Per https://www.mediawiki.org/wiki/CAPTCHA , any captcha which can be guessed with 1 % probability or more is broken, because bots can retry infinitely. We are way over that, so it's important to reduce bot attempts.
However are captchas are also (or mostly) hard for humans, so we can't be too restrictive.
| Subject | Repo | Branch | Lines /- | |
|---|---|---|---|---|
| Set $wgRateLimits['badcaptcha'] to counter bots | operations/mediawiki-config | master | 14 -1 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Nemo_bis | T92376 Set $wgRateLimits['badcaptcha'] to counter bots | |||
| Resolved | Florian | T48292 ConfirmEdit should block IPs after a set number of failed CAPTCHA attempts |
Change 195886 had a related patch set uploaded (by Nemo bis):
Set $wgRateLimits['badcaptcha'] to counter bots