Originally posted by cillosis:

I implemented a solution. Check out the latest announcement: http://steamcommunity.com/groups/keygiveawaycom#announcements/detail/1282807465639597130

The erroneous clue, I don't believe is an error. Is it the one about the square root of some number?

That was a thorough reaction, and the new font is nice, like the overall visual style. Btw., on the announcement page, someone commented:

> Mee Mesmo 5 hours ago
> A tiny change on /about must be done.
> //Drop keys as yourself or anonymously.

which is indeed so. About the erroneous clue:

> There's an error in one of the questions: "The number before (9-6)". The correct answer is 2, but that question gets displayed when the substituted character in the code is 3 instead.

From the main comments page:

(Btw., cillosis: There are one or two interesting things on there, e.g. an erroneous clue.)

Originally posted by Vercinger:

Are there any plans to implement some way of preventing people from claiming or marking as used keys that they haven't checked/used? I just saw the same person claim multiple keys from multiple batches, including 4 GOG keys of the same game, so unlikely to be activating them on alt accounts. The only not easily exploitable solution I can think of is to check if the account the person is logged in with owns a game, and refuse to display the key if that's the case. But I don't know how difficult that would be to implement.

Originally posted by cillosis:

Originally posted by God, owner of the Universe:

except the actual key only appears once they [...] entered the generic code they solved?

The biggest problem is all the "clues" are just a list of them I came up with. After a while, somebody could eventually record the answers to all of them and automate something. So, the letter guessing thing may not be the best.

You should also consider obfuscating them, kinda like the key, because just being able to machine-read "? = Letter that comes before U" straight from the page makes things (e.g. creating said list) very easy.

Originally posted by cillosis:

Originally posted by God, owner of the Universe:

why do you use this code display with the color lines in the background? That doesn't throw off OCR at all. It's childishly easy to see the key information in the image without being distracted, for a human and for a machine.

OCR isn't exactly trivial, and it discourages the large majority of script kiddies.

No matter how hard OCR is, many solutions exist, libraries are easily obtained. I won't invest the two hours now to create a demo, mainly because I'm very busy with SlaloM, but I checked the first few search results for "online ocr" and threw a doctored image from your site at them. Doctoring the image to a best result was so easy, I believe I could do it in Java in ~20 minutes from scratch: http://i.imgur.com/FE9V33P.png

http://www.onlineocr.net/
?DZCQ-3PPW7-DR4LD

http://www.newocr.com/
‘?DZCQ-5PPW7-DR4LD

http://www.free-online-ocr.com/
?DZCQ-3PPW7- DR4LD

http://www.free-ocr.com/
‘PDZCQ-SPPW7-DR4LD

http://www.ocrconvert.com
‘?DZCQ-5PPW7-DR4LD

https://ocr.space/
?DZCQ-3PPW7-DR4LD

Originally posted by cillosis:

My number one priority right now is figuring out if somebody has found a way to game the site. From some things you have said, and from looking at the analytics, it appears there are certain IP addresses with much larger than normal rates of hitting the site. I suspect it has to do with Google Recaptcha. Even though it is supposed to be an industry standard, the fact that it will just let you through most of the time without asking anything bothers me. I am considering switching to SweetCaptcha. What are your thoughts on that?

I have to solve a recaptcha every single time I access a new key page (e.g. the ones I made). If you experience it differently, you're maybe just looking at the same pages (I mean, I don't know right.), or it's some intelligence in the background that tries to make things as smooth as possible and realized that you're maybe using a fixed IP or whatever.

A short look at SweetCaptcha gives me the impression that it can be cracked rather easily, while Google's recaptcha is hard, so I'd say nope.

Originally posted by cillosis:

Ok, I've spent this evening building a Sphinx Search configuration [...] PROPER searching instead of the cobbled together SQL queries.

I will try to get it launched tomorrow.

Sweet, looking forward to experiencing the change! :)

Originally posted by cillosis:

Hey sorry, no. I haven't had much time lately.

Well, we've all got a life, so that's of course understandable. But just realize that to me, and users like me, your site is down, has been for weeks. (Just making sure you evaluated the need correctly.)

Hi cillosis! Any news on the "grouped by game type with a counter containing the number of available keys" front?

Originally posted by cillosis:

I'm thinking about making the table view into a grid view instead. It would be grouped by game type with a counter containing the number of available keys. Clicking it would take you to the table view filtered down to just that game.

Sounds like a good solution, though if there's only one available key, the step seems unnecessary. Could just be the current view, except if there are several open keys of one game, 1) ignore the message text (maybe except if identical in all cases), 2) show the amount of keys hiding behind this table line (best in the key button field), and 3) make the key button field replace the current table with one that only contains all key table entries (Like now.) of that game.

Originally posted by cillosis:

I've got a huge patch in the works for KG pro and once that is live, I'm sure you will much rather move to that instead of the dumping grounds. That's the whole purpose of the main KG app, a place to throw away unused keys that you can't really do anything with elsewhere in case somebody wants them.

I think you should consider a trial version, also requiring that the Steam account using it is old/big or something, so that people don't milk you via throwaway-accounts. A trial version instead of the "Pay now to find out soon what you paid for." you may or may not be planning (Can't tell, but pro-homepage suggests this a little.) would probably also get you more pro members.

Another thing:

The normal homepage has a wicked layout when you make the window narrow - the mobile layout, where the buttons (Steam etc.) are huge, has no gaps between the buttons, and those buttons look crappy because their resolution is too low. This has been the case for months, which makes me wonder if it looks different to you. I checked with Firefox and Chrome.