo -iu postgres # switch to `postgres` user 2$ psql 3postgres=# CREATE USER mcaptcha WITH PASSWORD &#39;my super long password and yes you need single quote`; 4$ createdb -O mcaptcha mcaptcha # create db &#39;mcaptcha&#39; with &#39;mcaptcha&#39; as owner 4.Using Ansible/docs/self-hosting/ansible/Mon, 01 Jan 0001 00:00:00 +0000/docs/self-hosting/ansible/Ansible playbooks to install mCaptcha are available here. -Instructions Installation Clone the repository: 1git clone https://git.batsense.net/mCaptcha/iac &amp;&amp; cd iac Create inventory file. You should have SSH access to the remote machine, and the user must have sudo privileges. Example inventory file: -1[mcaptcha_hosts] 2&#34;mcaptcha_hosts&#34; 3&lt;node name&gt; ansible_host=&lt;node IP&gt; ansible_user=&lt;remote username&gt; It is important that the group name be mcaptcha_hosts. -Configure installation by editing ansible/vars/mcaptcha/vars.yml. Most parameters have defaults, and the required parameters are annotated.Using Docker/docs/self-hosting/docker/Mon, 01 Jan 0001 00:00:00 +0000/docs/self-hosting/docker/With Docker 1. Configure mcaptcha is highly configurable. -Configuration is applied/merged in the following order: -path to configuration file passed in via MCAPTCHA_CONFIG ./config/default.toml /etc/mcaptcha/config.toml environment variables. See CONFIGURATION.md for configurable options. -2. Run image If you have already have a Postgres instance running, then: -1docker run -p &lt;host-machine-port&gt;:&lt;port-in-configuration-file&gt; \ 2 --add-host=database:&lt;database-ip-addrss&gt; \ 3 -e RUST_LOG=debug \ 4 -e DATABASE_URL=&#34;postgres://&lt;db-user&gt;:&lt;db-password&gt;@database:&lt;db-port&gt;/&lt;db-name&gt;&#34; \ 5 mcaptcha/mcaptcha:latest If you don&rsquo;t have a Postgres instance running, you can either install one using a package manager or launch one with docker.Database and cache/docs/self-hosting/dependencies/Mon, 01 Jan 0001 00:00:00 +0000/docs/self-hosting/dependencies/Notes Database Database migrations are baked into the server binary so don&rsquo;t worry about them. -When compiling from source, unset database configuration(comment out database configuration/ unset relevant environment variables). mCaptcha uses sqlx database client library which checks SQL queries at compile time. So if you are starting with a fresh database without migrations applied, compilation will fail. -Redis Redis is an optional dependency. \ No newline at end of file + + + + Self-Hosting on + /docs/self-hosting/ + Recent content in Self-Hosting on + Hugo -- gohugo.io + en-US + + + Getting started + /docs/self-hosting/getting-started/ + Mon, 01 Jan 0001 00:00:00 +0000 + /docs/self-hosting/getting-started/ + Get started There are two main ways to self-host mCaptcha: Bare metal With Docker With Ansible + + + Deploy bare metal + /docs/self-hosting/bare-metal/ + Mon, 01 Jan 0001 00:00:00 +0000 + /docs/self-hosting/bare-metal/ + 1. Install Database The following databases are supported: Postgres MariaDB Please install the database of your choice. Then: Create new database user for mCaptcha Create new database for mCaptcha mCaptcha binary has migrations baked-in and is applied on start up. The choice of database is described using the scheme of the database URL. For instance: Postgres: postgres://mcaptcha:password@localhost:5432/mcaptcha Mariadb: mysql://mcaptcha:password@localhost:3306/mcaptcha 2. Optionally, install mCaptcha/cache We recommend this for larger instances. For single-user instances or for instances that protect personal websites, we recommend using the internal cache system. + + + Using Ansible + /docs/self-hosting/ansible/ + Mon, 01 Jan 0001 00:00:00 +0000 + /docs/self-hosting/ansible/ + Ansible playbooks to install mCaptcha are available here. Instructions Installation Clone the repository: 1git clone https://git.batsense.net/mCaptcha/iac &amp;&amp; cd iac Create inventory file. You should have SSH access to the remote machine, and the user must have sudo privileges. Example inventory file: 1[mcaptcha_hosts] 2&#34;mcaptcha_hosts&#34; 3&lt;node name&gt; ansible_host=&lt;node IP&gt; ansible_user=&lt;remote username&gt; It is important that the group name be mcaptcha_hosts. Configure installation by editing ansible/vars/mcaptcha/vars.yml. Most parameters have defaults, and the required parameters are annotated. + + + Using Docker + /docs/self-hosting/docker/ + Mon, 01 Jan 0001 00:00:00 +0000 + /docs/self-hosting/docker/ + With Docker 1. Configure mcaptcha is highly configurable. Configuration is applied/merged in the following order: path to configuration file passed in via MCAPTCHA_CONFIG ./config/default.toml /etc/mcaptcha/config.toml environment variables. See CONFIGURATION.md for configurable options. 2. Run image If you have already have a Postgres instance running, then: docker run -p &lt;host-machine-port&gt;:&lt;port-in-configuration-file&gt; \ --add-host=database:&lt;database-ip-addrss&gt; \ -e RUST_LOG=debug \ -e DATABASE_URL=&#34;postgres://&lt;db-user&gt;:&lt;db-password&gt;@database:&lt;db-port&gt;/&lt;db-name&gt;&#34; \ mcaptcha/mcaptcha:latest If you don&rsquo;t have a Postgres instance running, you can either install one using a package manager or launch one with docker. + + + diff --git a/docs/self-hosting/sitemap.xml b/docs/self-hosting/sitemap.xml index dea9e17..1f669d6 100644 --- a/docs/self-hosting/sitemap.xml +++ b/docs/self-hosting/sitemap.xml @@ -1 +1,31 @@ -/docs/self-hosting/getting-started/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/bare-metal/2023-10-27T21:39:40+05:30weekly0.5/docs/self-hosting/ansible/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/docker/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/dependencies/2023-12-09T03:43:25+05:30weekly0.5 \ No newline at end of file + + + + /docs/self-hosting/getting-started/ + 2023-12-09T03:43:25+05:30 + weekly + 0.5 + + + + /docs/self-hosting/bare-metal/ + 2024-01-08T00:31:40+05:30 + weekly + 0.5 + + + + /docs/self-hosting/ansible/ + 2023-12-09T03:43:25+05:30 + weekly + 0.5 + + + + /docs/self-hosting/docker/ + 2024-01-08T00:32:17+05:30 + weekly + 0.5 + + \ No newline at end of file diff --git a/docs/sitemap.xml b/docs/sitemap.xml index 517ee30..06beebe 100644 --- a/docs/sitemap.xml +++ b/docs/sitemap.xml @@ -1 +1,128 @@ -/docs/user-manual/2023-10-28T01:09:37+05:30weekly0.5/docs/help/2021-07-21T15:49:53+05:30weekly0.5/docs/webmasters/2023-10-27T21:39:40+05:30weekly0.5/docs/api/2022-08-01T22:24:03+05:30weekly0.5/docs/self-hosting/2023-10-27T21:39:40+05:30weekly0.5/docs/user-manual/cli/2023-10-28T01:09:37+05:30weekly0.5/docs/user-manual/how-to-mcaptcha-without-js/2023-10-28T03:16:49+05:30weekly0.5/docs/help/troubleshooting/2022-08-01T22:24:30+05:30weekly0.5/docs/help/faq/2022-08-01T19:16:21+05:30weekly0.5/docs/webmasters/installing-captcha/2023-11-05T02:15:26+05:30weekly0.5/docs/webmasters/configuring-difficulty-factor/2023-10-27T21:39:40+05:30weekly0.5/docs/webmasters/terminology/2023-10-27T21:39:40+05:30weekly0.5/docs/webmasters/faq/2023-10-27T21:39:40+05:30weekly0.5/docs/api/browser/2022-08-01T20:24:18+05:30weekly0.5/docs/api/mcaptcha-system/2022-08-01T20:24:18+05:30weekly0.5/docs/api/pow-sha256/2022-08-01T20:24:18+05:30weekly0.5/docs/self-hosting/getting-started/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/bare-metal/2023-10-27T21:39:40+05:30weekly0.5/docs/self-hosting/ansible/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/docker/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/dependencies/2023-12-09T03:43:25+05:30weekly0.5 \ No newline at end of file + + + + /docs/user-manual/ + 2023-10-28T01:09:37+05:30 + weekly + 0.5 + + + + /docs/help/ + 2021-07-21T15:49:53+05:30 + weekly + 0.5 + + + + /docs/webmasters/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + + /docs/api/ + 2022-08-01T22:24:03+05:30 + weekly + 0.5 + + + + /docs/self-hosting/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + /docs/user-manual/cli/ + 2023-10-28T01:09:37+05:30 + weekly + 0.5 + + + /docs/user-manual/how-to-mcaptcha-without-js/ + 2023-10-28T03:16:49+05:30 + weekly + 0.5 + + + /docs/help/troubleshooting/ + 2022-08-01T22:24:30+05:30 + weekly + 0.5 + + + /docs/help/faq/ + 2022-08-01T19:16:21+05:30 + weekly + 0.5 + + + /docs/webmasters/installing-captcha/ + 2023-11-05T02:15:26+05:30 + weekly + 0.5 + + + /docs/webmasters/configuring-difficulty-factor/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + /docs/webmasters/terminology/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + /docs/webmasters/faq/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + /docs/api/browser/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + + /docs/api/mcaptcha-system/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + + /docs/api/pow-sha256/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + + /docs/self-hosting/getting-started/ + 2023-12-09T03:43:25+05:30 + weekly + 0.5 + + + /docs/self-hosting/bare-metal/ + 2024-01-08T00:31:40+05:30 + weekly + 0.5 + + + /docs/self-hosting/ansible/ + 2023-12-09T03:43:25+05:30 + weekly + 0.5 + + + /docs/self-hosting/docker/ + 2024-01-08T00:32:17+05:30 + weekly + 0.5 + + \ No newline at end of file diff --git a/docs/user-manual/cli/index.html b/docs/user-manual/cli/index.html index 42d442c..81e0841 100644 --- a/docs/user-manual/cli/index.html +++ b/docs/user-manual/cli/index.html @@ -1,53 +1,321 @@ -CLI tool - mCaptcha

CLI tool

A CLI tool exists to compute mCaptcha challenges. It can be installed -from multiple sources:

Install

crates.io

The CLI tool is available on, crates.io, the Rust + + + + + + + + + + + + + + CLI tool - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ + +
+ +

CLI tool

+

+

A CLI tool exists to compute mCaptcha challenges. It can be installed +from multiple sources:

+

Install

+

crates.io

+

The CLI tool is available on, crates.io, the Rust language’s package registry. Rust language toolchain is required to -install from crates.io, please see rustup.rs for -Instructions to install it.

1cargo install mcaptcha-cli
-

Pre-compiled binaries

Nightly builds and stable releases are regularly published to -dl.mcaptcha.org for a variety of -CPU architectures and operating systems.

  1. Download binary, checksum and GPG signature files
1wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz
-2wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz.asc
-3wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz.sha256
-
  1. Verify checksum
1sha256sum -c {FILENAME}.tar.gz.sha256
-
  1. Download mCaptcha’s GPG release keys and verify GPG signature
1gpg --keyserver keyserver.ubuntu.com --recv 73DAC973A9ADBB9ADCB5CDC4595A08135BA9FF73
-2gpg --verify {FILENAME}.tar.gz.asc
-
  1. Install Binary
1tar -xvzf {FILENAME}.tar.gz && sudo cp {FILENAME}/mcaptcha-cli /usr/local/bin
-

Build from source

  1. Install Rust tool chain -Please see here for instructions.
  2. Download source code
1git clone https://git.batsense.net/mCaptcha/cli
-
  1. Compile and install
1cargo build --release && sudp cp ./target/release/mcaptcha-cli
-2/usr/local/bin
-

Pass mCaptcha challenge

The CLI tool requires details about the challenge to work on it. The -tool can be used in three different modes compute challenge:

  1. Protected Page: Compute mCaptcha challenge for the CAPTCHA at a -protected page
  2. Widget URL: Compute PoW for captcha at widget URL
  3. (Developer mode) Offline: Computes PoW over given CAPTCHA parameters

From protected page URL

The most convenient mode: copy the URL of the webpage which has the +install from crates.io, please see rustup.rs for +Instructions to install it.

+
1cargo install mcaptcha-cli
+

Pre-compiled binaries

+

Nightly builds and stable releases are regularly published to +dl.mcaptcha.org for a variety of +CPU architectures and operating systems.

+
    +
  1. Download binary, checksum and GPG signature files
  2. +
+
1wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz
+2wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz.asc
+3wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz.sha256
+
    +
  1. Verify checksum
  2. +
+
1sha256sum -c {FILENAME}.tar.gz.sha256
+
    +
  1. Download mCaptcha’s GPG release keys and verify GPG signature
  2. +
+
1gpg --keyserver keyserver.ubuntu.com --recv 73DAC973A9ADBB9ADCB5CDC4595A08135BA9FF73
+2gpg --verify {FILENAME}.tar.gz.asc
+
    +
  1. Install Binary
  2. +
+
1tar -xvzf {FILENAME}.tar.gz && sudo cp {FILENAME}/mcaptcha-cli /usr/local/bin
+

Build from source

+
    +
  1. Install Rust tool chain +Please see here for instructions.
  2. +
  3. Download source code
  4. +
+
1git clone https://git.batsense.net/mCaptcha/cli
+
    +
  1. Compile and install
  2. +
+
1cargo build --release && sudp cp ./target/release/mcaptcha-cli
+2/usr/local/bin
+

Pass mCaptcha challenge

+

The CLI tool requires details about the challenge to work on it. The +tool can be used in three different modes compute challenge:

+
    +
  1. Protected Page: Compute mCaptcha challenge for the CAPTCHA at a +protected page
  2. +
  3. Widget URL: Compute PoW for captcha at widget URL
  4. +
  5. (Developer mode) Offline: Computes PoW over given CAPTCHA parameters
  6. +
+

From protected page URL

+

The most convenient mode: copy the URL of the webpage which has the mCaptcha widget (example: showcase.mcaptcha.org) and run the CLI tool with it to get an authorization code: -Compute challenge using the URL

103:39 atm@lab cli ±|feat-parse-webpage ✗|→ mcaptcha-cli protected-page https://showcase.mcaptcha.org/
-2Authorization token: eRAZJiMrW58uDYA1s64Tmwq1u30HutuF
-

Widget URL

If you have the widget URL (will be in format https://mcaptcha.example.org/widget?sitekey=randomstring), it can be used to solve challenge as well:

1Compute PoW by fetching parameters from  CAPTCHA URL
-2
-3Usage: mcaptcha-cli online --url <URL>
-4
-5Options:
-6  -u, --url <URL>  URL of the CAPTCHA. Example:  https://example.org/widget?sitekey=foo
-7  -h, --help       Print help
-

Example usage:

113:32 atm@lab cli ±|online ✗|→ mcaptcha-cli online -u https://demo.mcaptcha.org/widget?sitekey=pHy0AktWyOKuxZDzFfoaewncWecCHo23
-2Authorization token: 3xleN26OctBuVu3X4t6CYyUjErhaxQvz
-

[Developer mode] Offline

Useful while debugging mCaptcha configurations, works on raw challenge -parameters.

Help menu:

1Compute PoW with offline parameters
-2
-3Usage: mcaptcha-cli offline --salt <SALT> --phrase <PHRASE> --difficulty-factor <DIFFICULTY_FACTOR>
-4
-5Options:
-6  -s, --salt <SALT>                            Salt with which PoW should be computed
-7  -p, --phrase <PHRASE>                        Phrase over which PoW should be computed
-8  -d, --difficulty-factor <DIFFICULTY_FACTOR>  Difficulty Factor
-9  -h, --help                                   Print help
-

Example usage:

113:28 atm@lab cli ±|online|→ mcaptcha-cli offline -s $(rand 32) -p $(rand 32) -d 50000
-2difficulty: 50000
-3nonce: 90507
-4original phrase: f351f333d44b2c6b5bf7f033b065bbb8fb5e9dd153bd402e43ed04425f5a3859
-5result: 340276562956196291522979356090220150471
-

Where rand is this script.

Edit this page on git.batsense.net

\ No newline at end of file +Compute challenge using the URL

+
103:39 atm@lab cli ±|feat-parse-webpage ✗|→ mcaptcha-cli protected-page https://showcase.mcaptcha.org/
+2Authorization token: eRAZJiMrW58uDYA1s64Tmwq1u30HutuF
+

Widget URL

+

If you have the widget URL (will be in format https://mcaptcha.example.org/widget?sitekey=randomstring), it can be used to solve challenge as well:

+
1Compute PoW by fetching parameters from  CAPTCHA URL
+2
+3Usage: mcaptcha-cli online --url <URL>
+4
+5Options:
+6  -u, --url <URL>  URL of the CAPTCHA. Example:  https://example.org/widget?sitekey=foo
+7  -h, --help       Print help
+

Example usage:

+
113:32 atm@lab cli ±|online ✗|→ mcaptcha-cli online -u https://demo.mcaptcha.org/widget?sitekey=pHy0AktWyOKuxZDzFfoaewncWecCHo23
+2Authorization token: 3xleN26OctBuVu3X4t6CYyUjErhaxQvz
+

[Developer mode] Offline

+

Useful while debugging mCaptcha configurations, works on raw challenge +parameters.

+

Help menu:

+
1Compute PoW with offline parameters
+2
+3Usage: mcaptcha-cli offline --salt <SALT> --phrase <PHRASE> --difficulty-factor <DIFFICULTY_FACTOR>
+4
+5Options:
+6  -s, --salt <SALT>                            Salt with which PoW should be computed
+7  -p, --phrase <PHRASE>                        Phrase over which PoW should be computed
+8  -d, --difficulty-factor <DIFFICULTY_FACTOR>  Difficulty Factor
+9  -h, --help                                   Print help
+

Example usage:

+
113:28 atm@lab cli ±|online|→ mcaptcha-cli offline -s $(rand 32) -p $(rand 32) -d 50000
+2difficulty: 50000
+3nonce: 90507
+4original phrase: f351f333d44b2c6b5bf7f033b065bbb8fb5e9dd153bd402e43ed04425f5a3859
+5result: 340276562956196291522979356090220150471
+

Where rand is this script.

+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/user-manual/how-to-mcaptcha-without-js/index.html b/docs/user-manual/how-to-mcaptcha-without-js/index.html index 5b97d34..b08a914 100644 --- a/docs/user-manual/how-to-mcaptcha-without-js/index.html +++ b/docs/user-manual/how-to-mcaptcha-without-js/index.html @@ -1,5 +1,222 @@ -Use mCaptcha without JavaScript - mCaptcha

Use mCaptcha without JavaScript

To use mCaptcha without JavaScript:

  1. Install mCaptcha CLI too. Please see here for instructions.
  2. Copy the URL of the protected page
  3. Run mCaptcha CLI with that URL:
1mcapthca-cli protected-page <URL>
-
  1. Copy authorization code and paste it in the form

Edit this page on git.batsense.net

\ No newline at end of file + + + + + + + + + + + + + + Use mCaptcha without JavaScript - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+ + +
+ +

Use mCaptcha without JavaScript

+

+

To use mCaptcha without JavaScript:

+
    +
  1. Install mCaptcha CLI too. Please see here for instructions.
  2. +
  3. Copy the URL of the protected page
  4. +
  5. Run mCaptcha CLI with that URL:
  6. +
+
1mcapthca-cli protected-page <URL>
+
    +
  1. Copy authorization code and paste it in the form
  2. +
+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/user-manual/index.html b/docs/user-manual/index.html index 5c86fb9..705efc2 100644 --- a/docs/user-manual/index.html +++ b/docs/user-manual/index.html @@ -1,4 +1,197 @@ -User Manual - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + User Manual - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+ +
+
+ +
+
+ + + + + + + + + diff --git a/docs/user-manual/index.xml b/docs/user-manual/index.xml index aed0f37..d6242bb 100644 --- a/docs/user-manual/index.xml +++ b/docs/user-manual/index.xml @@ -1,4 +1,26 @@ -User Manual on/docs/user-manual/Recent content in User Manual onHugo -- gohugo.ioen-USFri, 27 Oct 2023 08:48:45 +0000CLI tool/docs/user-manual/cli/Fri, 27 Oct 2023 08:48:45 +0000/docs/user-manual/cli/A CLI tool exists to compute mCaptcha challenges. It can be installed from multiple sources: -Install crates.io The CLI tool is available on, crates.io, the Rust language&rsquo;s package registry. Rust language toolchain is required to install from crates.io, please see rustup.rs for Instructions to install it. -1cargo install mcaptcha-cli Pre-compiled binaries Nightly builds and stable releases are regularly published to dl.mcaptcha.org for a variety of CPU architectures and operating systems.Use mCaptcha without JavaScript/docs/user-manual/how-to-mcaptcha-without-js/Fri, 27 Oct 2023 08:48:45 +0000/docs/user-manual/how-to-mcaptcha-without-js/To use mCaptcha without JavaScript: -Install mCaptcha CLI too. Please see here for instructions. Copy the URL of the protected page Run mCaptcha CLI with that URL: 1mcapthca-cli protected-page &lt;URL&gt; Copy authorization code and paste it in the form \ No newline at end of file + + + + User Manual on + /docs/user-manual/ + Recent content in User Manual on + Hugo -- gohugo.io + en-US + Fri, 27 Oct 2023 08:48:45 +0000 + + + CLI tool + /docs/user-manual/cli/ + Fri, 27 Oct 2023 08:48:45 +0000 + /docs/user-manual/cli/ + A CLI tool exists to compute mCaptcha challenges. It can be installed from multiple sources: Install crates.io The CLI tool is available on, crates.io, the Rust language&rsquo;s package registry. Rust language toolchain is required to install from crates.io, please see rustup.rs for Instructions to install it. 1cargo install mcaptcha-cli Pre-compiled binaries Nightly builds and stable releases are regularly published to dl.mcaptcha.org for a variety of CPU architectures and operating systems. + + + Use mCaptcha without JavaScript + /docs/user-manual/how-to-mcaptcha-without-js/ + Fri, 27 Oct 2023 08:48:45 +0000 + /docs/user-manual/how-to-mcaptcha-without-js/ + To use mCaptcha without JavaScript: Install mCaptcha CLI too. Please see here for instructions. Copy the URL of the protected page Run mCaptcha CLI with that URL: 1mcapthca-cli protected-page &lt;URL&gt; Copy authorization code and paste it in the form + + + diff --git a/docs/user-manual/sitemap.xml b/docs/user-manual/sitemap.xml index 4b3c101..606fc3e 100644 --- a/docs/user-manual/sitemap.xml +++ b/docs/user-manual/sitemap.xml @@ -1 +1,17 @@ -/docs/user-manual/cli/2023-10-28T01:09:37+05:30weekly0.5/docs/user-manual/how-to-mcaptcha-without-js/2023-10-28T03:16:49+05:30weekly0.5 \ No newline at end of file + + + + /docs/user-manual/cli/ + 2023-10-28T01:09:37+05:30 + weekly + 0.5 + + + + /docs/user-manual/how-to-mcaptcha-without-js/ + 2023-10-28T03:16:49+05:30 + weekly + 0.5 + + \ No newline at end of file diff --git a/docs/webmasters/configuring-difficulty-factor/index.html b/docs/webmasters/configuring-difficulty-factor/index.html index 17ea9d7..0218518 100644 --- a/docs/webmasters/configuring-difficulty-factor/index.html +++ b/docs/webmasters/configuring-difficulty-factor/index.html @@ -1,26 +1,261 @@ -Configuring Difficulty Factor - mCaptcha

Configuring Difficulty Factor

mCaptcha is highly responsive to detecting DDoS attacks. Admins are -advised to take advantage of it by setting low difficulty + + + + + + + + + + + + + + Configuring Difficulty Factor - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ + +
+ +

Configuring Difficulty Factor

+

+

mCaptcha is highly responsive to detecting DDoS attacks. Admins are +advised to take advantage of it by setting low difficulty factors for normal traffic levels -for their website.

Lowest advisable difficulty factor is 5000.

For instance, if it is normal for my website to get 2000 requests for -every 30 seconds, I will set a cool +for their website.

+

Lowest advisable difficulty factor is 5000.

+

For instance, if it is normal for my website to get 2000 requests for +every 30 seconds, I will set a cool down period of 30 seconds and the -first level of difficulty configuration will have a visitor threshold of 2000 with a -difficulty factor of 5000.

There are two modes to setting difficulty factor for your website on -mCaptcha:

Easy option

Easy mode asks a few basic statistics about your website and generates a +first level of difficulty configuration will have a visitor threshold of 2000 with a +difficulty factor of 5000.

+

There are two modes to setting difficulty factor for your website on +mCaptcha:

+

Easy option

+

Easy mode asks a few basic statistics about your website and generates a configuration that should work for your website. Currently, easy mode is guided by assumptions on suitable difficulty factors to protect a -website but it will be fine-tuned as mCaptcha sees more deployment.

Configuration generated by easy mode can be tweaked later using the -advance mode, as you become more familiar with how mCaptcha works.

new sitekey form in easy mode

Advance option

Advance mode gives the admin granular control over how mCaptcha behaves +website but it will be fine-tuned as mCaptcha sees more deployment.

+

Configuration generated by easy mode can be tweaked later using the +advance mode, as you become more familiar with how mCaptcha works.

+
+ new sitekey form in easy mode + +
+

Advance option

+

Advance mode gives the admin granular control over how mCaptcha behaves on their website. It has options to set the difficulty factor for each level of traffic(or visitor threshold, in mCaptcha speak), fully taking -advantage of mCaptcha’s variable difficulty factor feature.

For instance, if it is normal for a website to get 200 requests over 30 +advantage of mCaptcha’s variable difficulty factor feature.

+

For instance, if it is normal for a website to get 200 requests over 30 seconds, then setting a very low difficulty factor for a visitor threshold of 200 and a cool down period of 30 seconds will allow the users to pass through without waiting on the CAPTCHA. But if 1000 requests over 30 seconds will bring down the service, then the admin can configure increasing levels of difficulty factor of increasing traffic levels, effectively rate limiting its users and protecting the -underlying website.

new sitekey form in advance mode

Edit this page on git.batsense.net

\ No newline at end of file +underlying website.

+
+ new sitekey form in advance mode + +
+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_20x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_20x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_20x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_20x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_500x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_500x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_500x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_500x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_600x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_600x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_600x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_600x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_700x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_700x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_700x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_700x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_800x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_800x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_800x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_800x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_900x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_900x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_900x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-adv-mode_huc4867c6295dc4be195d832a52b37239b_23312_900x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_20x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_20x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_20x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_20x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_500x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_500x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_500x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_500x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_600x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_600x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_600x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_600x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_700x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_700x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_700x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_700x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_800x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_800x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_800x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_800x0_resize_box_3.png diff --git a/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_900x0_resize_box_2.png b/docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_900x0_resize_box_3.png similarity index 100% rename from docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_900x0_resize_box_2.png rename to docs/webmasters/configuring-difficulty-factor/new-sitekey-easy-mode_hu3f66189ea53484ac6603a2d78fa015c8_26636_900x0_resize_box_3.png diff --git a/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_20x0_resize_box_2.png b/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_20x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_20x0_resize_box_2.png rename to docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_20x0_resize_box_3.png diff --git a/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_500x0_resize_box_2.png b/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_500x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_500x0_resize_box_2.png rename to docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_500x0_resize_box_3.png diff --git a/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_600x0_resize_box_2.png b/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_600x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_600x0_resize_box_2.png rename to docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_600x0_resize_box_3.png diff --git a/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_700x0_resize_box_2.png b/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_700x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_700x0_resize_box_2.png rename to docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_700x0_resize_box_3.png diff --git a/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_800x0_resize_box_2.png b/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_800x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_800x0_resize_box_2.png rename to docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_800x0_resize_box_3.png diff --git a/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_900x0_resize_box_2.png b/docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_900x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_900x0_resize_box_2.png rename to docs/webmasters/faq/copy-sitekey_huf38748cca91d238810283a1abb694c9a_63890_900x0_resize_box_3.png diff --git a/docs/webmasters/faq/index.html b/docs/webmasters/faq/index.html index 642ac70..243f24d 100644 --- a/docs/webmasters/faq/index.html +++ b/docs/webmasters/faq/index.html @@ -1,5 +1,234 @@ -Webmasters FAQ - mCaptcha

Webmasters FAQ

Easy Mode: Default cooldown period

When configuring mCaptcha in easy mode, the default cooldown period is set to 30 seconds.

How to get site key from dashboard?

  1. Go to “Site keys” on the side panel in the dashboard
Site key menu option on the dashboard, encircled in red.
  1. click on the clipboard button to copy the site key to your -clipboard.
Copy site key to clipboard. Clipboard button is highlighted in the photo

Edit this page on git.batsense.net

\ No newline at end of file + + + + + + + + + + + + + + Webmasters FAQ - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+ + +
+ +

Webmasters FAQ

+

+

Easy Mode: Default cooldown period

+

When configuring mCaptcha in easy mode, the default cooldown period is set to 30 seconds.

+

How to get site key from dashboard?

+
    +
  1. Go to “Site keys” on the side panel in the dashboard
  2. +
+
+
+ Site key menu option on the dashboard, encircled in red. + +
+
+
    +
  1. click on the clipboard button to copy the site key to your +clipboard.
  2. +
+
+ Copy site key to clipboard. Clipboard button is highlighted in the photo + +
+ +

Edit this page on git.batsense.net

+ + + +
+
+ +
+
+ + + + + + + + + diff --git a/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_20x0_resize_box_2.png b/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_20x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_20x0_resize_box_2.png rename to docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_20x0_resize_box_3.png diff --git a/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_500x0_resize_box_2.png b/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_500x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_500x0_resize_box_2.png rename to docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_500x0_resize_box_3.png diff --git a/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_600x0_resize_box_2.png b/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_600x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_600x0_resize_box_2.png rename to docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_600x0_resize_box_3.png diff --git a/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_700x0_resize_box_2.png b/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_700x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_700x0_resize_box_2.png rename to docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_700x0_resize_box_3.png diff --git a/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_800x0_resize_box_2.png b/docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_800x0_resize_box_3.png similarity index 100% rename from docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_800x0_resize_box_2.png rename to docs/webmasters/faq/sitekey-in-dashboard-sidepanel_hu437e619e92d9fef838a97af482e11285_26958_800x0_resize_box_3.png diff --git a/docs/webmasters/index.html b/docs/webmasters/index.html index 7c22cf9..1430206 100644 --- a/docs/webmasters/index.html +++ b/docs/webmasters/index.html @@ -1,4 +1,209 @@ -Webmasters - mCaptcha
\ No newline at end of file + + + + + + + + + + + + + + Webmasters - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+ +
+
+ +
+
+ +
+
+ + + + + + + + + diff --git a/docs/webmasters/index.xml b/docs/webmasters/index.xml index 5a354d2..7e03025 100644 --- a/docs/webmasters/index.xml +++ b/docs/webmasters/index.xml @@ -1,7 +1,40 @@ -Webmasters on/docs/webmasters/Recent content in Webmasters onHugo -- gohugo.ioen-USTue, 06 Oct 2020 08:48:45 +0000Installing mCaptcha on your website/docs/webmasters/installing-captcha/Wed, 22 Jun 2022 00:00:00 +0000/docs/webmasters/installing-captcha/mCaptcha can protect your website from DDoS attacks. In this guide we&rsquo;ll explore how to install mCaptcha on your website. The end result will be something like this, on your website: -For the purpose of this demo, we will be using demo.mcaptcha.org, a demo instance running in @realaravinth&rsquo;s bedroom(for this same reason, it shouldn&rsquo;t be used for anything serious) -1. Create an account and sign into the mCaptcha dashboard Head over to demo.Configuring Difficulty Factor/docs/webmasters/configuring-difficulty-factor/Wed, 22 Jun 2022 00:00:00 +0000/docs/webmasters/configuring-difficulty-factor/mCaptcha is highly responsive to detecting DDoS attacks. Admins are advised to take advantage of it by setting low difficulty factors for normal traffic levels for their website. -Lowest advisable difficulty factor is 5000. -For instance, if it is normal for my website to get 2000 requests for every 30 seconds, I will set a cool down period of 30 seconds and the first level of difficulty configuration will have a visitor threshold of 2000 with a difficulty factor of 5000.Terminology/docs/webmasters/terminology/Wed, 27 Jul 2022 08:48:45 +0000/docs/webmasters/terminology/Authorization token When a visitor solves the CAPTCHA and sends their solution to an mCaptcha instance, the solution will be verified for correctness. If the solution is correct, mCaptcha will return a single use authorization token. -This authorization token should be attached to the visitor&rsquo;s requited to the protected service and the protected service should validity of the authorization token with the mCaptcha instance and only allow authorization to protected resource if the authorization token is valid.Webmasters FAQ/docs/webmasters/faq/Wed, 27 Jul 2022 08:48:45 +0000/docs/webmasters/faq/Easy Mode: Default cooldown period When configuring mCaptcha in easy mode, the default cooldown period is set to 30 seconds. -How to get site key from dashboard? Go to &ldquo;Site keys&rdquo; on the side panel in the dashboard click on the clipboard button to copy the site key to your clipboard. \ No newline at end of file + + + + Webmasters on + /docs/webmasters/ + Recent content in Webmasters on + Hugo -- gohugo.io + en-US + Tue, 06 Oct 2020 08:48:45 +0000 + + + Installing mCaptcha on your website + /docs/webmasters/installing-captcha/ + Wed, 22 Jun 2022 00:00:00 +0000 + /docs/webmasters/installing-captcha/ + mCaptcha can protect your website from DDoS attacks. In this guide we&rsquo;ll explore how to install mCaptcha on your website. The end result will be something like this, on your website: For the purpose of this demo, we will be using demo.mcaptcha.org, a demo instance running in @realaravinth&rsquo;s bedroom(for this same reason, it shouldn&rsquo;t be used for anything serious) 1. Create an account and sign into the mCaptcha dashboard Head over to demo. + + + Configuring Difficulty Factor + /docs/webmasters/configuring-difficulty-factor/ + Wed, 22 Jun 2022 00:00:00 +0000 + /docs/webmasters/configuring-difficulty-factor/ + mCaptcha is highly responsive to detecting DDoS attacks. Admins are advised to take advantage of it by setting low difficulty factors for normal traffic levels for their website. Lowest advisable difficulty factor is 5000. For instance, if it is normal for my website to get 2000 requests for every 30 seconds, I will set a cool down period of 30 seconds and the first level of difficulty configuration will have a visitor threshold of 2000 with a difficulty factor of 5000. + + + Terminology + /docs/webmasters/terminology/ + Wed, 27 Jul 2022 08:48:45 +0000 + /docs/webmasters/terminology/ + Authorization token When a visitor solves the CAPTCHA and sends their solution to an mCaptcha instance, the solution will be verified for correctness. If the solution is correct, mCaptcha will return a single use authorization token. This authorization token should be attached to the visitor&rsquo;s requited to the protected service and the protected service should validity of the authorization token with the mCaptcha instance and only allow authorization to protected resource if the authorization token is valid. + + + Webmasters FAQ + /docs/webmasters/faq/ + Wed, 27 Jul 2022 08:48:45 +0000 + /docs/webmasters/faq/ + Easy Mode: Default cooldown period When configuring mCaptcha in easy mode, the default cooldown period is set to 30 seconds. How to get site key from dashboard? Go to &ldquo;Site keys&rdquo; on the side panel in the dashboard click on the clipboard button to copy the site key to your clipboard. + + + diff --git a/docs/webmasters/installing-captcha/index.html b/docs/webmasters/installing-captcha/index.html index 525d4bf..a94e645 100644 --- a/docs/webmasters/installing-captcha/index.html +++ b/docs/webmasters/installing-captcha/index.html @@ -1,55 +1,310 @@ -Installing mCaptcha on your website - mCaptcha

Installing mCaptcha on your website

mCaptcha can protect your website from DDoS attacks. In this guide we’ll + + + + + + + + + + + + + + Installing mCaptcha on your website - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+ + +
+
+ +
+ + +
+ +

Installing mCaptcha on your website

+

+

mCaptcha can protect your website from DDoS attacks. In this guide we’ll explore how to install mCaptcha on your website. The end result will be -something like this, on your website:

A registration form with mCaptcha widget installed

For the purpose of this demo, we will be using -demo.mcaptcha.org, a demo instance running +something like this, on your website:

+
+ A registration form with mCaptcha widget installed + +
+

For the purpose of this demo, we will be using +demo.mcaptcha.org, a demo instance running in @realaravinth’s bedroom(for this same reason, it shouldn’t be used -for anything serious)

1. Create an account and sign into the mCaptcha dashboard

Head over to demo.mcaptcha.org and -create an account. When ready, sign in.

2. Create new site key

A site key is how a new CAPTCHA is configured within mCaptcha. To create -a new site key, click on “New Site” button in the dashboard.

mCaptcha dashboard with the 'new site key' button highlighted

There are two options to create a new site key, easy and advanced. We -are going to use the easy mode in this tutorial. If you are interested -in learning more about the advance mode, please see here.

Fill the form and submit it.

mCaptcha dashboard with the 'new site key' form in easy mode, with details filled in

Submitting the form will take you to a page where site key configuration +for anything serious)

+

1. Create an account and sign into the mCaptcha dashboard

+

Head over to demo.mcaptcha.org and +create an account. When ready, sign in.

+

2. Create new site key

+

A site key is how a new CAPTCHA is configured within mCaptcha. To create +a new site key, click on “New Site” button in the dashboard.

+
+ mCaptcha dashboard with the 'new site key' button highlighted + +
+

There are two options to create a new site key, easy and advanced. We +are going to use the easy mode in this tutorial. If you are interested +in learning more about the advance mode, please see here.

+

Fill the form and submit it.

+
+ mCaptcha dashboard with the 'new site key' form in easy mode, with details filled in + +
+ +

Submitting the form will take you to a page where site key configuration can be viewed. “View deployment” link will display CAPTCHA widget with -the supplied configuration. Click on it and grab the widget link.

4. Install mCaptcha on your website

Integration support is available for some frontend JavaScript +the supplied configuration. Click on it and grab the widget link.

+

4. Install mCaptcha on your website

+

Integration support is available for some frontend JavaScript frameworks. To see full list of supported frameworks, please see -here.

There are two options to use the integration library to integrate -mCaptcha on your website:

  1. Serve the integration library yourself
  2. Use a CDN like unpkg.com

In this tutorial, we’ll be using the CDN.

Pasting the following snippet on the page, within the form that requires to be protected +here.

+

There are two options to use the integration library to integrate +mCaptcha on your website:

+
    +
  1. Serve the integration library yourself
  2. +
  3. Use a CDN like unpkg.com
  4. +
+

In this tutorial, we’ll be using the CDN.

+

Pasting the following snippet on the page, within the form that requires to be protected will load the mCaptcha widget with the configuration supplied. Be sure to replace Your {{paste your widget link}} with the link obtained from -the previous step.

 1<label
- 2  data-mcaptcha_url="{{paste your widget link here}}"
- 3  for="mcaptcha__token"
- 4  id="mcaptcha__token-label"
- 5>
- 6  mCaptcha authorization token.
- 7  <a
- 8    href="https://mcaptcha.org/docs/user-manual/how-to-mcaptcha-without-js/"
- 9    >Instructions</a
-10  >.
-11  <input type="text" name="mcaptcha__token" id="mcaptcha__token" />
-12</label>
-13<div id="mcaptcha__widget-container"></div>
-14<script src="https://unpkg.com/@mcaptcha/vanilla-glue@0.1.0-rc2/dist/index.js"></script>
-

A full example is available -here.

5. Configure backend to authenticate CAPTCHA tokens

  1. Get access token from the user’s +the previous step.

    +
     1<label
    + 2  data-mcaptcha_url="{{paste your widget link here}}"
    + 3  for="mcaptcha__token"
    + 4  id="mcaptcha__token-label"
    + 5>
    + 6  mCaptcha authorization token.
    + 7  <a
    + 8    href="https://mcaptcha.org/docs/user-manual/how-to-mcaptcha-without-js/"
    + 9    >Instructions</a
    +10  >.
    +11  <input type="text" name="mcaptcha__token" id="mcaptcha__token" />
    +12</label>
    +13<div id="mcaptcha__widget-container"></div>
    +14<script src="https://unpkg.com/@mcaptcha/vanilla-glue@0.1.0-rc2/dist/index.js"></script>
    +

    A full example is available +here.

    +

    5. Configure backend to authenticate CAPTCHA tokens

    +
      +
    1. +

      Get access token from the user’s form submission payload. The access token will be associated with a -parameter called mcaptcha__token.

      1 mcaptcha_token = request.form["mcaptcha__token"]
      -
    2. Validate access token with mCaptcha instance

     1payload = {
    - 2    "token": mcaptcha_token,
    - 3    "key": mcaptcha_sitekey, # captcha site key
    - 4    # mCaptcha account secret; available in settings
    - 5    "secret": mcaptcha_account_secret,
    - 6}
    - 7resp = requests.post(
    - 8    "https://demo.mcaptha.org/api/v1/pow/siteverify", json=payload
    - 9)
    -10resp = resp.json()
    -
    1. If access token is valid, allow access to protected resource or deny -access.
    1 if resp["valid"] == False:
    -2     return "invalid captcha", 400
    -3 else:
    -4     return allow_access_to_protected_resource(request.form)
    -

    Please see here for a complete Flask example and here for an Actix -Web example.

    Congratulations, mCaptcha is now integrated with your website!

    Edit this page on git.batsense.net

\ No newline at end of file +parameter called mcaptcha__token.

+
1 mcaptcha_token = request.form["mcaptcha__token"]
+
+
  • +

    Validate access token with mCaptcha instance

    +
  • + +
     1payload = {
    + 2    "token": mcaptcha_token,
    + 3    "key": mcaptcha_sitekey, # captcha site key
    + 4    # mCaptcha account secret; available in settings
    + 5    "secret": mcaptcha_account_secret,
    + 6}
    + 7resp = requests.post(
    + 8    "https://demo.mcaptha.org/api/v1/pow/siteverify", json=payload
    + 9)
    +10resp = resp.json()
    +
      +
    1. If access token is valid, allow access to protected resource or deny +access.
    2. +
    +
    1 if resp["valid"] == False:
    +2     return "invalid captcha", 400
    +3 else:
    +4     return allow_access_to_protected_resource(request.form)
    +

    Please see here for a complete Flask example and here for an Actix +Web example.

    +

    Congratulations, mCaptcha is now integrated with your website!

    + +

    Edit this page on git.batsense.net

    + + + +
    +
    + +
    +
    + + + + + + + + + diff --git a/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_20x0_resize_box_2.png b/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_20x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_20x0_resize_box_2.png rename to docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_20x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_500x0_resize_box_2.png b/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_500x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_500x0_resize_box_2.png rename to docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_500x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_600x0_resize_box_2.png b/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_600x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_600x0_resize_box_2.png rename to docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_600x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_700x0_resize_box_2.png b/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_700x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_700x0_resize_box_2.png rename to docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_700x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_800x0_resize_box_2.png b/docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_800x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_800x0_resize_box_2.png rename to docs/webmasters/installing-captcha/mcaptcha-widget-installation-result_hub39801b2a229b4882fd00c2c83dd77fb_28299_800x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_20x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_20x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_20x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_20x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_500x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_500x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_500x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_500x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_600x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_600x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_600x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_600x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_700x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_700x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_700x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_700x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_800x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_800x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_800x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_800x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_900x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_900x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_900x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-btn_hu4dc550a2e568d01f004e26fb8eb1b427_65746_900x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_20x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_20x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_20x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_20x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_500x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_500x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_500x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_500x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_600x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_600x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_600x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_600x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_700x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_700x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_700x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_700x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_800x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_800x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_800x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_800x0_resize_box_3.png diff --git a/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_900x0_resize_box_2.png b/docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_900x0_resize_box_3.png similarity index 100% rename from docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_900x0_resize_box_2.png rename to docs/webmasters/installing-captcha/new-sitekey-easy-mode-filled_hu0c237370199481610ab31adaa9c5a5e6_30108_900x0_resize_box_3.png diff --git a/docs/webmasters/sitemap.xml b/docs/webmasters/sitemap.xml index eb41769..2c5706e 100644 --- a/docs/webmasters/sitemap.xml +++ b/docs/webmasters/sitemap.xml @@ -1 +1,31 @@ -/docs/webmasters/installing-captcha/2023-11-05T02:15:26+05:30weekly0.5/docs/webmasters/configuring-difficulty-factor/2023-10-27T21:39:40+05:30weekly0.5/docs/webmasters/terminology/2023-10-27T21:39:40+05:30weekly0.5/docs/webmasters/faq/2023-10-27T21:39:40+05:30weekly0.5 \ No newline at end of file + + + + /docs/webmasters/installing-captcha/ + 2023-11-05T02:15:26+05:30 + weekly + 0.5 + + + + /docs/webmasters/configuring-difficulty-factor/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + + /docs/webmasters/terminology/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + + /docs/webmasters/faq/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + \ No newline at end of file diff --git a/docs/webmasters/terminology/index.html b/docs/webmasters/terminology/index.html index 0421e62..8a10349 100644 --- a/docs/webmasters/terminology/index.html +++ b/docs/webmasters/terminology/index.html @@ -1,36 +1,303 @@ -Terminology - mCaptcha

    Terminology

    Authorization token

    When a visitor solves the CAPTCHA and sends their solution to an + + + + + + + + + + + + + + Terminology - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

    + + +
    +
    + +
    + + +
    + +

    Terminology

    +

    +

    Authorization token

    +

    When a visitor solves the CAPTCHA and sends their solution to an mCaptcha instance, the solution will be verified for correctness. If the -solution is correct, mCaptcha will return a single use authorization token.

    This authorization token should be attached to the visitor’s requited to the +solution is correct, mCaptcha will return a single use authorization token.

    +

    This authorization token should be attached to the visitor’s requited to the protected service and the protected service should validity of the authorization token with the mCaptcha instance and only allow authorization to -protected resource if the authorization token is valid.

    Cooldown Period

    mCaptcha implements leaky bucket algorithm to measure +protected resource if the authorization token is valid.

    +

    Cooldown Period

    +

    mCaptcha implements leaky bucket algorithm to measure current traffic levels. Cooldown period specifies the leak or the time -after which a visitor addition is decremented.

    For instance, if initial traffic level is 0 and a user visits one +after which a visitor addition is decremented.

    +

    For instance, if initial traffic level is 0 and a user visits one second later, the traffic level will be incremented to 1. Now, if the cooldown period is set to 30 seconds, the traffic level will be decremented after 30 seconds. So after 30 seconds, the traffic level will -go from 1 to 0.

    Difficulty Factor

    Difficulty factor determines the time it takes to solve a CAPTCHA. The +go from 1 to 0.

    +

    Difficulty Factor

    +

    Difficulty factor determines the time it takes to solve a CAPTCHA. The higher the difficulty factor, the longer it will take to generate a -proof of work for it to solve the CAPTCHA.

    mCaptcha’s proof of work based mechanism makes it highly accessible to +proof of work for it to solve the CAPTCHA.

    +

    mCaptcha’s proof of work based mechanism makes it highly accessible to people with special needs but it is important to choose the difficulty factor with care as very high difficulty factors will make the CAPTCHA -inaccessible to users on slow devices.

    Sitekey

    Site key is a unique identifier associated with CAPTCHA configurations +inaccessible to users on slow devices.

    +

    Sitekey

    +

    Site key is a unique identifier associated with CAPTCHA configurations created on mCaptcha. It is required to integrate a CAPTCHA with your -website.

    Visitor Threshold

    mCaptcha’s variable difficulty factor mechanism requires a website’s traffic +website.

    +

    Visitor Threshold

    +

    mCaptcha’s variable difficulty factor mechanism requires a website’s traffic statistics be split into levels, so that it can deploy the right -difficulty factor for each level.

    Visitor threshold is used to traffic into levels and mCaptcha accepts a +difficulty factor for each level.

    +

    Visitor threshold is used to traffic into levels and mCaptcha accepts a difficulty configuration for each of these levels. When current traffic exceeds a difficulty factor, mCaptcha will increase the difficulty -factor to the next configured level.

    For instance, consider the configuration given below:

    • Cool down period: 30 seconds
    LevelDifficulty FactorVisitor Threshold
    15,0002,000
    250,0005,000
    3500,00010,000
    45,000,00015,000

    If the website sees 2,000 requests in a 30 second window, level 1 +factor to the next configured level.

    +

    For instance, consider the configuration given below:

    +
      +
    • Cool down period: 30 seconds
    • +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    LevelDifficulty FactorVisitor Threshold
    15,0002,000
    250,0005,000
    3500,00010,000
    45,000,00015,000
    +

    If the website sees 2,000 requests in a 30 second window, level 1 difficulty factor(5,000) will be deployed. If the traffic increases to 5,000 requests in a 30 second window, then difficulty factor will be upgraded to level 2(50,000). Likewise 10,000 and 15,000 requests over 30 seconds will result in difficulty factor being upgraded to 500,000 and -5,000,000 respectively.

    Visitor threshold is how mCaptcha determines which difficulty factor +5,000,000 respectively.

    +

    Visitor threshold is how mCaptcha determines which difficulty factor level to deploy. mCaptcha uses leaky bucket algorithm to keep the visitor threshold constantly updated within the configured cool down period. So, at any given moment the, the current visitor level will be -the amount of traffic that was served in the cool down period specified.

    Edit this page on git.batsense.net

    \ No newline at end of file +the amount of traffic that was served in the cool down period specified.

    + +

    Edit this page on git.batsense.net

    + + + +
    +
    + +
    +
    + + + + + + + + + diff --git a/donate/index.html b/donate/index.html index a431cbd..3976d4d 100644 --- a/donate/index.html +++ b/donate/index.html @@ -1,11 +1,183 @@ -Donate - mCaptcha

    Donate

    Last Edited July 16, 2021

    mCaptcha is a small operation that is self-funded. At the time of + + + + + + + + + + + + + + Donate - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

    + + +
    +
    + +
    + +
    + +

    Donate

    +

    Last Edited July 16, 2021

    +

    +

    mCaptcha is a small operation that is self-funded. At the time of writing, we are not backed by any venture capitals. If you like mCaptcha, please consider donating. Your donations will go a long -way in supporting us.

    Some of the payment options are anonymous. You can optionally send -me(@realaravinth) an email so that -I can thank you :)

    XMR

    85QAHsHqg4WfA6G7ycXc7U4LmrSLCQARv6H9p3AYjf8o8YP
    +way in supporting us.

    +

    Some of the payment options are anonymous. You can optionally send +me(@realaravinth) an email so that +I can thank you :)

    +

    XMR

    +
    85QAHsHqg4WfA6G7ycXc7U4LmrSLCQARv6H9p3AYjf8o8YP
     WH3ngC8Zi7bUYGUifdXb54Xuz41kcu2pqgGFuAYp3VSh5JsR
    -
    Monero address QR code
    Monero address QR code

    Liberapay

    Edit this page on git.batsense.net

    \ No newline at end of file +
    + Monero address QR code + +
    Monero address QR code
    +
    +

    Liberapay

    + +

    + +

    Edit this page on git.batsense.net

    + +
    +
    + +
    +
    + + + + + + + + + diff --git a/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_20x0_resize_box_2.png b/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_20x0_resize_box_3.png similarity index 100% rename from donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_20x0_resize_box_2.png rename to donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_20x0_resize_box_3.png diff --git a/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_500x0_resize_box_2.png b/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_500x0_resize_box_3.png similarity index 100% rename from donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_500x0_resize_box_2.png rename to donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_500x0_resize_box_3.png diff --git a/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_600x0_resize_box_2.png b/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_600x0_resize_box_3.png similarity index 100% rename from donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_600x0_resize_box_2.png rename to donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_600x0_resize_box_3.png diff --git a/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_700x0_resize_box_2.png b/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_700x0_resize_box_3.png similarity index 100% rename from donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_700x0_resize_box_2.png rename to donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_700x0_resize_box_3.png diff --git a/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_800x0_resize_box_2.png b/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_800x0_resize_box_3.png similarity index 100% rename from donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_800x0_resize_box_2.png rename to donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_800x0_resize_box_3.png diff --git a/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_900x0_resize_box_2.png b/donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_900x0_resize_box_3.png similarity index 100% rename from donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_900x0_resize_box_2.png rename to donate/mcptcha-donations-monero-address-qr_huda75cb0a97a0728b33b2d59d7a34dd33_7547_900x0_resize_box_3.png diff --git a/index.html b/index.html index b0a7e65..aebb7f4 100644 --- a/index.html +++ b/index.html @@ -1,6 +1,189 @@ -mCaptcha - mCaptcha

    Defend Like Castles

    mCaptcha is proof-of-work based captcha system that is privacy focused and fully automated.

    Try mCaptcha -      - Get started

    Libre software GitHub

    Privacy focused

    Doesn't track, doesn't profile your users.

    Robust and Accurate

    Got users behind NATs? No issues. We don't use IP address for rate-liming. NAT or not you get the mCaptcha experience.

    Best-in-class UX

    mCaptcha is silent, so silent that your users won't even feel it. No more annoying images, no more helping for Big Brothers with their ML stuff

    Defend like castles

    Our PoW-based solution defends fierily. mCaptcha makes attacking your site more expensive than what it will take for you to respond to the attacker's requests

    Libre Software

    Client libraries are licensed using proprietary-friendly free software licenses but the core is AGPL'd. We believe this is a tech that can change the way the web works so mCaptcha will always be free

    xCaptcha drop-in replacement

    Already using a captcha solution? No worries, our APIs are compatible with reCAPTCHA and hCaptcha!

    \ No newline at end of file + + + + + + + + + + + + + + mCaptcha - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + +
    +
    + +
    +
    +
    +

    Defend Like Castles

    +
    +
    +

    mCaptcha is proof-of-work based captcha system that is privacy focused and fully automated.

    + Try mCaptcha +       + Get started +

    Libre software GitHub

    +
    +
    +
    + +
    +
    + +
    +
    +
    +
    +

    Privacy focused

    +

    Doesn't track, doesn't profile your users.

    +
    +
    +

    Robust and Accurate

    +

    Got users behind NATs? No issues. We don't use IP address for rate-liming. NAT or not you get the mCaptcha experience. +

    +
    +

    Best-in-class UX

    +

    mCaptcha is silent, so silent that your users won't even feel it. No more annoying images, no more helping for Big Brothers with their ML stuff

    +
    +
    +
    +
    +

    Defend like castles

    +

    Our PoW-based solution defends fierily. mCaptcha makes attacking your site more expensive than what it will take for you to respond to the attacker's requests

    +
    +
    +

    Libre Software

    +

    Client libraries are licensed using proprietary-friendly free software licenses but the core is AGPL'd. We believe this is a tech that can change the way the web works so mCaptcha will always be free

    +
    +
    +

    xCaptcha drop-in replacement

    +

    Already using a captcha solution? No worries, our APIs are compatible with reCAPTCHA and hCaptcha!

    +
    +
    +
    +
    + + +
    +
    +
    +
    +
    + + + + + + + + diff --git a/index.min.93b8a8c2342494612b6248052a9ee91028f73ecaca031e57b8e7bdbf1b6bea8ac3cc0db982f0bd4450facb3921041ff2c4f8c2ea5b8372142777b552db3f5167.js b/index.min.93b8a8c2342494612b6248052a9ee91028f73ecaca031e57b8e7bdbf1b6bea8ac3cc0db982f0bd4450facb3921041ff2c4f8c2ea5b8372142777b552db3f5167.js new file mode 100644 index 0000000..1e08799 --- /dev/null +++ b/index.min.93b8a8c2342494612b6248052a9ee91028f73ecaca031e57b8e7bdbf1b6bea8ac3cc0db982f0bd4450facb3921041ff2c4f8c2ea5b8372142777b552db3f5167.js @@ -0,0 +1,614 @@ +var suggestions=document.getElementById("suggestions"),userinput=document.getElementById("userinput");document.addEventListener("keydown",inputFocus);function inputFocus(e){e.keyCode===191&&(e.preventDefault(),userinput.focus()),e.keyCode===27&&(userinput.blur(),suggestions.classList.add("d-none"))}document.addEventListener("click",function(e){var t=suggestions.contains(e.target);t||suggestions.classList.add("d-none")}),document.addEventListener("keydown",suggestionFocus);function suggestionFocus(e){const s=suggestions.querySelectorAll("a"),o=[...s],t=o.indexOf(document.activeElement);let n=0;e.keyCode===38?(e.preventDefault(),n=t>0?t-1:0,s[n].focus()):e.keyCode===40&&(e.preventDefault(),n=t+1mCaptcha can protect your website from DDoS attacks. In this guide we’ll +explore how to install mCaptcha on your website. The end result will be +something like this, on your website:

    +
    + A registration form with mCaptcha widget installed + +
    +

    For the purpose of this demo, we will be using +demo.mcaptcha.org, a demo instance running +in @realaravinth’s bedroom(for this same reason, it shouldn’t be used +for anything serious)

    +

    1. Create an account and sign into the mCaptcha dashboard

    +

    Head over to demo.mcaptcha.org and +create an account. When ready, sign in.

    +

    2. Create new site key

    +

    A site key is how a new CAPTCHA is configured within mCaptcha. To create +a new site key, click on “New Site” button in the dashboard.

    +
    + mCaptcha dashboard with the 'new site key' button highlighted + +
    +

    There are two options to create a new site key, easy and advanced. We +are going to use the easy mode in this tutorial. If you are interested +in learning more about the advance mode, please see here.

    +

    Fill the form and submit it.

    +
    + mCaptcha dashboard with the 'new site key' form in easy mode, with details filled in + +
    + +

    Submitting the form will take you to a page where site key configuration +can be viewed. “View deployment” link will display CAPTCHA widget with +the supplied configuration. Click on it and grab the widget link.

    +

    4. Install mCaptcha on your website

    +

    Integration support is available for some frontend JavaScript +frameworks. To see full list of supported frameworks, please see +here.

    +

    There are two options to use the integration library to integrate +mCaptcha on your website:

    +
      +
    1. Serve the integration library yourself
    2. +
    3. Use a CDN like unpkg.com
    4. +
    +

    In this tutorial, we’ll be using the CDN.

    +

    Pasting the following snippet on the page, within the form that requires to be protected +will load the mCaptcha widget with the configuration supplied. Be sure +to replace Your {{paste your widget link}} with the link obtained from +the previous step.

    +
     1<label
    + 2  data-mcaptcha_url="{{paste your widget link here}}"
    + 3  for="mcaptcha__token"
    + 4  id="mcaptcha__token-label"
    + 5>
    + 6  mCaptcha authorization token.
    + 7  <a
    + 8    href="https://mcaptcha.org/docs/user-manual/how-to-mcaptcha-without-js/"
    + 9    >Instructions</a
    +10  >.
    +11  <input type="text" name="mcaptcha__token" id="mcaptcha__token" />
    +12</label>
    +13<div id="mcaptcha__widget-container"></div>
    +14<script src="https://unpkg.com/@mcaptcha/vanilla-glue@0.1.0-rc2/dist/index.js"></script>
    +

    A full example is available +here.

    +

    5. Configure backend to authenticate CAPTCHA tokens

    +
      +
    1. +

      Get access token from the user’s +form submission payload. The access token will be associated with a +parameter called mcaptcha__token.

      +
      1 mcaptcha_token = request.form["mcaptcha__token"]
      +
    2. +
    3. +

      Validate access token with mCaptcha instance

      +
    4. +
    +
     1payload = {
    + 2    "token": mcaptcha_token,
    + 3    "key": mcaptcha_sitekey, # captcha site key
    + 4    # mCaptcha account secret; available in settings
    + 5    "secret": mcaptcha_account_secret,
    + 6}
    + 7resp = requests.post(
    + 8    "https://demo.mcaptha.org/api/v1/pow/siteverify", json=payload
    + 9)
    +10resp = resp.json()
    +
      +
    1. If access token is valid, allow access to protected resource or deny +access.
    2. +
    +
    1 if resp["valid"] == False:
    +2     return "invalid captcha", 400
    +3 else:
    +4     return allow_access_to_protected_resource(request.form)
    +

    Please see here for a complete Flask example and here for an Actix +Web example.

    +

    Congratulations, mCaptcha is now integrated with your website!

    +`},{id:1,href:"/docs/webmasters/configuring-difficulty-factor/",title:"Configuring Difficulty Factor",description:"mCaptcha has options to configure its proof of work engine behavior, this page explains how to determine difficulty facotrs that work best for your website!",content:`

    mCaptcha is highly responsive to detecting DDoS attacks. Admins are +advised to take advantage of it by setting low difficulty +factors for normal traffic levels +for their website.

    +

    Lowest advisable difficulty factor is 5000.

    +

    For instance, if it is normal for my website to get 2000 requests for +every 30 seconds, I will set a cool +down period of 30 seconds and the +first level of difficulty configuration will have a visitor threshold of 2000 with a +difficulty factor of 5000.

    +

    There are two modes to setting difficulty factor for your website on +mCaptcha:

    +

    Easy option

    +

    Easy mode asks a few basic statistics about your website and generates a +configuration that should work for your website. Currently, easy mode is +guided by assumptions on suitable difficulty factors to protect a +website but it will be fine-tuned as mCaptcha sees more deployment.

    +

    Configuration generated by easy mode can be tweaked later using the +advance mode, as you become more familiar with how mCaptcha works.

    +
    + new sitekey form in easy mode + +
    +

    Advance option

    +

    Advance mode gives the admin granular control over how mCaptcha behaves +on their website. It has options to set the difficulty factor for each +level of traffic(or visitor threshold, in mCaptcha speak), fully taking +advantage of mCaptcha’s variable difficulty factor feature.

    +

    For instance, if it is normal for a website to get 200 requests over 30 +seconds, then setting a very low difficulty factor for a visitor +threshold of 200 and a cool down period of 30 seconds will allow the +users to pass through without waiting on the CAPTCHA. But if 1000 +requests over 30 seconds will bring down the service, then the admin can +configure increasing levels of difficulty factor of increasing traffic +levels, effectively rate limiting its users and protecting the +underlying website.

    +
    + new sitekey form in advance mode + +
    +`},{id:2,href:"/docs/self-hosting/getting-started/",title:"Getting started",description:"Get started with self-hosting mCaptcha",content:`

    Get started

    +

    There are two main ways to self-host mCaptcha:

    +
      +
    1. Bare metal
    2. +
    3. With Docker
    4. +
    5. With Ansible
    6. +
    +`},{id:3,href:"/docs/self-hosting/bare-metal/",title:"Deploy bare metal",description:"Bare metal deployment is tedious, most of this will be automated with a script in the future.",content:`

    1. Install Database

    +

    The following databases are supported:

    +
      +
    1. Postgres
    2. +
    3. MariaDB
    4. +
    +

    Please install the database of your choice. Then:

    +
      +
    1. Create new database user for mCaptcha
    2. +
    3. Create new database for mCaptcha
    4. +
    +

    mCaptcha binary has migrations baked-in and is applied on start up. The +choice of database is described using the scheme of the database URL. For +instance:

    +
      +
    1. Postgres: postgres://mcaptcha:password@localhost:5432/mcaptcha
    2. +
    3. Mariadb: mysql://mcaptcha:password@localhost:3306/mcaptcha
    4. +
    +

    2. Optionally, install mCaptcha/cache

    +

    We recommend this for larger instances. For single-user instances or for +instances that protect personal websites, we recommend using the +internal cache system. To do so, please comment out the +redis section of the configuration file.

    +

    Please see mCaptcha/cache for more details.

    +

    3. Install mCaptcha

    +

    3.1 Install from source

    +

    To build mcaptcha, you need the following dependencies:

    +
      +
    1. rust
    2. +
    3. node(v20)
    4. +
    5. yarn(JavaScript package manager)
    6. +
    7. make
    8. +
    +

    With all dependencies installed, run:

    +
    make dev-env && make release
    +

    And the following commands to install the compiled binary:

    +
    sudo cp ./target/release/mcaptcha /usr/bin/ && \\
    +	mkdir sudo /etc/mcaptcha && \\
    +	sudo cp config/default.toml /etc/mcaptcha/config.toml
    +

    3.2 Install pre-compiled binary

    +

    i. Download assets

    +
    wget https://dl.mcaptcha.org/mcaptcha/mCaptcha/master/mcaptcha-master-linux-amd64.tar.gz.asc
    +wget https://dl.mcaptcha.org/mcaptcha/mCaptcha/master/mcaptcha-master-linux-amd64.tar.gz.sha256
    +wget https://dl.mcaptcha.org/mcaptcha/mCaptcha/master/mcaptcha-master-linux-amd64.tar.gz
    +

    ii Verify checksum

    +
    sha256sum -c mcaptcha-master-linux-amd64.tar.gz.sha256
    +

    iii Verify GPG signature

    +

    All mcaptcha binaries are signed with our GPG +key. +Please verify signatures to verify authenticity.

    +
    gpg --keyserver keyserver.ubuntu.com --recv 73DAC973A9ADBB9ADCB5CDC4595A08135BA9FF73
    +gpg --verify mcaptcha-master-linux-amd64.tar.gz.asc
    +

    iv. Install

    +
    tar -xvzf mcaptcha-master-linux-amd64.tar.gz \\
    +  && sudo cp mcaptcha-master-linux-amd64/mcaptcha /usr/local/bin \\
    +  && sudo mkdir /etc/mcaptcha \\
    +  && sudo cp mcaptcha-master-linux-amd64/config.toml /etc/mcaptcha/
    +

    4. Configuration

    +

    mCaptcha is highly configurable.

    +

    Configuration is applied/merged in the following order:

    +
      +
    1. path to configuration file passed in via MCAPTCHA_CONFIG
    2. +
    3. ./config/default.toml
    4. +
    5. /etc/mcaptcha/config.toml
    6. +
    7. environment variables. Please see +here for a full list of environment variables.
    8. +
    +

    5. Systemd service configuration:

    +
      +
    1. Copy the following to /etc/systemd/system/mcaptcha.service:
    2. +
    +
    [Unit]
    +Description=mCaptcha: a CAPTCHA system that gives attackers a run for their money
    +
    +[Service]
    +Type=simple
    +User=mcaptcha
    +ExecStart=/usr/bin/mcaptcha
    +Restart=on-failure
    +RestartSec=1
    +SuccessExitStatus=3 4
    +RestartForceExitStatus=3 4
    +SystemCallArchitectures=native
    +MemoryDenyWriteExecute=true
    +NoNewPrivileges=true
    +Environment="RUST_LOG=info"
    +
    +[Unit]
    +After=sound.target
    +Wants=network-online.target
    +Wants=network-online.target
    +Requires=postgresql.service
    +After=syslog.target
    +
    +[Install]
    +WantedBy=multi-user.target
    +
      +
    1. Enable service:
    2. +
    +
    sudo systemctl daemon-reload && \\
    +	sudo systemctl enable mcaptcha && \\ # Auto startup during boot
    +	sudo systemctl start mcaptcha
    +

    6. Install and configure Nginx

    +

    mCaptcha doesn’t implement SSL yet. Please use a reverse proxy like +Nginx to add SSL to your deployment. Here’s an example virtual host +configuration for Nginx:

    +
    server {
    +  server_name <your mcaptcha hostname>;
    +	listen 80;
    +	listen [::]:80;
    +
    +	location / {
    +		proxy_pass http://127.0.0.1:<mcaptcha_port>;
    +		proxy_set_header Host $host;
    +    proxy_set_header Host $host;
    +    proxy_set_header Upgrade $http_upgrade;
    +    proxy_set_header Connection "upgrade";
    +    proxy_set_header X-Forwarded-For $remote_addr;
    +    proxy_set_header X-Forwarded-Proto $scheme;
    +	}
    +
    +}
    +
    `},{id:4,href:"/docs/self-hosting/ansible/",title:"Using Ansible",description:"Deploy mCaptcha software using Ansible playbooks",content:`

    Ansible playbooks to install mCaptcha are available here.

    +

    Instructions

    +

    Installation

    +
      +
    1. Clone the repository:
    2. +
    +
    1git clone https://git.batsense.net/mCaptcha/iac && cd iac
    +
      +
    1. +

      Create inventory file. You should have SSH access to the remote +machine, and the user must have sudo privileges. Example inventory +file:

      +
      1[mcaptcha_hosts]
      +2"mcaptcha_hosts"
      +3<node name> ansible_host=<node IP> ansible_user=<remote username>
      +

      It is important that the group name be mcaptcha_hosts.

      +
    2. +
    3. +

      Configure installation by editing ansible/vars/mcaptcha/vars.yml. Most parameters have defaults, and the required parameters are annotated.

      +
    4. +
    5. +

      Run playbook:

      +
    6. +
    +
    1	ansible-playbook -i path/to/inventory-file -f 10 ./ansible/mcaptcha.yml
    +

    Update

    +
      +
    1. Pull changes from Git repository
    2. +
    3. Rerun playbook
    4. +
    +`},{id:5,href:"/docs/self-hosting/docker/",title:"Using Docker",description:"Deploy mCaptcha using docker",content:`

    With Docker

    +

    1. Configure

    +

    mcaptcha is highly configurable.

    +

    Configuration is applied/merged in the following order:

    +
      +
    1. path to configuration file passed in via MCAPTCHA_CONFIG
    2. +
    3. ./config/default.toml
    4. +
    5. /etc/mcaptcha/config.toml
    6. +
    7. environment variables.
    8. +
    +

    See +CONFIGURATION.md +for configurable options.

    +

    2. Run image

    +

    If you have already have a Postgres instance running, then:

    +
    docker run -p <host-machine-port>:<port-in-configuration-file> \\
    +	--add-host=database:<database-ip-addrss> \\
    +	-e RUST_LOG=debug \\
    +	-e DATABASE_URL="postgres://<db-user>:<db-password>@database:<db-port>/<db-name>" \\
    +	mcaptcha/mcaptcha:latest
    +

    If you don’t have a Postgres instance running, you can either install +one using a package manager or launch one with docker.

    +

    With docker-compose

    +
      +
    1. Download docker-compose file and the configuration file:
    2. +
    +
    wget https://raw.githubusercontent.com/mCaptcha/mCaptcha/master/.env.docker-compose
    +wget https://raw.githubusercontent.com/mCaptcha/mCaptcha/master/docker-compose.yml
    +
      +
    1. +

      Configure deployment using .env.docker-compose environment variable +file

      +
    2. +
    3. +

      Launch containers:

      +
    4. +
    +
    docker-compose up -d
    +
      +
    1. Configure SSL using reverse proxy: mCaptcha doesn’t support SSL at +the moment, so please use a reverse proxy to secure your instance. A +reference nginx virtual host configuration file is available here.
    2. +
    +`},{id:6,href:"/docs/help/troubleshooting/",title:"Troubleshooting",description:"Solutions to common problems.",content:`

    Q: I just setup an instance but I am unable to login

    +

    mCaptcha by default is configured to server at localhost hostname. If +the instance is deployed at another hostname, please try setting +MCAPTCHA_SERVER_DOMAIN environment variable to the hostname at which +your instance is deployed or setting the equivalent in config.toml:

    +
    1[server]
    +2domain=mydomain
    +
    `},{id:7,href:"/docs/api/browser/",title:"Browser libraries",description:"API documenttion for mCaptcha WASM library",content:`

    The browser part of mCaptcha is divided into three components.

    +
      +
    • Glue code
    • +
    • Widget program
    • +
    • Proof-of-Work libraries(WebAssembly and JavaScript polyfill)
    • +
    +

    Glue code

    +

    This is the code that links mCaptcha with your website’s frontend code. +It creates an iframe containing the mCaptcha widget and injects the +received verification proof token into a hidden input field.

    +

    Support is available for various frameworks, see +mCaptcha/glue for the full list.

    +

    For frameworks without official support, a low-level library, +@mcaptcha/core-glue, +can be used to implement support.

    +

    Widget Program

    +

    This part is served by the mCaptcha backend. It fetches PoW config from +the backend, generates proof and submits it for verification. If +verification is successful, it sends a message containing the +verification proof token to the parent window, assuming it’s loaded as +an iframe.

    + +

    WebAssembly library which generates Proofs of Work for mCaptcha systems.

    +

    Proof-of-Work(PoW) library

    +

    WebAssembly bindings(mCaptcha/pow_wasm) are available for the main rust library(mCaptcha/pow_sha256).

    +

    For browsers without support WebAssembly, a +polyfill(pow_sha256-polyfill) +is available.

    +`},{id:8,href:"/docs/api/mcaptcha-system/",title:"mCaptcha System Library",description:"API documenttion for the core Library used in mCaptcha",content:`

    Documentation for the library used in mCaptcha core.

    +

    Versions

    + +`},{id:9,href:"/docs/api/pow-sha256/",title:"pow_sha256",description:"API documenttion for PoW Library used in mCaptcha",content:`

    Rust crate which generates SHA256 Proofs of Work on serializable datatypes.

    +

    This is a fork of the pow library by +@robkorn) with some new +additions. Primary of these being:

    +
      +
    • PoW datatype now offers a constructor
    • +
    • Salt is no longer hard coded into the library, users can provide +unique salts.
    • +
    +

    Other small changes have also been included of various importance but +mostly just stylistic/ease of use improvements.

    +

    Versions

    + +

    Changelog

    +

    Changelog is available at the project’s +repository

    +`},{id:10,href:"/docs/help/faq/",title:"FAQ",description:"Answers to frequently asked questions.",content:`

    Coming soon

    +`},{id:11,href:"/docs/user-manual/cli/",title:"CLI tool",description:"Instructions to install mCaptcha CLI",content:`

    A CLI tool exists to compute mCaptcha challenges. It can be installed +from multiple sources:

    +

    Install

    +

    crates.io

    +

    The CLI tool is available on, crates.io, the Rust +language’s package registry. Rust language toolchain is required to +install from crates.io, please see rustup.rs for +Instructions to install it.

    +
    1cargo install mcaptcha-cli
    +

    Pre-compiled binaries

    +

    Nightly builds and stable releases are regularly published to +dl.mcaptcha.org for a variety of +CPU architectures and operating systems.

    +
      +
    1. Download binary, checksum and GPG signature files
    2. +
    +
    1wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz
    +2wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz.asc
    +3wget https://dl.mcaptcha.org/mcaptcha/cli/{VERSION}/{FILENAME}.tar.gz.sha256
    +
      +
    1. Verify checksum
    2. +
    +
    1sha256sum -c {FILENAME}.tar.gz.sha256
    +
      +
    1. Download mCaptcha’s GPG release keys and verify GPG signature
    2. +
    +
    1gpg --keyserver keyserver.ubuntu.com --recv 73DAC973A9ADBB9ADCB5CDC4595A08135BA9FF73
    +2gpg --verify {FILENAME}.tar.gz.asc
    +
      +
    1. Install Binary
    2. +
    +
    1tar -xvzf {FILENAME}.tar.gz && sudo cp {FILENAME}/mcaptcha-cli /usr/local/bin
    +

    Build from source

    +
      +
    1. Install Rust tool chain +Please see here for instructions.
    2. +
    3. Download source code
    4. +
    +
    1git clone https://git.batsense.net/mCaptcha/cli
    +
      +
    1. Compile and install
    2. +
    +
    1cargo build --release && sudp cp ./target/release/mcaptcha-cli
    +2/usr/local/bin
    +

    Pass mCaptcha challenge

    +

    The CLI tool requires details about the challenge to work on it. The +tool can be used in three different modes compute challenge:

    +
      +
    1. Protected Page: Compute mCaptcha challenge for the CAPTCHA at a +protected page
    2. +
    3. Widget URL: Compute PoW for captcha at widget URL
    4. +
    5. (Developer mode) Offline: Computes PoW over given CAPTCHA parameters
    6. +
    +

    From protected page URL

    +

    The most convenient mode: copy the URL of the webpage which has the +mCaptcha widget (example: showcase.mcaptcha.org) and run the CLI tool +with it to get an authorization code: +Compute challenge using the URL

    +
    103:39 atm@lab cli ±|feat-parse-webpage ✗|→ mcaptcha-cli protected-page https://showcase.mcaptcha.org/
    +2Authorization token: eRAZJiMrW58uDYA1s64Tmwq1u30HutuF
    +

    Widget URL

    +

    If you have the widget URL (will be in format https://mcaptcha.example.org/widget?sitekey=randomstring), it can be used to solve challenge as well:

    +
    1Compute PoW by fetching parameters from  CAPTCHA URL
    +2
    +3Usage: mcaptcha-cli online --url <URL>
    +4
    +5Options:
    +6  -u, --url <URL>  URL of the CAPTCHA. Example:  https://example.org/widget?sitekey=foo
    +7  -h, --help       Print help
    +

    Example usage:

    +
    113:32 atm@lab cli ±|online ✗|→ mcaptcha-cli online -u https://demo.mcaptcha.org/widget?sitekey=pHy0AktWyOKuxZDzFfoaewncWecCHo23
    +2Authorization token: 3xleN26OctBuVu3X4t6CYyUjErhaxQvz
    +

    [Developer mode] Offline

    +

    Useful while debugging mCaptcha configurations, works on raw challenge +parameters.

    +

    Help menu:

    +
    1Compute PoW with offline parameters
    +2
    +3Usage: mcaptcha-cli offline --salt <SALT> --phrase <PHRASE> --difficulty-factor <DIFFICULTY_FACTOR>
    +4
    +5Options:
    +6  -s, --salt <SALT>                            Salt with which PoW should be computed
    +7  -p, --phrase <PHRASE>                        Phrase over which PoW should be computed
    +8  -d, --difficulty-factor <DIFFICULTY_FACTOR>  Difficulty Factor
    +9  -h, --help                                   Print help
    +

    Example usage:

    +
    113:28 atm@lab cli ±|online|→ mcaptcha-cli offline -s $(rand 32) -p $(rand 32) -d 50000
    +2difficulty: 50000
    +3nonce: 90507
    +4original phrase: f351f333d44b2c6b5bf7f033b065bbb8fb5e9dd153bd402e43ed04425f5a3859
    +5result: 340276562956196291522979356090220150471
    +

    Where rand is this script.

    +`},{id:12,href:"/docs/user-manual/how-to-mcaptcha-without-js/",title:"Use mCaptcha without JavaScript",description:"Instructions to solve mCaptcha with JavaScript disabled",content:`

    To use mCaptcha without JavaScript:

    +
      +
    1. Install mCaptcha CLI too. Please see here for instructions.
    2. +
    3. Copy the URL of the protected page
    4. +
    5. Run mCaptcha CLI with that URL:
    6. +
    +
    1mcapthca-cli protected-page <URL>
    +
      +
    1. Copy authorization code and paste it in the form
    2. +
    +`},{id:13,href:"/docs/user-manual/",title:"User Manual",description:"Introduction to mCaptcha for users",content:""},{id:14,href:"/docs/webmasters/terminology/",title:"Terminology",description:"Information about terminology used in mCaptcha, some of which unique to the project",content:`

    Authorization token

    +

    When a visitor solves the CAPTCHA and sends their solution to an +mCaptcha instance, the solution will be verified for correctness. If the +solution is correct, mCaptcha will return a single use authorization token.

    +

    This authorization token should be attached to the visitor’s requited to the +protected service and the protected service should validity of the +authorization token with the mCaptcha instance and only allow authorization to +protected resource if the authorization token is valid.

    +

    Cooldown Period

    +

    mCaptcha implements leaky bucket algorithm to measure +current traffic levels. Cooldown period specifies the leak or the time +after which a visitor addition is decremented.

    +

    For instance, if initial traffic level is 0 and a user visits one +second later, the traffic level will be incremented to 1. Now, if the +cooldown period is set to 30 seconds, the traffic level will be +decremented after 30 seconds. So after 30 seconds, the traffic level will +go from 1 to 0.

    +

    Difficulty Factor

    +

    Difficulty factor determines the time it takes to solve a CAPTCHA. The +higher the difficulty factor, the longer it will take to generate a +proof of work for it to solve the CAPTCHA.

    +

    mCaptcha’s proof of work based mechanism makes it highly accessible to +people with special needs but it is important to choose the difficulty factor +with care as very high difficulty factors will make the CAPTCHA +inaccessible to users on slow devices.

    +

    Sitekey

    +

    Site key is a unique identifier associated with CAPTCHA configurations +created on mCaptcha. It is required to integrate a CAPTCHA with your +website.

    +

    Visitor Threshold

    +

    mCaptcha’s variable difficulty factor mechanism requires a website’s traffic +statistics be split into levels, so that it can deploy the right +difficulty factor for each level.

    +

    Visitor threshold is used to traffic into levels and mCaptcha accepts a +difficulty configuration for each of these levels. When current traffic +exceeds a difficulty factor, mCaptcha will increase the difficulty +factor to the next configured level.

    +

    For instance, consider the configuration given below:

    +
      +
    • Cool down period: 30 seconds
    • +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    LevelDifficulty FactorVisitor Threshold
    15,0002,000
    250,0005,000
    3500,00010,000
    45,000,00015,000
    +

    If the website sees 2,000 requests in a 30 second window, level 1 +difficulty factor(5,000) will be deployed. If the traffic increases to +5,000 requests in a 30 second window, then difficulty factor will be +upgraded to level 2(50,000). Likewise 10,000 and 15,000 requests over 30 +seconds will result in difficulty factor being upgraded to 500,000 and +5,000,000 respectively.

    +

    Visitor threshold is how mCaptcha determines which difficulty factor +level to deploy. mCaptcha uses leaky bucket algorithm to keep the +visitor threshold constantly updated within the configured cool down +period. So, at any given moment the, the current visitor level will be +the amount of traffic that was served in the cool down period specified.

    +`},{id:15,href:"/docs/webmasters/faq/",title:"Webmasters FAQ",description:"Frequently asked questions related to using mCaptcha as a webmaster",content:`

    Easy Mode: Default cooldown period

    +

    When configuring mCaptcha in easy mode, the default cooldown period is set to 30 seconds.

    +

    How to get site key from dashboard?

    +
      +
    1. Go to “Site keys” on the side panel in the dashboard
    2. +
    +
    +
    + Site key menu option on the dashboard, encircled in red. + +
    +
    +
      +
    1. click on the clipboard button to copy the site key to your +clipboard.
    2. +
    +
    + Copy site key to clipboard. Clipboard button is highlighted in the photo + +
    +`},{id:16,href:"/docs/help/",title:"Help",description:"Help mCaptcha.",content:""},{id:17,href:"/docs/webmasters/",title:"Webmasters",description:"Introduction to mCaptcha for webmasters",content:""},{id:18,href:"/docs/api/",title:"API",description:"Documentation for libraries used in mCaptcha",content:""},{id:19,href:"/docs/",title:"mCaptcha",description:"Docs mCaptcha",content:""},{id:20,href:"/docs/self-hosting/",title:"Self-Hosting",description:"Instructions to self-host mCaptcha",content:""}];e.add(n),userinput.addEventListener("input",s,!0),suggestions.addEventListener("click",o,!0);function s(){var n,i=this.value,s=e.search(i,5),o=suggestions.childNodes,r=0,c=s.length;for(suggestions.classList.remove("d-none"),s.forEach(function(e){n=document.createElement("div"),n.innerHTML="",a=n.querySelector("a"),t=n.querySelector("span:first-child"),d=n.querySelector("span:nth-child(2)"),a.href=e.href,t.textContent=e.title,d.textContent=e.description,suggestions.appendChild(n)});o.length>c;)suggestions.removeChild(o[r])}function o(){for(;suggestions.lastChild;)suggestions.removeChild(suggestions.lastChild);return!1}})() \ No newline at end of file diff --git a/index.min.f18447d9c620cb9696d186b0cc7079f71111f203e448bff2fe9e9b193a06f75a977f586aa48c2372ffc8ddd322c418c5672cc76fe8b7fbd441bc9b4497b01e2c.js b/index.min.f18447d9c620cb9696d186b0cc7079f71111f203e448bff2fe9e9b193a06f75a977f586aa48c2372ffc8ddd322c418c5672cc76fe8b7fbd441bc9b4497b01e2c.js deleted file mode 100644 index e7255d8..0000000 --- a/index.min.f18447d9c620cb9696d186b0cc7079f71111f203e448bff2fe9e9b193a06f75a977f586aa48c2372ffc8ddd322c418c5672cc76fe8b7fbd441bc9b4497b01e2c.js +++ /dev/null @@ -1 +0,0 @@ -var suggestions=document.getElementById('suggestions'),userinput=document.getElementById('userinput');document.addEventListener('keydown',inputFocus);function inputFocus(a){a.keyCode===191&&(a.preventDefault(),userinput.focus()),a.keyCode===27&&(userinput.blur(),suggestions.classList.add('d-none'))}document.addEventListener('click',function(a){var b=suggestions.contains(a.target);b||suggestions.classList.add('d-none')}),document.addEventListener('keydown',suggestionFocus);function suggestionFocus(b){const d=suggestions.querySelectorAll('a'),e=[...d],a=e.indexOf(document.activeElement);let c=0;b.keyCode===38?(b.preventDefault(),c=a>0?a-1:0,d[c].focus()):b.keyCode===40&&(b.preventDefault(),c=a+1

    Security

    Last Edited May 27, 2021

    Security is at the heart of mCaptcha. If you find any discrepancies in -our software(see listing on our GitHub, -services available)

    Rules:

    Before you start

    • Check the list of domains that are in scope for security research -and the list of targets for useful information for getting started.

    • Check the list of bugs that have been classified as ineligible.

    • Check our changelog(in our GitHub repositories) for recently launched -features.

    • Never attempt non-technical attacks such as social engineering, + + + + + + + + + + + + + + Security - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

      + + +
      +
      + +
      + +
      + +

      Security

      +

      Last Edited May 27, 2021

      +

      +

      Security is at the heart of mCaptcha. If you find any discrepancies in +our software(see listing on our GitHub, +services available)

      +

      Rules:

      +

      Before you start

      +
        +
      • +

        Check the list of domains that are in scope for security research +and the list of targets for useful information for getting started.

        +
      • +
      • +

        Check the list of bugs that have been classified as ineligible.

        +
      • +
      • +

        Check our changelog(in our GitHub repositories) for recently launched +features.

        +
      • +
      • +

        Never attempt non-technical attacks such as social engineering, phishing, or physical attacks against our employees, users, or -infrastructure.

      When in doubt, contact -me(@realaravinth) at -realaravinth@batense.net.

      Performing your research

      • Do not impact other users with your testing, this includes testing +infrastructure.

        +
      • +
      +

      When in doubt, contact +me(@realaravinth) at +realaravinth@batense.net.

      +

      Performing your research

      +
        +
      • +

        Do not impact other users with your testing, this includes testing vulnerabilities with CAPTCHA credentials and account credentials of accounts you do not own. If you are attempting to find an -authorization bypass, you must use accounts you own.

      • The following are never allowed for research. We may -suspend your mCaptcha account for:

        • Performing distributed denial of service (DDoS) or other volumetric +authorization bypass, you must use accounts you own.

          +
        • +
        • +

          The following are never allowed for research. We may +suspend your mCaptcha account for:

          +
            +
          • +

            Performing distributed denial of service (DDoS) or other volumetric attacks. Sure, we are a DDoS protection organisation, but with sufficient resources and motivation, it is possible to take us down. For this -reason, we request you to not hurt us.

          • Spamming content Large-scale vulnerability scanners, scrapers, or -automated tools which produce excessive amounts of traffic.

            Note: We do allow the use of automated tools so long as they do +reason, we request you to not hurt us.

            +
          • +
          • +

            Spamming content Large-scale vulnerability scanners, scrapers, or +automated tools which produce excessive amounts of traffic.

            +

            Note: We do allow the use of automated tools so long as they do not produce excessive amounts of traffic. For example, running one nmap scan against one host is allowed, but sending 65,000 -requests in two minutes using Burp Suite Intruder is excessive.

        • Researching denial-of-service attacks is allowed only if you follow -these rules:

          • There are no limits for researching denial of service +requests in two minutes using Burp Suite Intruder is excessive.

            +
          • +
          +
        • +
        • +

          Researching denial-of-service attacks is allowed only if you follow +these rules:

          +
            +
          • +

            There are no limits for researching denial of service vulnerabilities against your own instance of mCaptcha server. We strongly recommend/prefer this method for researching denial of -service issues.

          • If you choose to test on mCaptcha proper (i.e. -https://mcaptcha.org or https://mcaptcha.io):

            • Research must be performed using credentials you own.
            • Stop immediately if you believe you have affected the +service issues.

              +
            • +
            • +

              If you choose to test on mCaptcha proper (i.e. +https://mcaptcha.org or https://mcaptcha.io):

              +
                +
              • Research must be performed using credentials you own.
              • +
              • Stop immediately if you believe you have affected the availability of our services. Don’t worry about demonstrating the full impact of your vulnerability, our team -will be able to determine the impact.

          Handling personally identifiable information (PII)

          • Personally identifying information (PII) includes:

            • legal and/or full names
            • names or usernames combined with other identifiers like phone numbers or email addresses
            • health or financial information (including insurance information, social security numbers, etc.)
            • information about political or religious affiliations
            • information about race, ethnicity, sexual orientation, gender, or other identifying information that could be used for discriminatory purposes
          • Do not intentionally access others’ PII. If you suspect a service +will be able to determine the impact.

          • +
          +
        • +
        +
      • +
      +

      Handling personally identifiable information (PII)

      +
        +
      • +

        Personally identifying information (PII) includes:

        +
          +
        • legal and/or full names
        • +
        • names or usernames combined with other identifiers like phone numbers or email addresses
        • +
        • health or financial information (including insurance information, social security numbers, etc.)
        • +
        • information about political or religious affiliations
        • +
        • information about race, ethnicity, sexual orientation, gender, or other identifying information that could be used for discriminatory purposes
        • +
        +
      • +
      • +

        Do not intentionally access others’ PII. If you suspect a service provides access to PII, limit queries to your own personal -information.

      • Report the vulnerability immediately and do not attempt to access any -other data. We will assess the scope and impact of the PII exposure.

      • Limit the amount of data returned from services. For SQL injection, -for example, limit the number of rows returned

      • You must delete all your local, stored, or cached copies of data +information.

        +
      • +
      • +

        Report the vulnerability immediately and do not attempt to access any +other data. We will assess the scope and impact of the PII exposure.

        +
      • +
      • +

        Limit the amount of data returned from services. For SQL injection, +for example, limit the number of rows returned

        +
      • +
      • +

        You must delete all your local, stored, or cached copies of data containing PII as soon as possible. We may ask you to sign a certificate of deletion and confidentiality agreement regarding the exact information you accessed. We may ask you for the usernames and IP addresses used during your testing to assess the impact of the -vulnerability.

      Reporting your vulnerability

      • Reports must include written instructions for reproducing the -vulnerability.

      • When reporting vulnerabilities you must keep all information on -restricted to email correspondence with us(see below for +vulnerability.

        +
      • +
      +

      Reporting your vulnerability

      +
        +
      • +

        Reports must include written instructions for reproducing the +vulnerability.

        +
      • +
      • +

        When reporting vulnerabilities you must keep all information on +restricted to email correspondence with us(see below for contact). If you believe the bug to be critical, please use -encryption.

      • Do not post information to -video-sharing or pastebin sites.

      • For vulnerabilities involving personally identifiable information, +encryption.

        +
      • +
      • +

        Do not post information to +video-sharing or pastebin sites.

        +
      • +
      • +

        For vulnerabilities involving personally identifiable information, please explain the kind of PII you believe is exposed and limit the amount of PII data included in your bug report. For textual information and screenshots, please only include redacted data in your -bug report.

      • During the course of an investigation, it may take time to resolve +bug report.

        +
      • +
      • +

        During the course of an investigation, it may take time to resolve the issue you have reported. We ask that you refrain from publicly disclosing details regarding an issue you’ve reported until the fix has -been publicly made available.

      We currently don’t have any legal policies in place but rest assured +been publicly made available.

      +
    • +
    + +

    We currently don’t have any legal policies in place but rest assured that as long as your research adheres to the above rules, your security research and vulnerability disclosure activities are considered as -“authorized”.

    A detailed policy based on this sentiment is in the works.

    Scope:

    mCaptcha runs a number of services. Only domains listed below are are +“authorized”.

    +

    A detailed policy based on this sentiment is in the works.

    +

    Scope:

    +

    mCaptcha runs a number of services. Only domains listed below are are eligible for security research. Any mCaptcha-owned domains not listed -below are not in scope and are not covered by our legal safe -harbor

    mcaptcha.org

    • mcaptcha.org
    • demo.mcaptcha.org
    • demo2.mcaptcha.org

    mcaptcha.io

    • mcaptcha.io

    Contact

    Email

    realaravinth@batense.net.

    GPG Key

    Click here to download key

    -----BEGIN PGP PUBLIC KEY BLOCK-----
    +below are not in scope and are not covered by our legal safe
    +harbor

    +

    mcaptcha.org

    +
      +
    • mcaptcha.org
    • +
    • demo.mcaptcha.org
    • +
    • demo2.mcaptcha.org
    • +
    +

    mcaptcha.io

    +
      +
    • mcaptcha.io
    • +
    +

    Contact

    +

    Email

    +

    realaravinth@batense.net.

    +

    GPG Key

    +

    Click here to download key

    +
    -----BEGIN PGP PUBLIC KEY BLOCK-----
     
     mQGNBF7jJtMBDADwoO98P31bTkBmWlkICljq8o+S9ltFab9f9l6Npox+qbCnZUCd
     Y+p1jCmRc+6iBh4N2p5kP/02z6BkW7BhVtPKU9Zg1nvkhluCUSMixUlpn/dUYw2J
    @@ -211,4 +469,40 @@ NXxBvA5ABkcHzULubZWLB3QoKDP5DgEXB4cA7kMDryFPnN2shSdBsWt69g1E3gVo
     zKdOEDuIPIv4f7HhhCDCylGwfwqar5XJwnHQrBXLpwlTm4neDsnEOvOzyd8=
     =gpUQ
     -----END PGP PUBLIC KEY BLOCK-----
    -

    Edit this page on git.batsense.net

    \ No newline at end of file + +

    Edit this page on git.batsense.net

    + + + + + + + + + + + + + + + diff --git a/sitemap.xml b/sitemap.xml index 98e9ec0..8089864 100644 --- a/sitemap.xml +++ b/sitemap.xml @@ -1 +1,292 @@ -/blog/introducing-mcaptcha-net/2023-10-21T16:48:55+05:30weekly0.5/blog/february-2023-monthly-report/2023-03-09T02:30:43+05:30weekly0.5/blog/july-2022-monthly-report/2023-02-13T14:50:39+05:30weekly0.5/blog/june-2022-monthly-report/2022-07-07T20:05:57+05:30weekly0.5/blog/may-2022-monthly-report/2022-06-14T15:39:59+05:30weekly0.5/blog/december-2021-monthly-report/2022-06-14T15:39:59+05:30weekly0.5/blog/survey/2021-12-23T23:26:38+05:30weekly0.5/blog/pow-performance/2021-09-01T15:33:12+05:30weekly0.5/blog/say-hello-to-mcaptcha/2021-12-02T10:25:42+05:30weekly0.5/docs/webmasters/installing-captcha/2023-11-05T02:15:26+05:30weekly0.5/docs/webmasters/configuring-difficulty-factor/2023-10-27T21:39:40+05:30weekly0.5/docs/self-hosting/getting-started/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/bare-metal/2023-10-27T21:39:40+05:30weekly0.5/docs/self-hosting/ansible/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/docker/2023-12-09T03:43:25+05:30weekly0.5/docs/self-hosting/dependencies/2023-12-09T03:43:25+05:30weekly0.5/docs/help/troubleshooting/2022-08-01T22:24:30+05:30weekly0.5/docs/api/browser/2022-08-01T20:24:18+05:30weekly0.5/docs/api/mcaptcha-system/2022-08-01T20:24:18+05:30weekly0.5/docs/api/pow-sha256/2022-08-01T20:24:18+05:30weekly0.5/docs/help/faq/2022-08-01T19:16:21+05:30weekly0.5/docs/user-manual/cli/2023-10-28T01:09:37+05:30weekly0.5/docs/user-manual/how-to-mcaptcha-without-js/2023-10-28T03:16:49+05:30weekly0.5/docs/user-manual/2023-10-28T01:09:37+05:30weekly0.5/docs/webmasters/terminology/2023-10-27T21:39:40+05:30weekly0.5/docs/webmasters/faq/2023-10-27T21:39:40+05:30weekly0.5/about/2023-05-29T16:01:44-04:00weekly0.5/donate/2021-07-16T21:58:39+05:30weekly0.5/contributors/aravinth-manivannan/2021-05-26T14:18:41+05:30weekly0.5/contributors/2021-05-26T14:18:41+05:30weekly0.5/privacy-policy/2021-05-27T19:15:04+05:30weekly0.5/community/2022-08-01T18:47:16+05:30weekly0.5/security/2021-05-27T19:15:04+05:30weekly0.5/thanks/2023-03-08T17:28:52+05:30weekly0.5/2022-08-01T22:26:08+05:30weekly0.5/docs/help/2021-07-21T15:49:53+05:30weekly0.5/docs/webmasters/2023-10-27T21:39:40+05:30weekly0.5/docs/api/2022-08-01T22:24:03+05:30weekly0.5/contact/2021-05-27T18:12:01+05:30weekly0.5/blog/2021-05-26T14:18:41+05:30weekly0.5/docs/2021-07-21T15:49:53+05:30weekly0.5/docs/self-hosting/2023-10-27T21:39:40+05:30weekly0.5 \ No newline at end of file + + + + + /blog/introducing-mcaptcha-net/ + 2023-10-21T16:48:55+05:30 + weekly + 0.5 + + + + /blog/february-2023-monthly-report/ + 2023-03-09T02:30:43+05:30 + weekly + 0.5 + + + + /blog/july-2022-monthly-report/ + 2023-02-13T14:50:39+05:30 + weekly + 0.5 + + + + /blog/june-2022-monthly-report/ + 2022-07-07T20:05:57+05:30 + weekly + 0.5 + + + + /blog/may-2022-monthly-report/ + 2022-06-14T15:39:59+05:30 + weekly + 0.5 + + + + /blog/december-2021-monthly-report/ + 2022-06-14T15:39:59+05:30 + weekly + 0.5 + + + + /blog/survey/ + 2021-12-23T23:26:38+05:30 + weekly + 0.5 + + + + /blog/pow-performance/ + 2021-09-01T15:33:12+05:30 + weekly + 0.5 + + + + /blog/say-hello-to-mcaptcha/ + 2021-12-02T10:25:42+05:30 + weekly + 0.5 + + + + /docs/webmasters/installing-captcha/ + 2023-11-05T02:15:26+05:30 + weekly + 0.5 + + + + /docs/webmasters/configuring-difficulty-factor/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + + /docs/self-hosting/getting-started/ + 2023-12-09T03:43:25+05:30 + weekly + 0.5 + + + + /docs/self-hosting/bare-metal/ + 2024-01-08T00:31:40+05:30 + weekly + 0.5 + + + + /docs/self-hosting/ansible/ + 2023-12-09T03:43:25+05:30 + weekly + 0.5 + + + + /docs/self-hosting/docker/ + 2024-01-08T00:32:17+05:30 + weekly + 0.5 + + + + /docs/help/troubleshooting/ + 2022-08-01T22:24:30+05:30 + weekly + 0.5 + + + + /docs/api/browser/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + + + /docs/api/mcaptcha-system/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + + + /docs/api/pow-sha256/ + 2022-08-01T20:24:18+05:30 + weekly + 0.5 + + + + /docs/help/faq/ + 2022-08-01T19:16:21+05:30 + weekly + 0.5 + + + + /docs/user-manual/cli/ + 2023-10-28T01:09:37+05:30 + weekly + 0.5 + + + + /docs/user-manual/how-to-mcaptcha-without-js/ + 2023-10-28T03:16:49+05:30 + weekly + 0.5 + + + + /docs/user-manual/ + 2023-10-28T01:09:37+05:30 + weekly + 0.5 + + + + /docs/webmasters/terminology/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + + /docs/webmasters/faq/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + + /about/ + 2023-05-29T16:01:44-04:00 + weekly + 0.5 + + + + /donate/ + 2021-07-16T21:58:39+05:30 + weekly + 0.5 + + + + /contributors/aravinth-manivannan/ + 2021-05-26T14:18:41+05:30 + weekly + 0.5 + + + + /contributors/ + 2021-05-26T14:18:41+05:30 + weekly + 0.5 + + + + /privacy-policy/ + 2021-05-27T19:15:04+05:30 + weekly + 0.5 + + + + /community/ + 2022-08-01T18:47:16+05:30 + weekly + 0.5 + + + + /security/ + 2021-05-27T19:15:04+05:30 + weekly + 0.5 + + + + /thanks/ + 2023-03-08T17:28:52+05:30 + weekly + 0.5 + + + + / + 2022-08-01T22:26:08+05:30 + weekly + 0.5 + + + + /docs/help/ + 2021-07-21T15:49:53+05:30 + weekly + 0.5 + + + + /docs/webmasters/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + + /docs/api/ + 2022-08-01T22:24:03+05:30 + weekly + 0.5 + + + + /contact/ + 2021-05-27T18:12:01+05:30 + weekly + 0.5 + + + + /blog/ + 2021-05-26T14:18:41+05:30 + weekly + 0.5 + + + + /docs/ + 2021-07-21T15:49:53+05:30 + weekly + 0.5 + + + + /docs/self-hosting/ + 2023-10-27T21:39:40+05:30 + weekly + 0.5 + + + diff --git a/thanks/index.html b/thanks/index.html index 55980d1..357dc3e 100644 --- a/thanks/index.html +++ b/thanks/index.html @@ -1,11 +1,195 @@ -Thanks - mCaptcha

    Thanks

    Funding

    NLnet

    NLnet NGIZero logo


    2023 development is funded through the NGI0 Entrust -Fund, via NLnet. Please -see here for more details.

    Free software libraries and tools

    mCaptcha is built entirely using free software libraries tools. We are + + + + + + + + + + + + + + Thanks - mCaptcha + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

    + + +
    +
    + +
    + +
    + +

    Thanks

    +

    +

    Funding

    +

    NLnet

    +
    + NLnet NGIZero logo +
    +
    +

    2023 development is funded through the NGI0 Entrust +Fund, via NLnet. Please +see here for more details.

    +

    Free software libraries and tools

    +

    mCaptcha is built entirely using free software libraries tools. We are grateful for all maintainers and contributors for their time and effort -in making them!

    Creative Commons licensed artwork

    mCaptcha shied logo is derived from this -photo captured by Paweł +in making them!

    +

    Creative Commons licensed artwork

    +

    mCaptcha shied logo is derived from this +photo captured by Paweł Czerwiński. You can check out -their work at:

    Edit this page on git.batsense.net

    \ No newline at end of file +their work at:

    + + +

    Edit this page on git.batsense.net

    + +
    +
    + +
    +
    + + + + + + + + +