Reputation
665
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 7 10
Impact
~46k people reached

  • 0 posts edited
  • 0 helpful flags
  • 34 votes cast
May
2
comment Why re-verify with CAPTCHA on failed form entry?
@João Portela, i don't know where in my comment i stated that. Do I?
May
2
comment Why re-verify with CAPTCHA on failed form entry?
for example, forms that allows the hacker to do user enumeration. e.g: if in the error message you can identify if the user that you are trying to create already exist. You can use it to find valid users and then do a more precise bruteforce :-)
May
2
comment Why re-verify with CAPTCHA on failed form entry?
i fixed my answer :-)
Apr
26
comment Why re-verify with CAPTCHA on failed form entry?
what you mean with "another CAPTCHA"? it did ask once and then after an failed login attempt, it show one another CAPTCHA?
Apr
26
comment Why re-verify with CAPTCHA on failed form entry?
no if the site, without CAPTCHA is vulnerable to CSRF. The browser being authenticated don't means that the user is authenticated to do this action. Example: h-online.com/security/…