Spambot Prevention Suggestions

[jwallace15]

Originally Posted by DonRotolo

I would venture to say that is isn't spam unless it has hyperlinks.

http://www.chiefdelphi.com/forums/sh...d.php?t=117091

Originally Posted by EricH

I saw a spammer put up a thread title that didn't make sense... with identical post content... but no links. 5 minutes later, the same post had MORE words that didn't make sense, plus the "normal" 30 or more links

I've been seeing that too. There was one (can't remember when, but very recently) that had a bunch of text in {}'s.

Another thing I've noticed is that generally speaking a thread title that has something to do with a celebrity, accident, or something having to do with Middle Eastern politics is usually spam.

[sanddrag]

Every day for the last week seems like many spammer hits here. I don't want this great site to be ruined by spammers. Anything we can do to step up the fight? More mods?

I'm happy to mod if needed. I'm west coast so always up and on here late. And I think with over 11 years on the forums, I'm qualified enough. Let me know if I can help.

[Cory]

Originally Posted by sanddrag

Every day for the last week seems like many spammer hits here. I don't want this great site to be ruined by spammers. Anything we can do to step up the fight? More mods?

I'm happy to mod if needed. I'm west coast so always up and on here late. And I think with over 11 years on the forums, I'm qualified enough. Let me know if I can help.

Adding mods might be helpful, but it's reactionary. There needs to be a way to head it off before it happens.

I thought someone mentioned there was a newer version of vBulletin with better spam blocking, but maybe that was awhile ago and we're already using that.

[JohnBoucher]

A hidden field could be added to the registration page. A spambot will fill it in but a human won't see it and leave it blank. If hidden field is filled then reject.

[Racer26]

Originally Posted by JohnBoucher

A hidden field could be added to the registration page. A spambot will fill it in but a human won't see it and leave it blank. If hidden field is filled then reject.

That... might actually work.

[artdutra04]

Originally Posted by Cory

I thought someone mentioned there was a newer version of vBulletin with better spam blocking, but maybe that was awhile ago and we're already using that.

The version of vBulletin that Chief Delphi currently runs on was released in 2006.

[Joe Ross]

Originally Posted by JohnBoucher

A hidden field could be added to the registration page. A spambot will fill it in but a human won't see it and leave it blank. If hidden field is filled then reject.

Most spambots don't fill all fields, so that wouldn't work.

The spambot already needs to know to type "inspiration" or "science" into a field when prompted, or answer what Dean Kamen's first name is, or answer what day of the week it is. Presumably, it's not a spambot doing that part of registration.

[artdutra04]

Originally Posted by Joe Ross

Most spambots don't fill all fields, so that wouldn't work.

The spambot already needs to know to type "inspiration" or "science" into a field when prompted, or answer what Dean Kamen's first name is, or answer what day of the week it is. Presumably, it's not a spambot doing that part of registration.

I don't think we're actually dealing with spambots anymore.

A lot of spammers have realized its easier to stay one step ahead of anti-spam measures by paying someone in Russia/China/southeast Asia/other developing countries a few bucks a day to sit and manually enter everything.

Look at all the timestamps of the spam posts and threads; they are all usually late at night for North America and working hours in the countries listed above.

[yash101]

Here is a screenshot of some spam I am getting on my website. What do you notice? I noticed that the email addresses are random letters and numbers and the names are the same category. This could be a very crude and a first way to filter out Spam. However, I believe that this forum uses Askimet. As soon as I installed and activated that, I didn't have to worry about spam, and in face, I just disabled the requirement for comment moderation because I haven't had a single spam get through.

In Short, If an email is just a weird string of character, have the user trying to sign up have to go through more recognition, same with the name of the user.

Also, I can imagine that a spammer might, himself creating an account/set of accounts for the spambots to use to get into the system. Then, the user can be disabled by a human who can detect that something is spam.

Also, Why do you have those two ads at the top. They never change, so they become kind of annoying, and I am pretty sure the "donate" button has been clicked many times because of how useful this forum is

[EricH]

Originally Posted by yash101

Also, Why do you have those two ads at the top. They never change, so they become kind of annoying, and I am pretty sure the "donate" button has been clicked many times because of how useful this forum is

You'd be surprised. I think the "donate" button was up before the ads were.

Note: One of the two ads is ALWAYS from a forum sponsor (IFI), and it's rarely the same ad two pages in a row. The other is typically from a sponsor of team 51 (used to be 47) who wants to get their message out. Again, rarely the same two pages in a row.

Easy way to turn them off: become a forum subscriber for a couple years. (Translation: big-ish donation.)

[Navid Shafa]

Originally Posted by sanddrag

I'm happy to mod if needed. I'm west coast so always up and on here late. And I think with over 11 years on the forums, I'm qualified enough. Let me know if I can help.

I'll second that. I check CD at least once a day and I'm also on at obscure times. Happy to help.

[jwallace15]

Originally Posted by JohnBoucher

If hidden field is filled then reject.

This could work.

(a little off topic) Our team leader put something like that on the bottom of our last team email; it was a Google Form that you filled out with your name and other emails you wanted the team emails to go to. It was also a test to check who was checking and fully reading the team emails and who wasn't (it also checked who viewed it within 24 hours).

[Whippet]

Perhaps anyone with an IP address from a country where no FIRST teams exist should have to be manually approved by a mod before they could post?

[Nuttyman54]

One thing I've noticed is that most of the spam has upwards of a dozen hyperlinks in it (most somewhere around 20). They also all seem to appear as new threads.

Would it be possible to put an additional level of security/captcha/mod approval type thing on any new threads that get started with more than 10 hyperlinks? I rarely see any threads started by actual forum users that have that many hyperlinks.

It's a bit of a stopgap, but should at least slow the current influx of spam threads we've been getting recently. Mod approval might be the best way. If someone REALLY wants to get a thread started with lots of hyperlinks, and needs it fast they can always send Brandon Martus or another mod a PM/email. Otherwise they remove the hyperlinks or wait.

[z_beeblebrox]

Originally Posted by Nuttyman54

One thing I've noticed is that most of the spam has upwards of a dozen hyperlinks in it (most somewhere around 20). They also all seem to appear as new threads.

Would it be possible to put an additional level of security/captcha/mod approval type thing on any new threads that get started with more than 10 hyperlinks? I rarely see any threads started by actual forum users that have that many hyperlinks.

It's a bit of a stopgap, but should at least slow the current influx of spam threads we've been getting recently. Mod approval might be the best way. If someone REALLY wants to get a thread started with lots of hyperlinks, and needs it fast they can always send Brandon Martus or another mod a PM/email. Otherwise they remove the hyperlinks or wait.

This is a good idea, but in reality, a spammer often starts a thread and edits in the hyperlinks a few minutes later. That would be a little harder to deal with.