"Max challenge attempts exceeded." Shows too quick

food4Rhino
1

“Max challenge attempts exceeded. Please refresh the page to try again!”
This thing shows way too quick IMO. From time to time I like to check what’s new on food4rhino and I usually scroll through the list of plugins and open a bunch of them to later read the details. This ends with “Max challenge attempts exceeded. Please refresh the page to try again!” and occasional captcha to solve, this is can be so unpleasing that I say to myself “ok, whatever” and leave the site.
Whatever protection this is, I think it might work a bit too aggressive.
Keep in mind that I’m a long time Rhino user that is somewhat dedicated, not a newcomer who might be less forgiving.

In short, protection against the bots might be too strict and it bothers regular users.

2

I have the same issue and entirely agree with you.

3

@Czaja and @mc_rash
Can you test it now?
I made some security improvements.

4

I think it works less restrictive now, only occasional "Max challenge attempts exceeded"

5

The type of browsing you’re showing isn’t something a typical user would do.
We use a WAF that detects human activity using automated techniques, as well as activity by legitimate bots.
Any unusual behavior is flagged as suspicious, and a CAPTCHA is sent for users to solve.
We won’t adapt our rules to allow users to open multiple links at once, as that wouldn’t make sense.

6

We won’t adapt our rules to allow users to open multiple links at once, as that wouldn’t make sense.

I am sorry, but this is ridiculous. I know that I am opening multiple subpages in the video, but just opening two different plugin pages forces me to fight with the website. I want to quickly scan the list and look into multiple plugins, including information about new features, etc. The main view only displays a few lines of description, I have to enter the individual plugin subpages to find out more about versions and updates… I am sorry, but the browsing experience on food4rhino is tragic. I have to beg to find anything out and prove that I am not a bot. Even when I stopped opening several subpages simultaneously, I was hit with a captcha test. Generally, I try to approach developers’ decisions and their explanations for limitations with respect, but this time I don’t feel so intimidated, because it is just a website… I’ve seen plenty of websites in my life… Food4Rhino should serve as a showcase and encourage exploring the rich Rhino ecosystem. Yet, this site doesn’t offer the best experience right from the start, and on top of that, it causes issues for users who are trying to somehow navigate it regardless.

You surely have some research on this; I am shocked by this information, it is hard for me to believe. I will write it again, even opening 2 subpages can result in “*Max challenge attempts exceeded”.
*
I understand that you are fighting with the bots, but that might be a Pyrrhic victory.

7

Hi!

If you are still getting captcha when you are just opening 2 subpages, I will try to investigate and fix.

Just send me your public ip in private msg.

If not, we consider that the previous behaviour is gone.

8

Hi Jordi,

I’m only an occasional f4r user, but of late I see the “Max challenge” page every time, and it’s a real turn off.

My latest use was like this:

  1. Search for “gears”
  2. Click on first result and view it successfully
  3. Return to search results and click on second result - get the “Max challenge” page

I hardly think my browsing pattern constitutes suspicious behaviour…

Regards
Jeremy

9

Occasionally on Win10, permanent on Win11, at least until today. :enraged_face:

10

I’ll try to investigate this further.

Please send me your public IP addresses via private message.

https://whatismyipaddress.com/

11

Hi!
I made some improvements on our WAF.
Can you test it now, please?