Captcha? Eye-roll. Also, it don't work

Kahomono · October 15, 2021, 10:11pm

The captcha that presents if one asks to delete the files along with a backup config is:

A) Insulting
B) Broken
C) Both

But you already know the answer is, Both.

It presents six letters, all in upper-case. But only accepts the response in lower-case.

ts678 · October 15, 2021, 10:53pm

Works fine on Windows in any case (even mixed), and it rejects if I type the letter wrong.
Maybe Linux is different?

Kahomono · October 16, 2021, 5:48am

Of course Linux is different or I wouldn’t use it

warwickmm · October 16, 2021, 4:41pm

Our captcha implementation is case-insensitive. On my Linux machine, it works as expected. I can use lower, upper, or mixed case.

Kahomono · October 16, 2021, 6:58pm

I twice tried to respond in upper-case to an all-upper-case prompt. Twice it failed. Tried one more time, responding all-lower-case and it worked.

Don’t prompt in all upper-case if any case or lower case is expected. By convention, a prompt in all-upper-case means that an upper case response is expected.
Don’t use captcha for this purpose because ewwww. Just an AreYouSure prompt would be fine.

–David

p.s. I am already busting my butt testing performance v. blocksize so I will not be spending any more time testing this.
p.p.s. For a software system as fine as duplicati it was a shock of disappointment to encounter a captcha. Yuck, yuck, yuck.
p.p.p.s I am peacing out of this thread.

warwickmm · October 16, 2021, 7:15pm

FYI, the introduction of the captcha was discussed here:

github.com/duplicati/duplicati

advanced deleting of backup configs

opened 11:58AM - 14 Nov 14 UTC

closed 07:45PM - 13 Oct 16 UTC

donestefan

When selecting "delete Configuration" in the GUI it might be a good idea to use… the following Popup to - offer exporting the configuration to a file before deleting - offer deleting the local database in the same step (to avoid cluttering the duplicati config folder with old configurations). Maybe one should even point out that deleting the database does not render the backup data useless, since the local database can easily be rebuild from the Backup destination when re-importing a configuration. - even offer deleting the actual backup data Quite a few users might not be aware that all this is worth considering... And when you already deleted a Backup Configuration it's very difficult to find out which database was associated with it (so you can delete it later). It might be worth stating that clearly before the user deletes the config. ## <bountysource-plugin> Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/6017969-advanced-deleting-of-backup-configs?utm_campaign=plugin&utm_content=tracker%2F4870652&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F4870652&utm_medium=issues&utm_source=github). </bountysource-plugin>

Kahomono · October 17, 2021, 12:18am

A captcha for this safeguard reminds me of those pranksters who put counters for entering phone numbers.

What you want is a yes-no box with No as the default and a stern warning. Two of them in series, if you need to satisfy the nervous.

Captchas are for making sure bots don’t spam your login screens. Oh and they suck at that too but at least using them THERE is using them for the intended purpose.

ts678 · October 17, 2021, 1:05pm

Please Remove the Captcha Added in #1201 #4625 just got filed, which at least formally tracks the ask.

This one seemingly was trying to hinder bots from reaching around the GUI and deleting backup directly.
Whatever the proposed new plan is (note I don’t do JavaScript) should give equivalent delete protection.

The CAPTCHA was added below, and the main complaint I recall is libs/font pain on some Linux distros.