aMule Forum

English => Forum help => Topic started by: btkaos on February 14, 2011, 06:42:05 PM

Title: Spam users in the forum
Post by: btkaos on February 14, 2011, 06:42:05 PM
Well, looking to the members list it seems that recaptcha and amule question is broken, dozens of buggy users per day are registering and inserting their spam in a visible place (member page)

I don't know what should be done, but either using a harder captcha or question is one possibility. Others are to clean up the user list or to require approval.

Regards,
bTK
Title: Re: Spam users in the forum
Post by: Stu Redman on February 14, 2011, 10:47:58 PM
I've nagged our forum admin about that too. I'd simply disable the display of any kind of link from the users page. And the "home page" feature (it could be enabled after 50 posts or so). No idea if that's easily feasible with our forum software though.
Title: Re: Spam users in the forum
Post by: Kry on February 15, 2011, 01:27:13 AM
It is not. When smf 2.0 goes gold, things will change.
Title: Re: Spam users in the forum
Post by: btkaos on February 15, 2011, 01:31:50 PM
How about using the dummy field trick or something like that?
Title: Re: Spam users in the forum
Post by: Kry on February 15, 2011, 05:10:30 PM
*shrugs*

Elaborate?
Title: Re: Spam users in the forum
Post by: btkaos on February 15, 2011, 05:23:29 PM
*shrugs*

Elaborate?
This consists in adding a hidden field to the form with the name "user" "email", etc... and changing the real field to something like "amule_mail". Then the post script checks that the email hidden field is empty, otherwise it bans the IP for a month.

Note, you have to hide the field using css and a class. Of course there's a lot of variations on this same trick.

Another option is to choose a more complicated question, the current one is really easy, usually classifying questions are quite good, that is to say:
"Which one is an animal: chair, pen, dog, computer, email,"
Title: Re: Spam users in the forum
Post by: Kry on February 15, 2011, 07:05:26 PM
Oh yeah, the current question went through several iterations just to test if we were having automated spam or actual people spamming us. Turns out it's people.

I'll look into more devious things later in the week, if I have more time.
Title: Re: Spam users in the forum
Post by: btkaos on February 15, 2011, 09:56:20 PM
Oh yeah, the current question went through several iterations just to test if we were having automated spam or actual people spamming us. Turns out it's people.
When I saw recaptcha broken I suspected that :(
Quote
I'll look into more devious things later in the week, if I have more time.
Well, the hidden trick field may or not stop them, depending on the skill of the spammer.
Other solution would be to require approval of users. This is however very inconvenient. :(

However if we disable the incentive for them I guess they won't overcome the hidden trick field.

So hiding the signature in the user page is the first step to take. Otherwise they will have enough incentive to overcome whatever countermeasure we use. They know they can't post because we will delete their messages, but amule.org is a high-pagerank target.

Then, once they have no incentive, I can make a list of spam users so you can mass delete them. As a first approach I'd delete all the users with 0 posts and a given seniority.

Other question, why the spam subforum? IMHO you should delete all the posts there, they contain links.
Title: Re: Spam users in the forum
Post by: btkaos on February 15, 2011, 10:00:48 PM
Well stupid me, I see the spam subforum is only available to registered users. Sorry for that.

However member pages can be linked from outside and seen by anonymous users.
Title: Re: Spam users in the forum
Post by: Stu Redman on February 15, 2011, 10:49:02 PM
I see the spam subforum is only available to registered users.
Wrong. It's only available to moderators.
The idea is that moderators can move the spam there out of everybody's sight so that administrators can ban the offenders later at leisure (plain mods like you and me can't ban people).
Title: Re: Spam users in the forum
Post by: btkaos on February 15, 2011, 11:11:47 PM
I see the spam subforum is only available to registered users.
Wrong. It's only available to moderators.
The idea is that moderators can move the spam there out of everybody's sight so that administrators can ban the offenders later at leisure (plain mods like you and me can't ban people).
Thanks STU, I didn't know about the banning bit.

When an admin bans a spammer, is his account deleted?
Title: Re: Spam users in the forum
Post by: Kry on February 16, 2011, 04:53:47 AM
It is if I'm the one applying the banhammer.
Title: Re: Spam users in the forum
Post by: Kry on February 16, 2011, 05:01:45 AM
FYI: Guests couldn't see the member list. Now they can't see profiles, either.
Title: Re: Spam users in the forum
Post by: btkaos on February 16, 2011, 12:55:38 PM
Oh that's a good step, AFAICT, now spammers have no incentive to spam the forum, anyways I'll watch them closely in order to see if they can profit some other way.
Title: Re: Spam users in the forum
Post by: Vollstrecker on February 16, 2011, 01:35:28 PM
That's no step, that's how it goes for a long time now. They just don't care, as the members are enough possible viewers.
Title: Re: Spam users in the forum
Post by: btkaos on February 16, 2011, 03:02:06 PM
That's no step, that's how it goes for a long time now. They just don't care, as the members are enough possible viewers.
I don't agree, IMHO the only reason the post the links is to build a link farm and trick google.
Title: Re: Spam users in the forum
Post by: btkaos on February 16, 2011, 03:40:45 PM

This consists in adding a hidden field to the form with the name "user" "email", etc... and changing the real field to something like "amule_mail". Then the post script checks that the email hidden field is empty, otherwise it bans the IP for a month.

Note, you have to hide the field using css and a class. Of course there's a lot of variations on this same trick.
Given that the forum is being spammed by half-humans, maybe the implementation of the hidden trick should trick them into believing the were successful with the registration, or the ban should be so hard that they can never see anything and realize what went wrong.
Title: Re: Spam users in the forum
Post by: ^marcell^ on February 20, 2011, 06:41:53 PM
I hope you realise that everything posted here is visible to everyone. So if they read this they will know how to circumwent things.
Title: Re: Spam users in the forum
Post by: btkaos on February 21, 2011, 12:35:47 AM
I hope you realise that everything posted here is visible to everyone. So if they read this they will know how to circumwent things.
I hope they also learn that they spam will be useless. Members page are not accessible anymore to google, and any spam they post will be deleted in 1 minute. Better they target any other site. (or die)
Title: Re: Spam users in the forum
Post by: btkaos on February 25, 2011, 11:32:30 PM
Well, we are getting 50 new spam users per day, that's about 18250 new users a year. It will be funny when they attack.

They other day some both went just a little bit out of control and I had to delete +50 posts.
Title: Re: Spam users in the forum
Post by: Stu Redman on March 08, 2011, 02:08:54 PM
Btw - is ANYBODY monitoring the non-English Forums?
I'm monitoring German and Kry Spanish (afaik), but the rest?
Just deleted two spam posts there.
I suggest we either assign moderators for these subforums or lock them. Last post in Polish was 2 years ago. deltaHF is gone.
Title: Re: Spam users in the forum
Post by: ashrichard16 on March 17, 2011, 06:21:01 PM
handsome filipino celebrities 2010 (http://www.amule.org)

[edited out spam link but left the post as I find it highly ironic :) ]
Title: Re: Spam users in the forum
Post by: gingy on April 12, 2011, 08:21:43 AM
I hope this spam problem will be solve soon.
Title: Re: Spam users in the forum
Post by: Kry on April 12, 2011, 08:37:06 AM
Now they're just making fun of us.
Title: Re: Spam users in the forum
Post by: Stu Redman on April 17, 2011, 12:47:13 PM
Btw - is ANYBODY monitoring the non-English Forums?
I'm monitoring German and Kry Spanish (afaik), but the rest?
Just deleted two spam posts there.
I suggest we either assign moderators for these subforums or lock them. Last post in Polish was 2 years ago. deltaHF is gone.

Bump.
Just removed a spam post from the Italian forum and noticed several unanswered help requests there.
I suggest locking all localized boards except German and Spanish. We can always reopen them on request by a trusted forum member who steps up as mod for them.
Title: Re: Spam users in the forum
Post by: smokecigrate on May 24, 2011, 06:57:40 PM
Members page are not accessible anymore to google, and any spam they post will be deleted in 1 minute
Title: Re: Spam users in the forum
Post by: Kry on May 24, 2011, 07:56:09 PM
It's like our own little nice honeypot.
Title: Re: Spam users in the forum
Post by: BruceM on June 24, 2011, 03:00:09 PM
what about spamers? i came to this forum by searching google for one query. although i saw solve of my problem wuthout registering, i decided tor egister just to easier follow interesting topics and doing a forum search.

but i don't understand spammers. why spam some forum?

i must say that you have good captcha and two questions before registering. u should maybe add more questions or maybe even - writing captcha after every post?
Title: Re: Spam users in the forum
Post by: Stu Redman on June 24, 2011, 03:23:23 PM
This post looked almost genuine. But the other two (http://forum.amule.org/index.php?topic=18996.0) give it away.  :P
Title: Re: Spam users in the forum
Post by: BruceM on July 01, 2011, 12:42:14 PM
The topic or board you are looking for appears to be either missing or off limits to you. - that what's wrtiting when i click on your link?
Title: Re: Spam users in the forum
Post by: Kry on July 01, 2011, 04:51:26 PM
You know, it might be genuine.
Title: Re: Spam users in the forum
Post by: Stu Redman on July 01, 2011, 08:40:50 PM
That's why I moved it to "worthless stuff" instead of "spam".