Topic: FaucetBOX.com Discussion - page 115. (Read 237001 times)

I had an attack of ip's from Ukraine guess exploiting a vulnerability on FunCaptcha. FunCaptcha disabling stopped emptying the faucet.

My error_log have this line

[08-Oct-2015 00:12:11 UTC] PHP Notice:  Undefined index: HTTP_USER_AGENT in /libs/funcaptcha.php on line 88

Anyone know anything about this?

Thanks!

Kaz, I've been botted/hacked again. Please can you help me work out the vector, I've lost 0.2BTC...

How does this stuff happen?

I've PMed you, PLEASE get back to me and also let me know which address withdrew the coins...

finally i got my payment 48 hours later.wait  a little.they are paying very late

Is there any problem with faucetbox paying? I can not have any payment from faucetbox more than 48 hours.

Hi Misterbit,

You can change to the "always enhanced" security option so FunCaptcha always shows three challenges. See how to do it here:
http://support.funcaptcha.com/customer/en/portal/articles/1760933-what-is-%E2%80%9Csecurity-level%E2%80%9D-in-the-options-

Kind regards,
Matt

Hi Misterbit,

You can change to the "always enhanced" security option so FunCaptcha always shows three challenges. See how to do it here:
http://support.funcaptcha.com/customer/en/portal/articles/1760933-what-is-%E2%80%9Csecurity-level%E2%80%9D-in-the-options-

Kind regards,
Matt

Hello, to the funcaptcha can it change you the number of operations to solve? If so, where?
in funcaptcha.php?

Hi
I'm thinking about creating a faucet with faucetbox. I'm not sure if it's a good idea so I'm looking for advice. I apologize if these questions have been asked before
Be honest, can a faucet be profitable?

How much to put in balance at the beginning?

How much to give at every claim (rewards)?

Which captcha is better to avoid bots?

What are the best ad networks (to cover the costs of the faucet)?

Hi to all i just want to know what is the best way to  have more visitor to your faucet. Im just asking. im doing share on facebook but still low taffic. Guys can you suggest some ways..

Hi Alex48,

How do you know it is a guess exploit? Did you see the attacker getting FunCaptcha wrong more often than right?

You are correct that at default settings, an attacker using a lot of clean IPs (which have no bad record of failing FunCaptcha and are not on the StopForumSpam list) can do a guessing attack which solves FC 1/8th of the time. With massive quantities against a sensitive faucet, that can be significant. You can address this by going to your FunCaptcha dashboard and setting your security to "Always enhanced". This means that the best results a guessing attack can get is 1/512. Or, if you tolerate the guessing attack for a little while, the pool of clean IPs will become tainted and guessing will no longer work well.

As an identity (basically IP, though we are always improving this to extend beyond IP) builds up a poor record of solving FunCaptcha (which random guessing will do), the number of required FunCaptcha challenges increases, making guessing highly impractical. If needed, we can strengthen this further-- just contact us to arrange it. You can see more here:
http://support.funcaptcha.com/customer/en/portal/articles/1760933-what-is-%E2%80%9Csecurity-level%E2%80%9D-in-the-options-
http://support.funcaptcha.com/customer/en/portal/articles/1838700-why-do-i-sometimes-need-to-do-more-or-fewer-game-challenges-

I'm sorry to hear this affected your faucet and with this explanation, I hope you switch back to FunCaptcha. We will keep making it stronger all the time-- and we are literally the only company in the world entirely and actively dedicated to making the best CAPTCHA.

Kind regards,
Matt
COO, FunCaptcha