• Maybe a noob question, but what's stopping a bot having a user login so it can trawl the rest of the site? Surely that would only take a human somewhere to log it in with a legit device and just let the bot free to trawl the hidden parts of the forum.

  • We don't actually use ReCAPTCHA.

    We rely on the fact that they need JavaScript to launch a dialog and navigate a passwordless email flow and then populate the dialog.

    It turns out it is very very effective.

    We have spammers, those ones are humans.

About