should warn user that it's calculating a hash challenge and obtain CONSENT first

[r00t-]

this thing had just decided to run a calculation on my notebook that took five minutes and consumed more energy than was left in my battery.
funnily it took so long that i had time to notice the cpu usage, research what the thing is, and connect a charger.

i have a recording of the http traffic,
at 2026-03-18 17:35:15 CET it obtained a challenge from https://eu-api.friendlycaptcha.eu/api/v1/puzzle?sitekey=FCMOGU1FT0JIC5LN :

{
  "success": true,
  "data": {
    "puzzle": "c8471978cca946b51569a3e52e345d2f.abrUQoh4L+gnJha3AQwqogAAAAAAAAAAzA8OtBB2KPc="
  }
}

and at 2026-03-18 17:40:40 CET the response was submitted to the site:

{"solution":"c8471978cca946b51569a3e52e345d2f.abrUQoh4L+gnJha3AQwqogAAAAAAAAAAzA8OtBB2KPc=.AAAAAK4XAgABAAAApmkHAAIAAAAatDQAAwAAABmMAgAEAAAAXQALAAUAAABImksABgAAALAPBgAHAAAAyZc0AAgAAAAr4RMACQAAAEkuDQAKAAAAy2wKAAsAAADQ2QMADAAAAAjPOQANAAAAClQQAA4AAAA7SAYADwAAALsWBgAQAAAATH0pABEAAACTrwIAEgAAAPJdAAATAAAAg+4EABQAAAD4VBQAFQAAANoAEwAWAAAA7BwIABcAAAB/iBcAGAAAAA7AGQAZAAAAcnwDABoAAABAFwoAGwAAAD9RAAAcAAAArSkUAB0AAADGjQkAHgAAAGAGIAAfAAAAUUAoACAAAADMmz0AIQAAAOMrGAAiAAAA6Y8gACMAAAATYgkAJAAAAF7kAwAlAAAAcrIEACYAAACCGwQAJwAAAFYaAQAoAAAA13YaACkAAAC2ugAA.AgFE"}

i'd love to give more details on what it was doing, but there was nothing displayed in the UI or logged to console,
also don't see how i could find the version in use there.

[edit: i read on the friendlycaptcha website:" As soon as the user starts to fill in a protected form"
well, the site chose to integrate it such that it's on the form that asks for a verification code sent by phone text message,
and the text message is only sent after the challenge is completed - maybe educate your users on sensible integration...]