-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> As some folks may recall, an action=createaccount was added to the
> API a few weeks ago. Unfortunately the first pass didn't include
> CAPTCHA support, so we haven't been able to use it for the live
> sites yet (which use ConfirmEdit's "FancyCaptcha" mode). We expect
> to start using this in the next couple weeks for the mobile Commons
> apps, so it's time to make it captcha-friendly...
> 
> I've made a first stab at adding support, based on the existing
> captcha interfaces for login and editing:


Several questions:

# Will the action=createaccount be disabled by default?
# If enabled, is the action=createaccount reserved to a specific user
group?
# At first blush this appears to be designed to enable xrumer bruting.
Have you considered adding optional single-use otf image creation for
fancy captcha, which would be more cost effective on small wikis?
# There are several private modules for ConfirmEdit, as well as sites
using different captchas based on ConfirmEdit (Asirra?) How might this
interact with a site using a different (non-supported) captcha module?

Amgine
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRQzPrAAoJEBGze5c9ley6rQcH/1GLFIZI1Z89sQsMq9qv5xlP
eCsYN6kT1JLUrl0Z5w35msvCQFePyCWJYq/QRi/V5lNKIfVoQ9K+v9fhIQ9tW2UV
BH7vcHfQCSmr4tN3RfVzjUy2uqjeoFCG4kbrm6pISHLHvc5ukZKQiJQdmwbBqwnQ
arR5pYeH7ss9Jqyt2eDzC2kcBC9Oy5XlDCUQ9oIZyTEKu5IUM4jGanSzyfd05uSx
j/hGJP4wmRSNeyV5xqNfYk1YljxjS31GjBOAGp2d7pz3+Bqan67eIugn9hPLaOQj
yuHp8clbz+mOVgBgntloJQ78cYwUk6+c0q0I9l39Anht0kCgJoK+qb4kyE/y7/0=
=ZUpf
-----END PGP SIGNATURE-----

_______________________________________________
Mediawiki-api mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-api

Reply via email to