Start a Conversation

Unsolved

3 Apprentice

 • 

1.2K Posts

117

May 7th, 2024 22:47

Some Forum Logins Now Require Both 2FA and (Multiple) CAPTCHAs

I think requiring users to sometimes complete both 2FA and CAPTCHA challenges for the same sign in to this Dell forum (i.e., their Dell account) is a bit of an overkill.

I logged in to the forum twice today.  The first only required my email and password plus 2FA, but the second required me to:

  1. Enter my email and password
  2. Complete a CAPTCHA
  3. Retrieve and enter my 6-digit 2FA code
  4. Complete a second CAPTCHA

I could understand either a 2FA OR a CAPTCHA challenge, but not both for the same login.

Is it even necessary to still be using CAPTCHA challenges as part of the login process when every login now requires 2FA?
----------
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4291 * Firefox v125.0.3 * Microsoft Defender v4.18.24030.9-1.1.24030.4 * Malwarebytes Premium v5.1.3.110-1.0.1219 * Macrium Reflect Free v8.0.7783 * Dell Update for Windows Universal v5.2.0 * My Dell v2.2.6.0

Community Manager

 • 

54.7K Posts

May 9th, 2024 12:46

Thanks. This topic is an ongoing discussion with both applicable teams.

5 Practitioner

 • 

5.6K Posts

May 10th, 2024 03:16

I saw some recent reports indicating certain users were receiving email notification about data breach.  Could the implementation of 2FA being pushed as part of mitigation and response to secure users accounts.

3 Apprentice

 • 

1.2K Posts

May 10th, 2024 13:54

I saw some recent reports indicating certain users were receiving email notification about data breach.  Could the implementation of 2FA being pushed as part of mitigation and response to secure users accounts.

Hi @Chino de Oro :

Thanks for the heads up.  I found several articles about this after reading your post, including BleepingComputer's 09-May-2024 Dell warns of data breach, 49 million customers allegedly affected.

I have no objection to the addition of 2FA to the Dell forum login - just the constant nags to complete the extraneous CAPTCHA challenges during the login process.
----------
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4291 * Firefox v125.0.3 * Microsoft Defender v4.18.24030.9-1.1.24040.1 * Malwarebytes Premium v5.1.4.112-1.0.1233 * Macrium Reflect Free v8.0.7783 * Dell Update for Windows Universal v5.2.0 * My Dell v2.2.6.0

(edited)

3 Apprentice

 • 

554 Posts

June 2nd, 2024 00:46

Agreed. Ever since this "one time" 2FA was implemented, I have to input the code every time I log in. Once in a while a CAPTCHA is thrown in as well, as if I'm logging in from another computer or somewhere else.


Also, ever since the forum revamp several months ago, the site logs me out automatically 2-3 hours after my last visit, where before it kept me logged in for up to 14 days, requiring me to log in again!

These "annoyances" are starting to discourage me from using this forum.

3 Apprentice

 • 

1.2K Posts

June 16th, 2024 12:18

This is getting worse.  For the past week I've had to use both a CAPTCHA and 2FA every time I sign in to the forum, which seems like overkill. I don't understand what additional security a CAPTCHA provides when 2FA is already a requirement.

I used to log in to this forum every day to check if I had an in-app notification that needed my response but I don't bother anymore because of this annoyance.
----------
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4529 * Firefox v127.0.0

(edited)

3 Apprentice

 • 

1.2K Posts

June 25th, 2024 13:58

I've had multiple log in failures ("We are sorry but there seems to be a problem. Please try again after some time") on the Dell forum since 21-Jun-2024 with my default Firefox v127.0.1 browser, and I suspect it's related to the fact that I no longer see a pop-up asking me to accept / decline / manage optional cookies on the Dell forum.

If I disable Enhanced Tracking Protection (shown below) for www.dell.com in my Firefox browser and disable all browser extensions (including content blockers like Malwarebytes Browser Guard and uBlock Origin) I can manage to log in as follows:

  1. Browse to https://www.dell.com/community/en/categories/dell-community (NOTE: I no longer see the regular pop-up asking me to accept / decline / manage cookies).
  2. Click the “Log In” link in top right of page.
  3. Enter my mail address, password, and completed the 1st CAPTCHA.
  4. Enter the 6-digit 2FA code sent by email and complete a 2nd CAPTCHA displayed below the boxes where the 2FA code is entered.
  5. Click the Sign In button.

I don't know if there is some cookie or tracker on the Dell forum that is now causing the CAPTCHA / 2FA to fail when it's blocked by my "normal" security measures in Firefox v127.0.1, and I haven't done extensive testing with my MS Edge browser, but I don't like the idea of lowering the security in my default Firefox browser just to log in and use the Dell forum.

When I was able to decline optional cookies and trackers and only use "essential" cookies I recall that there were dozens of partner companies that Dell would share my data with unless I declined "optional" cookies.  If I want to use the Dell forum it looks like I won't have a choice now about what browsing data is being collected and who it is shared with, which is unacceptable for me, so my best option right now is to use the Dell forum as little as possible.

-----------
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4529 * Firefox v127.0.1 * Microsoft Defender v4.18.24050.7-1.1.24050.5 * Malwarebytes Premium v5.1.5.116-1.0.1252 * Macrium Reflect Free v8.0.7783 * Malwarebytes Browser Guard v2.6.27 * uBlock Origin v1.58.0

(edited)

3 Apprentice

 • 

1.2K Posts

June 25th, 2024 14:36

... I suspect it's related to the fact that I no longer see a pop-up asking me to accept / decline / manage optional cookies on the Dell forum.

Just FYI, by the time I had finished posting my previous reply <above> the block count for my Malwarebytes Browser Guard for Firefox browser extension had grown to an astounding 430 blocks and that count as reached over 550 blocks and is continuing to climb as I compose this reply.

-----------
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4529 * Firefox v127.0.1 * Microsoft Defender v4.18.24050.7-1.1.24050.5 * Malwarebytes Premium v5.1.5.116-1.0.1252 * Macrium Reflect Free v8.0.7783 * Malwarebytes Browser Guard v2.6.27 * uBlock Origin v1.58.0

(edited)

3 Apprentice

 • 

1.2K Posts

June 28th, 2024 18:18

I was able to sign in today with 2FA only [i.e., no CAPTCHA challenge(s)].  Kudos to the devs if is this is a permanent change.

I'll test for a few more days and will mark this topic as solved when I'm sure the CAPTCHAs are gone.
----------
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4529 * Firefox v127.0.2 * Microsoft Defender v4.18.24050.7-1.1.24050.5 * Malwarebytes Premium v5.1.5.116-1.0.1252 * Macrium Reflect Free v8.0.7783 * Dell Update for Windows Universal v5.3.0 * My Dell v2.2.6.0

3 Apprentice

 • 

1.2K Posts

June 29th, 2024 12:48

.. I'll test for a few more days and will mark this topic as solved when I'm sure the CAPTCHAs are gone.

Never mind.  The CAPTCHAs and 2FA verification failures are back today.

After entering my email address and password and completing the first CAPTCHA shown below I was emailed my 6-digit 2FA code.

However, as soon as I entered my 2FA code on the verification page and tried to sign in my 2FA code disappeared from the 6 boxes and the following "Please enter the characters that appear in the image in order to proceed" error shown below.  I re-entered the same 2FA code in the boxes and completed the second CAPTCHA and was finally able to sign in.

Note that I've seen this identical behaviour a few other times in the past week. 

Until the devs come up with a consistent login process (hopefully with 2FA only and no CAPTCHAs) there's no point in my continuing to post feedback in this topic.
----------
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4529 * Firefox v127.0.2 * Microsoft Defender v4.18.24050.7-1.1.24050.5 * Malwarebytes Premium v5.1.5.116-1.0.1252 * Macrium Reflect Free v8.0.7783 * Dell Update for Windows Universal v5.3.0 * My Dell v2.2.6.0

(edited)

No Events found!

Top