Go Back  FlyerTalk Forums > Miles&Points > Hotels and Places to Stay > Hilton | Hilton Honors
Reload this Page >

Consolidated "CAPTCHA for logging in?" thread

Community
Wiki Posts
Search
Old Oct 22, 2014, 4:27 pm
FlyerTalk Forums Expert How-Tos and Guides
Last edit by: davie355
HHonors Sign In (if the link has disappeared)

https://secure3.hilton.com/en/hh/customer/login/index.htm
Print Wikipost

Consolidated "CAPTCHA for logging in?" thread

Thread Tools
 
Search this Thread
 
Old Dec 27, 2014, 9:59 am
  #211  
 
Join Date: Dec 2011
Posts: 1
Nonsense

This is nonsense. I just sent my second message to Hhonors. This year I had 239,000 base points and over a hundred stays. I saw the (later) comment that this may be disappearing in 2015. It's too late. You're losing my business.

Originally Posted by HHonorsRepresentative
Hi everyone,

We did recently update our website to include a CAPTCHA system, a protective measure that will help authenticate your Hilton HHonors account.

This is a commonly used security measure across many industries and is meant to serve as an extra step to further secure your HHonors account.

Thanks!
Erin
domicone is offline  
Old Dec 27, 2014, 10:04 am
  #212  
FlyerTalk Evangelist
Four Seasons Contributor BadgeMandarin Oriental Contributor Badge
 
Join Date: Feb 1999
Location: Seat 1A, Juice pretty much everywhere, Mucci des Coins Exotiques
Posts: 34,339
I think the main point is that no other hotel website (nor airline, nor car rental site that I'm aware of) engages in this nonsense. Talking about Ticketmaster or NY EZpass isn't really germane here.

Hilton is in competition with Starwood, IHG, Marriott, Hyatt, Accor, etc. None of those chains force us to deal with Captcha.
stimpy is offline  
Old Dec 27, 2014, 10:33 am
  #213  
 
Join Date: Jul 2011
Programs: AA EXP, UA Silver, Marriott Plat, Hilton Diamond, Hyatt Plat
Posts: 3
What do you do if you're a robot?
falizzadro is offline  
Old Dec 27, 2014, 1:09 pm
  #214  
In Memoriam, FlyerTalk Evangelist
 
Join Date: Jul 2002
Location: Durham, NC (RDU/GSO/CLT)
Programs: AA EXP/MM, DL GM, UA Platinum, HH DIA, Hyatt Explorist, IHG Platinum, Marriott Titanium, Hertz PC
Posts: 33,857
Originally Posted by falizzadro
What do you do if you're a robot?
Kill all humans, probably.
CMK10 is offline  
Old Dec 27, 2014, 1:16 pm
  #215  
 
Join Date: Feb 2003
Location: On strike
Posts: 8,135
Originally Posted by CMK10
Kill all humans, probably.
On the plus side, that means greater award availability and--once SkyNet takes over the HHonors program--more rational decisionmaknig about program benefits.
beltway is offline  
Old Dec 28, 2014, 8:35 pm
  #216  
FlyerTalk Evangelist
 
Join Date: Jan 2005
Location: home = LAX
Posts: 25,935
Originally Posted by falizzadro
What do you do if you're a robot?
Leave the box unchecked, obviously!
sdsearch is offline  
Old Dec 28, 2014, 11:03 pm
  #217  
 
Join Date: Aug 2012
Location: SLC
Programs: DL FO, KM, & 1.7MM; UA nothing; HH♦; National EE
Posts: 6,344
Originally Posted by Howste
I got "I am not a robot" today. It worked fine on my laptop, but what should I answer when I'm on my Android phone?
Originally Posted by falizzadro
What do you do if you're a robot?
Originally Posted by sdsearch
Leave the box unchecked, obviously!
I still need an answer for when I log in with an android...
Howste is offline  
Old Dec 29, 2014, 8:27 pm
  #218  
FlyerTalk Evangelist
 
Join Date: Jan 2005
Location: home = LAX
Posts: 25,935
Originally Posted by Howste
I still need an answer for when I log in with an android...
It's you doing the logging in, not your phone.

And "i-phone" could be construed as a non-human also ("you human, I phone"). So could a bunch of "Windows". As well as a "Mac" (whether meaning a raincoat or a truck or macaroni or a type of apple fruit).

So if you think about it, just about everything you can log in with is named after something not quite human.

But it's who is doing loggin in, not what they're logging in with, that matters.

So the answer is very simple: If you (the person logging in on whatever device) are not a robot, check the box. (And, btw, if you are a robot, you're writing the best robot posts I've ever seen! Congratulations! )

Last edited by sdsearch; Dec 30, 2014 at 3:54 pm Reason: spelling
sdsearch is offline  
Old Dec 29, 2014, 9:59 pm
  #219  
 
Join Date: Aug 2012
Location: SLC
Programs: DL FO, KM, & 1.7MM; UA nothing; HH♦; National EE
Posts: 6,344
Originally Posted by sdsearch
So the answer is very simple: If you (the person logging in on whatever device) are not a robot, check the box. (And, btw, if you are a robot, you're writing the beset robot posts I've ever seen! Congratulations! )
Thank you, I think. I'm not sure what a beset robot post is, but it sure sounds like a compliment.
Howste is offline  
Old Dec 29, 2014, 10:45 pm
  #220  
 
Join Date: Jul 2007
Location: San Francisco/Sydney
Programs: UA 1K/MM, Hilton Diamond, Marriott Something, IHG Gold, Hertz PC, Avis PC
Posts: 8,163
Originally Posted by donnak
It's gone now. At least for me! Now when I log in, it asks me to check a box next to the statement "I am not a robot". Hilarious.
This is Google continually improving their CAPTCHA system. Basically it's now a risk-based system, where they base the decision on how hard to make you work based on history, location, and a likely a number of other things.

eg, Go to the Hilton website and attempt to login, and you'll likely get the simple tick-box. But then open a new in-private browser window and do the same thing again - you'll probably get a more complex test (after ticking the box) as the in-private browsing means no history.

Hilton adding this captcha isn't ideal, but given that they had a real reason for adding it (accounts being hijacked and points being stolen) it seems like a good short-term solution to me. Other sites may not to do, but don't be surprised if they start introducing it as many other travel sites are starting to get hit with the same thing - especially those that have relatively insecure logins (eg, Hilton's 4-digit pins)
docbert is offline  
Old Jan 2, 2015, 6:17 am
  #221  
 
Join Date: Jan 2015
Posts: 2
I agree, Captcha is awful!
zar1001 is offline  
Old Jan 2, 2015, 8:03 am
  #222  
 
Join Date: May 2009
Location: EUG
Programs: AS MVP, AA MM, HH Diamond, MR Gold
Posts: 8,229
I had an interesting one on another site (can't remember where).

They asked "which is bigger?" (I at first tried to type "which is bigger?") until I saw that it was a drop down menu where you had to pick between choices like a pie, a pencil, China, an elephant, etc.
Eujeanie is offline  
Old Jan 2, 2015, 8:33 am
  #223  
 
Join Date: Feb 2013
Programs: Hilton Diamond
Posts: 4,270
Originally Posted by docbert

Hilton adding this captcha isn't ideal, but given that they had a real reason for adding it (accounts being hijacked and points being stolen) it seems like a good short-term solution to me. Other sites may not to do, but don't be surprised if they start introducing it as many other travel sites are starting to get hit with the same thing - especially those that have relatively insecure logins (eg, Hilton's 4-digit pins)

This is what it all boils down to, there are HHonors members have had sizable point balances stolen and this is at least some sort of step to further protect accounts (while hopefully they do what is necessary to enhance their systems). I don't have a problem with the number captchas, but the words are quite difficult and appear to be getting worse (well except the Happy New Years that was there yesterday )

At some point over the past few months Delta initiated a third step when signing on and that is after your enter your passcode a new field pops up asking for your last name. I assume that is attempting to provide a somewhat similar function to the captcha but is a lot easier on the user. I personally think Hilton could improve things just re-engineering the way you sign on to have to be a password that is a lot more secure than a 4 digit PIN (aka number and letters and one being upper case)
Miesque is offline  
Old Jan 2, 2015, 9:59 am
  #224  
FlyerTalk Evangelist
 
Join Date: Jan 2005
Location: home = LAX
Posts: 25,935
Originally Posted by Miesque
At some point over the past few months Delta initiated a third step when signing on and that is after your enter your passcode a new field pops up asking for your last name. I assume that is attempting to provide a somewhat similar function to the captcha but is a lot easier on the user.
That third step was there much earlier in 2014, and in later 2014 Delta got rid of the PIN completely and required you to create a password and use that from now on.

If you haven't been to Delta.com in many months, I don't koow if they will let you log in one last time with a PIN or not. But even if they will let you do it one last time, they will require you to create a password on the spot.
sdsearch is offline  
Old Jan 2, 2015, 10:02 am
  #225  
 
Join Date: Mar 2011
Location: Colorado
Programs: Lifetime UA 1K, Lifetime Hilton Diamond, Lifetime Marriott Bonvoy Titanium
Posts: 1,261
Originally Posted by Zeeb
Anybody else getting a CAPTCHA this morning trying to log in to HHonors? Of course, the website was still down afterword. But having the CAPCHA was a first for me. I'm totally okay with it though, since it makes it tougher to brute force passwords and login credentials.
They just made this far worse today. I tried 10 times to logon and I can't even read the recaptcha text. At least last week it was readable.

HILTON -- THE IS A COMPLETE JOKE. YOU HAVE MADE YOUR WEBSITE USELESS !

I am astounded how these major companies have no commitment to IT security and have to implement these hacks. Every one of them should fire their CIO (or the CFO if he is the one preventing the CIO for spending what is required to secure their IT infrastructure).

Last edited by bldr1k; Jan 2, 2015 at 10:38 am
bldr1k is offline  


Contact Us - Manage Preferences - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.