2
votes
4answers
410 views

How to prevent users from downloading information from our search engine?

We have developed a search engine (simple search, no login required) where users can search details in the database (Apache Lucene) by entering their name (et. al.), then clicking the search button. ...
3
votes
2answers
153 views

What are the security benefits of reset all fields if captcha was failed?

Most of the sites will empty the password field when you fail the CAPTCHA, and often they reset all the fields as well. Is there any security benefit on doing this?
0
votes
4answers
179 views

How to secure my captcha application?

Hello information security stack exchange! I made a captcha application in PHP. It's certainly not a great idea to do so, but I was bored and I wanted to learn about B├ęzier curves and Bresenham line ...
6
votes
4answers
3k views

Why Do we Need CAPTCHA? In what case we should use it?

In what case we should implement Captcha based security?. How accurate it is and if there exists any alternatives for Captcha based Security.
0
votes
1answer
251 views

Protect database resources from fake data inputs via web forms

Scenario: I'm working on a project that needs to accept large amounts of data (customer data) from its users. So it can be normal to have a user trying to add 10,000 or 100,000 records at a time. In ...
5
votes
5answers
1k views

How does CAPTCHA mitigate DDoS attacks?

This seems like an easy question, but I've failed to find an answer. One of the uses of CAPTCHA is to cope mitigate Denial of Service attacks. Suppose an adversary performs excessive login attempts, ...
1
vote
1answer
254 views

How reliable/secure is QCaptcha?

QCaptcha is an alternative way to protect a website from bots. It required a drag and drop action like this: Question How reliable is this implementation when compared to others mentioned on ...
3
votes
4answers
791 views

Can a CSRF CAPTCHA be defeated?

One defense that developers use to protect against a CSRF attack is to implement a CAPTCHA in critical steps. A CAPTCHA ensures that a human is at the keyboard approving the activity. But I've ...