[openstreetmap/openstreetmap-website] Prevent mechanical signups by malicious users (Issue #4307)

[SomeoneElseOSM]

### URL

https://community.openstreetmap.org/t/how-about-limit-new-accounts/101656/237

### How to reproduce the issue?

Whilst the rate limiting introduced at https://github.com/openstreetmap/openstreetmap-website/pull/4198 is still working, we're still seeing "entirely mechanical" signups by malicious users.

It should not be possible for someone to script the OSM signup process in this way.  The effect is not directly related to, but the effect is compounded by, https://github.com/openstreetmap/openstreetmap-website/issues/4018 .  A user signing up to OSM must have demonstrate that they are a real human being actively managing the signup process, reading and understanding the contributor terms, etc.  The signups that we're seeing (often of consecutive userids) suggests that this is not the case.

I appreciate that there is pressure from elsewhere (see e.g. https://github.com/openstreetmap/openstreetmap-website/pull/4288 ) to _reduce_ signup interactivity.  This request doesn't necessarily contradict that, provided that the external sites that that pull request is designed to help can provide similar "this really is an interactive signup" information.



### Screenshot(s) or anything else?

A sample of problem userids include 20481051, 20481052, 20481053, 20483963, 20483964, 20483965, 20487767, 20487867, 20487869, 20490488, 20490489, 20490490, 20490858, 20490859, and 20490860 .

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/4307
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/4307 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20231021/b4fd910e/attachment.htm>