Diaspora: No Bot check at the login

[EyeBook888]

I just notes that there is no "verify that you are a human"-Check in the login. To add one may make sense to prevent brute force attacks. Maybe there is the possibility to ask for a verification after you enter a wrong password for the third time or something like that.

[tursiops33]

A recaptcha would totally suit that.

[0verk1ll]

You would need to be careful with a captcha. Some users may not be able to get past it if they are using Tor, i2p, etc.
Also the captcha would have to be open source and not send statistical information about logins to some third party (for privacy reasons).

[Flaburgan]

If the target here is to avoid brute force attacks, we could simply add a wait time after more than 5 wrong passwords. Not need for a captcha at each log in.