Mod Lyon
said
:
There seems to be a misunderstanding of what CAPTCHA challenges are, and what they are for here.
CAPTCHA challenges are not, as suggested, a primary account security tool akin to the Authenticator.
CAPTCHA challenges are however, a tool used in order to protect our systems from abuse when our provider decides that a request is a little unusual for a countless number of reasons, and thus we need to affirm a user is human.
CAPTCHA challenges are important to keep RuneScape running, and to do things like reduce / ideally stop mass account creations by in-game website spammers. This is one of many cat and mouse games that we work with our partners to mitigate and is definitely not at a level we are happy with. If this system wasn't in place, we have recorded hundreds of thousands of attempts to create accounts which would then log into the game and ruin your in-game experience,
CAPTCHA challenges do protect your account when a malicious user might be submitting a large number of requests.
We are not going to be removing CAPTCHA challenges from the website, for those reasons. While I understand the frustration, we do work to minimise interruptions for our legitimate users and that work continues, as well as the provider of CAPTCHA (hCAPTCHA) continually improving their own service to be easier for humans, and more difficult for bots.
There are players who complain there is too much security, then there are those who complain there isn't enough. Personally, I'd rather have too much than too little.
Music is the Heartbeat of the World
Let's flip a coin; heads I win, tails you lose. Fair enough?