Topic: FaucetBOX.com Discussion - page 116. (Read 237020 times)

Hi Alex48,

How do you know it is a guess exploit? Did you see the attacker getting FunCaptcha wrong more often than right?

You are correct that at default settings, an attacker using a lot of clean IPs (which have no bad record of failing FunCaptcha and are not on the StopForumSpam list) can do a guessing attack which solves FC 1/8th of the time. With massive quantities against a sensitive faucet, that can be significant. You can address this by going to your FunCaptcha dashboard and setting your security to "Always enhanced". This means that the best results a guessing attack can get is 1/512. Or, if you tolerate the guessing attack for a little while, the pool of clean IPs will become tainted and guessing will no longer work well.

As an identity (basically IP, though we are always improving this to extend beyond IP) builds up a poor record of solving FunCaptcha (which random guessing will do), the number of required FunCaptcha challenges increases, making guessing highly impractical. If needed, we can strengthen this further-- just contact us to arrange it. You can see more here:
http://support.funcaptcha.com/customer/en/portal/articles/1760933-what-is-%E2%80%9Csecurity-level%E2%80%9D-in-the-options-
http://support.funcaptcha.com/customer/en/portal/articles/1838700-why-do-i-sometimes-need-to-do-more-or-fewer-game-challenges-

I'm sorry to hear this affected your faucet and with this explanation, I hope you switch back to FunCaptcha. We will keep making it stronger all the time-- and we are literally the only company in the world entirely and actively dedicated to making the best CAPTCHA.

Kind regards,
Matt
COO, FunCaptcha

Hey Kazuldur

Could you move the legend saying
[Referral payouts]
[Normal payouts ]
from top-right to bottom-left or top-left?

It is annoying if you try to get better every day ... the latest day is always below the legend.


Also could you also make:
Faucets payouts history: contain 30 rows instead of 15?

I never had a problem with reCaptcha, however it should probably be changed either way. If you read a few pages back (10-20 now probably) you can see that there was a large problem with captchas like reCaptcha and SolveMedia being botted. Unless this has stopped - which I somewhat doubt - it probably isn't best to use them right now.

Thanks @minifrij

I did change FunCaptcha and left empty the faucet, could only be 30,000 satoshis  

In twelve hours have made 2,500 requests to index.php

In any case owners of faucets should change captcha to Funcaptcha and AreYouAHuman because reCaptcha was recently a big problem to solve, especially those street signs which must be solved by a few times to get correct captcha

This likely means that a user visiting did not leave a USER_AGENT header, most likely meaning it was not a real person visiting your page. If the USER_AGENT header wasn't left, it probably means that they weren't using an actual browser to visit your site, more a piece of code.
Pretty amateur of whoever made it not to leave that header when requesting the page though.

As for your captcha problems, changing the captcha on your faucet every once and a while doesn't hurt. Maybe changing it between Funcaptcha and AreYouAHuman, as they are two somewhat bot-proof captchas.

You have ACL enabled in your FaucetBOX.com Dashboard in "Security" tab and you didn't add Faucetfly's IP address to the whitelist.

I visited my dashboard after some users complained that they didn't receive their funds. Then I got this in the API page:
Error: 401- Disallowed IP
Scrn shot hosted on imgur:
http://imgur.com/9a8m6Tn
I am using faucetfly and since Monday, my users weren't able to claim ("claimed" on faucetfly, no funds transferred to their address in faucetbox)
Any reasons that faucetfly's IP is blocked/broken?
Help pls... I need this up and running ASAP.

I had an attack of ip's from Ukraine guess exploiting a vulnerability on FunCaptcha. FunCaptcha disabling stopped emptying the faucet.

My error_log have this line

[08-Oct-2015 00:12:11 UTC] PHP Notice:  Undefined index: HTTP_USER_AGENT in /libs/funcaptcha.php on line 88

Anyone know anything about this?

Thanks!

We're seeing an unusually high amount of traffic, but not enough to call it a DDoS. It seems to be enough to cause issues though...
I've implemented some simple countermeasures, it should be a bit better now.

May be there is some DoS or DDos. Today and few recent days several bitcoin banner networks also was under hard Dos/DDos. Some HUGE market players want make influence on micro payment systems, for example faucets and their aggregators like faucetbox.

10000 ATOSHI WAS SENT TO YOU
is this  still sent in circumstances faucetbox offline?

i read this when a website is offline

I am also experiencing issues with FaucetBOX at the moment. Any updates from FaucetBOX?

Seems better now  

edit.
nevermind...still not stable.

Also the website has a lot of issues with loading so they aren't in a normal maintenance. Seems like a problem with servers or a ddos attack.

Are there someone here logging as admin and using faucetbox normally?

faucetbox is under maintenance?

I guess yes.

I'm having the same error here.

I tryied to claim in my faucet and nothing happens.

Hi sir can get some tips if how to have huge traffic on my faucet?

Error connecting to FaucetBOX.com API. Either your hosting provider doesn't support external connections or FaucetBOX.com API is down. Send an email to [email protected] if you need help.

is faucetbox API down?

Let us judge that