User registrations are re-enabled, captchas added to registration process

submitted by magnora7[A] from self.SaidIt

As we recover from the previously-mentioned attack, here: https://saidit.net/s/SaidIt/comments/10qz/saidit_is_back_online_after_a_few_days_of_attacks/

we are beginning to re-introduce the 4 features that we've identified as potential vectors of attack. Our first priority is to re-enable registration as we know many people are waiting to join saidit. So now we have a new registration captcha, which will help protect saidit from automated registrations. Also as a new user it's possible you may see captchas until you get a vote from someone else, we are testing this secondary feature.

We are next working to restore thumbnails, chat, and title suggestions. These are more difficult though, and may require us to set up a second server, so it may be a few days or weeks as we get to each one.

all 12 comments
sorted by:
top
newinsightfulfun

[–]magnora7[S] 11 insightful - 2 fun11 insightful - 1 fun12 insightful - 2 fun -  (2 children)

We are still under attack, and they're constantly rotating IP addresses all from Amazon Cloudfront apparently, but luckily our cloudflare is blocking most of it as they don't have our real IP this time.

We had to turn the cloudflare security settings up a little so it may cause some people using the android app to be unable to connect. If you experience this, please let us know here, as we're having to experiment with the DDOS settings a bit to keep the site from being overwhelmed by the attack but still remain open for everyone to use.

Thanks everyone.

[–]Tom_Bombadil 4 insightful - 1 fun4 insightful - 0 fun5 insightful - 1 fun -  (1 child)

Is Saidit now on Amazon servers? :-0

[–]magnora7[S] 4 insightful - 2 fun4 insightful - 1 fun5 insightful - 2 fun -  (0 children)

LOL hell no, never

[–][deleted]  (5 children)

[deleted]

    [–]magnora7[S] 6 insightful - 2 fun6 insightful - 1 fun7 insightful - 2 fun -  (4 children)

    It's in the works. We have to buy another server and set it up to be a proxy media server, it's complex so give us a bit.

    [–][deleted]  (3 children)

    [deleted]

      [–]magnora7[S] 5 insightful - 2 fun5 insightful - 1 fun6 insightful - 2 fun -  (2 children)

      You're welcome

      [–][deleted]  (1 child)

      [deleted]

        [–]magnora7[S] 3 insightful - 2 fun3 insightful - 1 fun4 insightful - 2 fun -  (0 children)

        Yes easily. It can theoretically scale to the same size of reddit. We can do 30k unique visitors a day no problem with our current setup

        [–]Justin 6 insightful - 1 fun6 insightful - 0 fun7 insightful - 1 fun -  (0 children)

        Just signed up, glad this handle was available haha.

        [–]m68k 3 insightful - 1 fun3 insightful - 0 fun4 insightful - 1 fun -  (2 children)

        As long as it's not like Discord's use of Google Captcha. which I get everytime I have a IP address change, let along spending 15+ minutes trying to pass Google Captcha, which tends to time out causing me giving up. :P

        Sucks people have no lives and will attack sites that don't share the same opinion.

        [–]magnora7[S] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (1 child)

        Yeah it shouldn't be that onerous. Just once when you sign up, and then every time you post until you get one vote from someone else (but we might turn this second part off eventually). So once you get the username and one vote from someone else you should be good

        [–]m68k 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

        Ah, sounds good. :) This makes sense, unlike what Discord does.

        BTW, that's the reason I don't use Discord anymore, simply because of how they set Captcha up.

        [–]painstakingly 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (1 child)

        I haven't had the need to create a new account since this was implemented, but I really hope you avoided Google©® reCAPTCHA™.
        Giving their AI more free slave labor would be a very sad thing.

        [–]magnora7[S] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

        No we have our own proprietary captcha system