cogadh: This is ridiculous. I have explained precisely how this exploit based on the exception to the captcha rules that you want would work with GOG's current system
Zrevnur: Clearly you have not. If so - why dont you just quote it. Or link to the post where you did this "explaining". Also I did in no way imply how GOG should go about implementing a captcha-free system - ie all your talk about "exceptions".
cogadh: I did not miss the point of the autumn sale, what you have missed is that this sale and any of the others GOG has account for maybe three weeks worth of business out of the year and not every sale includes freebies. At least 354 days out of the year your nuisance issue is not a problem for anyone, anytime, yet you want GOG to risk problems on those 354+ days just so you don't have to whine during a sale that happens to include freebies? You don't like that you have to check that box at checkout ("nasty" pictures? That's a load of bullshit) well I, and likely the vast majority of GOG users, think that is a small price to pay if it prevents even some fraud.
Zrevnur: Quoting you from above: " All so you and maybe a few others don't waste the mouse clicking energy on a single check box." I pointed out that this (your former statement) is obviously and objectively a false statement. Considering this your reply to my reply is completely out-of-whack. Furthermore it is also probably wrong and misleading as well - I can explain in more detail why that is so but you seem to have lost interest so I will skip that.
cogadh: That's it, i've said my peace, if you still don't get it, that's your problem. Good day, sir!
Zrevnur: It didnt sound very peaceful. In fact it sounded like you were upset.
Oh my gawd, are you serious? You cannot possibly be this dense. Fine, one last try. I'm sorry, but I'm going to keep using the correct English words like "exception" in my explanations, there really aren't any simpler words that I could use to make comprehension easier for you.
You asked GOG to implement an exception to the captcha challenge rules based on three simple criteria: a user must be logged in, just spent $$$, have never before failed at inputting a correct code (your exact words). If GOG implements that exception exactly as you described it, all one has to do is hijack or already have an account in good standing, log in, manually buy one item and pass the captcha, then start running an automated script that takes advantage of the now disabled captcha to buy codes in bulk using fraudulent credit cards (something that happened multiple times before GOG starting trying to secure the system). The hole you created to avoid the nuisance of captcha on a freebie doesn't just eliminate that nuisance, it leaves the whole system open to exploitation. GOG cannot just bypass the captcha on freebie codes specifically because there is no way to tell the difference between a freebie code and a paid code: a code generated when someone buys Riddick as a gift is produced by the same system that generates codes for the free fall sale Riddick and is identical in format. Additionally the captcha itself is a function of the storefront with no actual connection to the codes themselves. Changing that would require a significant reworking of GOG's entire checkout and code issuing system, just to get around a meaningless complaint that only applies to a limited time period in specific circumstances that fall outside of well more than 90% of GOG's regular business and would likely make the system much less secure in the long run. Not worth it.
Again, if you lack the basic reasoning skills to understand all of this, you're your own from here on out.
EDIT - added clarification