NEW FUNCTIONALITY: Google reCAPTCHA v3

wrote:

On what page would we enable these features?

We will handle the enabling for now.

I was going to post a moan and groan comment about this idea, as I'm tired of having to, each time I log in to the Coursera site for online education, clicking on all the stupid bicycles or crosswalks (ugh), but it looks like V3 does away with that nonsense. I assume you've noticed bot problems and thus have decided to implement this. If so, thumbs up.

wrote:

I was going to post a moan and groan comment about this idea, as I'm tired of having to, each time I log in to the Coursera site for online education, clicking on all the stupid bicycles or crosswalks (ugh), but it looks like V3 does away with that nonsense. I assume you've noticed bot problems and thus have decided to implement this. If so, thumbs up.

Thank you. We are trying to go about this wisely. We are very aware of the need to balance increased security with ease of use.

Ok, I have now added the reCAPTCHA stuff to the Contact Us and Set Member Password forms. You will see the badge at the bottom right of the screen when those forms are loaded.

I will likely also add it to the Login Dialogs.

One possible concern I am seeing is that while the badge is fine on desktop screens, it may be a bit too big for small screens. (like a phone screen) I am interested in hearing users' thoughts on that. Google does provide an approved workaround for the case of not wanting to use the official reCAPTCHA "badge", but I want to hear what people think first.

Ok, I have now added the reCAPTCHA stuff to the Admin and Member Login dialogs.

I also went ahead and decided to show the Google approved alternate text on the forms for small screens (e.g. phones) instead of the animated Google reCAPTCHA badge. While the badge did not seem to be a big issue on the small screens, screen space is at a premium there, so I would rather not have any part of small screens obscured by the badge if I can help it.

*** At this point, I have added the reCAPTCHA stuff to all the locations that I had planned to--I believe that Phase 1 of the implementation is *complete*. (feel free to suggest other locations) Now, we are just going to passively collect information for about a month to give Google's code some "baseline" information on our user's behavior so it can properly do the risk analysis (for bot vs non-bot) moving forward after that.

Once I think Google has collected enough information (probably in about a month), then I will proceed to Phase 2 of the implementation: figuring out what should be the default threshold for the risk analysis score, implementing an admin notification scheme for cases where a bot has been detected / blocked, and figuring out exactly what we should do if Google detects a bot.

I am interested in user feedback on this... Has anyone noticed any problems as of yet with the forms/dialogs that have the reCAPTCHA implemented in them?