@taviso @tqbf @thenthj that's interesting because it implies all login forms should be forced captcha to prevent this