Re: Implement proof-of-work CPU altcoin mining instead of CAPTCHA
There is CAPTCHA on login. It is here to protect the site from bots and bruteforcing. But it is annoying.
There is an option to replace it with proof-of-work mining of CPU-only altcoins
There is an option to replace it with proof-of-work mining of CPU-only altcoins
Why would anyone open it's login for bots just because captcha is annoying for people? Do you imagine how high the hash-rate for the CPU-only coins, because the bot farms? And not everyone is using really strong password, because humans etc.
I think switching to PoW instead of captcha would introduce huge vulnerability.
Every failed login attempt should increase difficulty. Say, the difficulty-increase multiplier is 2 (per one nickname). If first attempt takes 1 CPU-second (default difficulty), 8th will take minute and 100 attempts will take ages (imagine 2^100 seconds). Meanwhile the attacker's hashrate will work to fund Bitcointalk forum
What if someone else with malicious intents increases difficulty for your nickname, intentionally making wrong attempts ? Ooops, and in order to login you need to do a couple of giga-hashes. Or, if you wish, we can do it for you, for a small amount of ether... See how it works?