CAPTCHA now on IHG too?

Discussion in 'IHG | Rewards Club/Ambassador' started by blackjack-21, Jan 13, 2015.  |  Print Topic

  1. blackjack-21

    blackjack-21 Gold Member

    Messages:
    1,437
    Likes Received:
    3,000
    Status Points:
    1,910
    Went to register for the DL/IHG promotion from an email I got last night, and the registration page on the IHG website came up with a CAPTCHA, similar to that of Hilton's of a few weeks ago and now ongoing. Granted that I don't visit the IHG site too often to have noticed the change, but it wasn't there a few weeks ago on my last visit. Is this something new there too due to them being hacked recently, or are they just proactively being careful?
     
  2. Lionell

    Lionell Gold Member

    Messages:
    767
    Likes Received:
    3,248
    Status Points:
    1,810
    Yesterday there was a time window that their website was showing that they were performing maintenance. That was probably for the implementation of the CAPTCHA.
     
  3. Flyer1976
    Original Member

    Flyer1976 Gold Member

    Messages:
    28,247
    Likes Received:
    33,912
    Status Points:
    20,020
    It's always good to have additional security measures to ward off the phishers. ;)
     
    blackjack-21 and uggboy like this.
  4. Rosalia

    Rosalia Silver Member

    Messages:
    410
    Likes Received:
    463
    Status Points:
    570
    I registered my 5000 points in my RC account and here too a Captcha appeared.

    I registered my 5000 points in my RC account and therexwas also a y
     
    uggboy likes this.
  5. viguera
    Original Member

    viguera Gold Member

    Messages:
    4,737
    Likes Received:
    6,913
    Status Points:
    4,745
    I've been all over the IHG site over the last couple of weeks with travel plans for both my account and the wife's and I haven't seen anything yet.
     
  6. HaveMilesWillTravel
    Original Member

    HaveMilesWillTravel Gold Member

    Messages:
    12,503
    Likes Received:
    20,197
    Status Points:
    16,520
    What DL/IHG 5000 points promo?
     
  7. blackjack-21

    blackjack-21 Gold Member

    Messages:
    1,437
    Likes Received:
    3,000
    Status Points:
    1,910
    Don't know anything about the 5,000 points. The DL/IHG email I got yesterday was from DL with the link to register at IHG for bonus DL MILES for upcoming IHG stays if you have DL as your partner airline to get the miles instead of IHG points. I've already deleted that email, sorry, so I can't provide a link. Perhaps check on the DL or IHG's website for the offer.
     
    Last edited: Jan 13, 2015
    uggboy and HaveMilesWillTravel like this.
  8. Sammich

    Sammich Gold Member

    Messages:
    5,644
    Likes Received:
    22,439
    Status Points:
    11,025
    Another hotel chain implementing a lazy security measure.
     
  9. Lionell

    Lionell Gold Member

    Messages:
    767
    Likes Received:
    3,248
    Status Points:
    1,810
    Same here, I haven't seen it anywhere on the IHG site.
     
    uggboy, viguera and Sammich like this.
  10. viguera
    Original Member

    viguera Gold Member

    Messages:
    4,737
    Likes Received:
    6,913
    Status Points:
    4,745
    I think the promo sign-up page has a CAPTCHA now. My guess is that IHG is trying people from using some sort of automated method to sign-up for promos, since the promo codes (AFAIK) are all numeric.

    Of course this makes things even worse if so, since it looks like their focus is on keeping you from exploiting the system by automatically signing up for promos that you might not be qualified for, rather than keeping your account secure -- since the main login is still using just a 4 digit PIN.
     
  11. blackjack-21

    blackjack-21 Gold Member

    Messages:
    1,437
    Likes Received:
    3,000
    Status Points:
    1,910
    Viguera seems to have found the reason for the CAPTCHA when I went to register for the DL promo from their email. I just went to the IHG home page to sign in to my account, and no CAPTCHA needed then. So possibly a trial by IHG to have more control over who registers for their promos, and how many a person can be registered for.
     
    uggboy and Flyer1976 like this.
  12. DTWBOB

    DTWBOB Silver Member

    Messages:
    748
    Likes Received:
    921
    Status Points:
    750
    I just signed in w/o it -- of course I'm at a secure PC --- aka my home one.

    If CAPTCHA is enough to keep the hackers out, I won't complain.

    DTWBOB
     
    uggboy likes this.
  13. Terry Yap

    Terry Yap Gold Member

    Messages:
    1,464
    Likes Received:
    2,934
    Status Points:
    1,425
    haven't seen the CAPTCHA yet, it says the same declaration statement too ? ie "I am not a robot"...:rolleyes:
     
    viguera and uggboy like this.
  14. viguera
    Original Member

    viguera Gold Member

    Messages:
    4,737
    Likes Received:
    6,913
    Status Points:
    4,745
    The one I've seen for the promo sign-up is just the same old one that uses the half of the ReCAPTCHA "house number" images from Google street view. It's annoying, and probably useless.

    I keep thinking that it's just a matter of time before someone decides to go poking around the login security at IHG. I haven't tried it myself, but I would hope that there's a fairly small number of failed attempts before your account is locked, so that someone can't simply run through the numeric account / PIN combination programmatically. Probably wishful thinking though...
     
  15. Terry Yap

    Terry Yap Gold Member

    Messages:
    1,464
    Likes Received:
    2,934
    Status Points:
    1,425
    Give IHG some credit, they might have a improved statement declaration compared to Hilton, something like "I am really not a robot, honest !" instead of "I am not a robot" :p
     
  16. viguera
    Original Member

    viguera Gold Member

    Messages:
    4,737
    Likes Received:
    6,913
    Status Points:
    4,745
    Actually, the new Google "I am not a robot" CAPTCHA is significantly more robust than the old one, because it's not just clicking on the checkmark -- there's an entire process behind it that figures out how you're interacting with it and determines if it's an automated process that's clicking on it.

    And on top of it, if the API can't determine that you're REALLY human, then it throws another test on top of the checkmark -- you've probably not run into it yourself simply because, as you said, you're not a robot... :)

    CAPTCHA.png


    The problem I still have with IHG and their implementation though is that they still have a ton of open avenues of attack, even if they close the promo registration page. For example, you don't have to pass any sort of test to register for their new big promos (like Into The Nights or Set Your Sights) and even if you do, you don't need any additional security to access the dashboard after you're registered.

    Again, I would hope that they have additional security such as account lockouts in the event of multiple failed attempts on these pages, but I'm not sure that they do.
     
    Lionell and Sammich like this.
  17. DJP_707
    Original Member

    DJP_707 Silver Member

    Messages:
    887
    Likes Received:
    1,043
    Status Points:
    870
    I hate Captcha! half the time it takes two or three tries to figure out what the hell your suppose to type.

    as in the example picture posted above. Are you suppose to type just the "250" or "250 DD" ??
     
    HaveMilesWillTravel likes this.

Share This Page