@m0xEE @p @jae It gets all the hate because it solves nothing by not being broad and annoys everyone that is a genuine visitor. And that is deserved. It's also deployed proactively by people that can't read logs (read: incompetent) as a magic fixall thing that stops bots. If you can't deal with a flood of bots with simple scripts and firewall rules, you shouldn't be running anything publicly accessible anyway.

It's the same humiliation ritual as CF/Google boats, but instead of clicking boats, you have to wait 20 seconds for some JavaScript to finish "Making sure you aren't a bot, teehee." And just like boats, it can be easily bypassed.

PS: Stack Exchange deployed a CF captcha that always gets triggered like 3 weeks ago which annoys me greatly.