Forums » Bugs

Captchas aren't working

Jul 01, 2022 draugath link
I've noticed a couple times that the Captchas don't seem to be working once logged in. I did have plugins loaded, but I don't think that should matter in this case.

Here is some output from errors.log.

WNET_SERVNOTIFY_CAPTCHA_NOTIFY
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5170
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5171
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5173
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5174
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5176
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5177
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5179
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5180
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5182
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
(os.time()-idle_since): 5183
AreHostilesNear(4000): false
not PlayerInStation(): true
playerhasmoved: false
Jul 04, 2022 Snib link
You might want to add what client that is because at least the Windows release client has those debug messages all commented out.
Jul 04, 2022 draugath link
This is happening on the Linux 64 client.

One detail I forgot to mention, this issue has thus far only been observed in space. I have not been docked when it has occured. The messages also only show up after a captcha warning has been given.

Snib, do you receive any captchas or warnings of them at all after logging in?
Jul 04, 2022 greenwall link
When you say they aren't working, are you saying you aren't getting kicked off for putting in the wrong code (or failing to respond), or you are getting kicked off despite puttin in the the right code? Or something else?
Jul 04, 2022 draugath link
No captcha is being displayed when it should be. I've gone to sleep or work and come back with a client still logged in. This of course, as mentioned, is only when logged in. The captcha displayed when logging in (if you are lucky enough to have earned one) still shows up.
Jul 04, 2022 Snib link
> Snib, do you receive any captchas or warnings of them at all after logging in?

I've never received a captcha or afk warning, but I don't think I should have, I'm not online afk long enough to earn one. I can pop one up manually just fine though, also in space: /lua ProcessEvent("DO_AFK_CHECK")

Only getting that warning in space is working as intended btw, although those debug lines are from when it thinks it has not warned you yet (if you go near hostiles when it checks then it should warn you and the messages would go away).
Jul 06, 2022 incarnate link
draugath, captchas are working correctly. But, thanks for bringing that debug information to our attention, it was not supposed to be enabled in any production client.
Jul 06, 2022 draugath link
I'm curious, then, why my clients in space have not been getting kicked off by a captcha.. They used to before the debug information started getting printed. As I mentioned, a few times I've let the client run for long periods of time (8+ hours) to still be logged in when I came back

I know you've said there are algorithms at work to handle these things, that youre not going to go into detail on, but my experience has been that I get one usually around 1-2 hours. Multiple times I've received the Imminent captcha message but never a captcha.
Jul 06, 2022 incarnate link
Well, first of all, Premium Subscriber accounts get more leeway than Freemium / Lite accounts, as they're at least providing some recompense for the increased server overhead that they cause.

Beyond that, I can guess why you may have had a different experience at another time, but I can't actually explain it without getting into the specific algorithms and heuristics of how the system works. Which, as you mentioned, we don't want to reveal in detail, as that knowledge directly improves an attacker's ability to circumvent the system.