You are not logged in.
Pages: 1
When registrating, why do they need to know the output of the command:
date -u +%j$(uname) | sha256sum | sed 's/\W//g'
What does it do?
[Arch64 | awesome]
Offline
I guess it's a CAPTCHA
Offline
oh really? i thought it was getting my system info...
[Arch64 | awesome]
Offline
Run it without the hash to see what it does. It does not gather anything about your computer, so don't worry.
Offline
When registrating, why do they need to know the output of the command:
date -u +%j$(uname) | sha256sum | sed 's/\W//g'
What does it do?
65Kid hit the nail on the head. A while back, the forums were being inundated with bottom feeding spammers. That little "Test" was put in place to filter out anyone who was not serious about running a Linux system from a command line. It is certainly over the head of the most of parasites that would spew their garbage on the forums.
Edit:: And no, it does not gather anything. Note that the input to the hash is the kernel you are running and the date. Those are fed into the SHA-2 hash which is nothing more than a signature of the input data -- the original inputs cannot be recovered from the hash. At our end, we know the date, and we know what the kernel is. We generate a hash of those as well. If the hash your system provides matches the hash that we generate, your in -- you become part of the club
Last edited by ewaller (2012-05-14 15:11:32)
Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
Sometimes it is the people no one can imagine anything of who do the things no one can imagine. -- Alan Turing
---
How to Ask Questions the Smart Way
Online
And if the hash your system provides doesn't match .... well, you don't want to know what happens to those people. It's not pretty.
"UNIX is simple and coherent..." - Dennis Ritchie, "GNU's Not UNIX" - Richard Stallman
Online
The previous registration question wasn't all that easy either ;-)
https://bbs.archlinux.org/viewtopic.php?id=97222
Offline
We once had a dude MD5'ing the date. I still can't get the pictures out of my head.
Offline
it was funny because i remembered i do not have access to internet on my arch system yet, and i need to ask a question in the forums. when the "captcha" came, i was like wut?
had to read word by word from the screen, type word by word into arch (gosh sure hope the result is short).
oh guess what. one long string of numbers.
had to read number by number from arch, type number by number into pc.
fun and eye-opening experience nevertheless
Offline
fun and eye-opening experience nevertheless
You can use this: https://bbs.archlinux.org/viewtopic.php … 51#p999551 and register from a non-Arch system.
Offline
It would definitely be difficult to run that command line from inside Windows!
I may have to CONSOLE you about your usage of ridiculously easy graphical interfaces...
Look ma, no mouse.
Offline
It would definitely be difficult to run that command line from inside Windows!
gnu tools for Windows do exist, as does cygwin. You can also fire up a VM with some Linux distro ;P
Offline
65Kid hit the nail on the head. A while back, the forums were being inundated with bottom feeding spammers. That little "Test" was put in place to filter out anyone who was not serious about running a Linux system from a command line. It is certainly over the head of the most of parasites that would spew their garbage on the forums.
Edit:: And no, it does not gather anything. Note that the input to the hash is the kernel you are running and the date. Those are fed into the SHA-2 hash which is nothing more than a signature of the input data -- the original inputs cannot be recovered from the hash. At our end, we know the date, and we know what the kernel is. We generate a hash of those as well. If the hash your system provides matches the hash that we generate, your in -- you become part of the club
oh, that's smart
[Arch64 | awesome]
Offline
nomorewindows wrote:It would definitely be difficult to run that command line from inside Windows!
gnu tools for Windows do exist, as does cygwin. You can also fire up a VM with some Linux distro ;P
Doesn't the command expect the output to be "Linux"? What does "uname" return under cygwin?
Regardless, installing a working POSIX environment if you don't have one just to register on a forum is not KISS.
As for blocking bots, it can't be that hard to write a bot to parse the registration page and return the expected output. It only blocks bots now because no one has targeted this forum specifically.
My Arch Linux Stuff • Forum Etiquette • Community Ethos - Arch is not for everyone
Offline
The problem are not the usual bots, but humans. These days they pay some poor guys a few cents a day to break captchas. I tried all kinds of different questions; problem was they could be easily solved using google or wikipedia.
There is already a lengthy thread with all answers you are looking for; but again: we are targeting competent linux users; so if this test is a little more difficult on windows it's not a real issue.
Anyway, if someone comes up with a better idea that has a similar success rate, let me know. (Questions like "Who created Arch Linux" or "What's the md5sum of the latest ISO" got bypassed after a short time.)
Offline
The problem are not the usual bots, but humans. These days they pay some poor guys a few cents a day to break captchas. I tried all kinds of different questions; problem was they could be easily solved using google or wikipedia.
There is already a lengthy thread with all answers you are looking for; but again: we are targeting competent linux users; so if this test is a little more difficult on windows it's not a real issue.
Anyway, if someone comes up with a better idea that has a similar success rate, let me know. (Questions like "Who created Arch Linux" or "What's the md5sum of the latest ISO" got bypassed after a short time.)
I was looking for something on amiga.org forums, and they used those kinds of questions just to use the search function!
I may have to CONSOLE you about your usage of ridiculously easy graphical interfaces...
Look ma, no mouse.
Offline
The current approach works. I've yet to see a compelling (or even plausible) reason to change it...
Offline
The current approach works. I've yet to see a compelling (or even plausible) reason to change it...
Though I (and I presume jason as well) would be all for a system which is even harder, perhaps involving counting the number of options in our default kernel config set to 'M'
Allan-Volunteer on the (topic being discussed) mailn lists. You never get the people who matters attention on the forums.
jasonwryan-Installing Arch is a measure of your literacy. Maintaining Arch is a measure of your diligence. Contributing to Arch is a measure of your competence.
Griemak-Bleeding edge, not bleeding flat. Edge denotes falls will occur from time to time. Bring your own parachute.
Offline
Pages: 1