You are not logged in.

#51 2010-09-19 16:49:27

hokasch
Member
Registered: 2007-09-23
Posts: 1,461

Re: Fighting spammers

What is th output of "date -u +%j(uname)|sha256sum|sed 's/\W//g'"?

trick question?

Offline

#52 2010-09-19 16:58:24

anonymous_user
Member
Registered: 2009-08-28
Posts: 3,058

Re: Fighting spammers

You're missing a "$", it should be:

date -u +%j$(uname)|sha256sum|sed 's/\W//g'

Offline

#53 2010-09-19 18:56:51

thestinger
Trusted User (TU)
From: Toronto, Canada
Registered: 2010-01-23
Posts: 478

Re: Fighting spammers

awesome.

arch: 1
spammers: 0?

Offline

#54 2010-09-19 19:38:06

hatten
Arch Linux f@h Team Member
From: Sweden, Borlange
Registered: 2009-02-23
Posts: 736

Re: Fighting spammers

I'll just say omfg at this one big_smile

The problem would be with members currently on windows, having problems installing arch, as they would not have a linux computer there. But those could always work around it by asking on IRC/whatever.

Offline

#55 2010-09-19 19:53:51

Pierre
Developer
From: Bonn
Registered: 2004-07-05
Posts: 1,950
Website

Re: Fighting spammers

Well, windows-only users are not our audience. And real Arch users compute that command in their mind. :-)

Offline

#56 2010-09-19 20:26:30

fsckd
Forum Moderator
Registered: 2009-06-15
Posts: 3,497

Re: Fighting spammers

If spammers are taking the time to manually register then this seems like a losing race. I wouldn't be too excited until you observe at least a month of greatly reduced spam.


aur S & M :: forum rules :: Community Ethos
Resources for Women, POC, LGBT*, and allies

Offline

#57 2010-09-19 20:42:31

Pierre
Developer
From: Bonn
Registered: 2004-07-05
Posts: 1,950
Website

Re: Fighting spammers

I am not excited, I am pissed. ;-) Of course we'll need to remove spam as soon as possible and change the "captcha" regulary.

Offline

#58 2010-09-19 21:33:15

Inxsible
Forum Fellow
From: Chicago
Registered: 2008-06-09
Posts: 9,059

Re: Fighting spammers

I have seen a major improvement over the last few days. I see only 12 new registrations for today instead of the 25+ each day -- most of them being spammers.

Good riddance. and great job Pierre


Forum Rules

There's no such thing as a stupid question, but there sure are a lot of inquisitive idiots !

Offline

#59 2010-09-20 00:49:36

crouse
Arch Linux f@h Team Member
From: Iowa - USA
Registered: 2006-08-19
Posts: 903
Website

Re: Fighting spammers

Pierre wrote:

If I disable register.php nobody will be able to register; so I don't see the point. Its also not about bots here but humans (they might use some special tools though).

It's doubtful your going to stop a determined human user. 

Pretty sure you didn't look at what my .htaccess protection looks like.

The username/password are actually "shown" in the password protection box.
They are required to register and login.

Your "spammers" may take the time to bypass the registration box, but they are automating the spam part I'm sure. (At least that's what I've noticed)

Their "automated" login won't work with their spambots... they still have to automate the .htaccess protection login... and as I've mentioned, while possible, probably not likely.

You really might want to take a look at opensuse.us/forum and click "register" or "login". I have implemented this at four of my forums, bot registrations are at zero. Bot postings are at zero.

Offline

#60 2010-09-20 00:54:11

karol
Archivist
Registered: 2009-05-06
Posts: 25,422

Re: Fighting spammers

crouse wrote:

You really might want to take a look at opensuse.us/forum and click "register" or "login". I have implemented this at four of my forums, bot registrations are at zero. Bot postings are at zero.

How long have you been using it? It sounds almost too good to be true ;P

Offline

#61 2010-09-20 01:09:00

crouse
Arch Linux f@h Team Member
From: Iowa - USA
Registered: 2006-08-19
Posts: 903
Website

Re: Fighting spammers

karol wrote:
crouse wrote:

You really might want to take a look at opensuse.us/forum and click "register" or "login". I have implemented this at four of my forums, bot registrations are at zero. Bot postings are at zero.

How long have you been using it? It sounds almost too good to be true ;P

Several years.

Offline

#62 2010-09-20 01:11:45

karol
Archivist
Registered: 2009-05-06
Posts: 25,422

Re: Fighting spammers

crouse wrote:
karol wrote:
crouse wrote:

You really might want to take a look at opensuse.us/forum and click "register" or "login". I have implemented this at four of my forums, bot registrations are at zero. Bot postings are at zero.

How long have you been using it? It sounds almost too good to be true ;P

Several years.

Will a blind person be able to register?

Offline

#63 2010-09-20 01:15:24

crouse
Arch Linux f@h Team Member
From: Iowa - USA
Registered: 2006-08-19
Posts: 903
Website

Re: Fighting spammers

I have no idea.  I've not used any text to speech apps or had occasion to know.  No one has mentioned any issues with registering, but to my knowledge none of the userbase on any of the forums are blind.  That is actually a good question.

Offline

#64 2010-09-20 02:33:43

cmb
Forum Fellow
From: Oklahoma City
Registered: 2008-10-13
Posts: 11
Website

Re: Fighting spammers

I'm blind, and the method used by the opensuse forum works for me.

Offline

#65 2010-09-20 11:21:18

karol
Archivist
Registered: 2009-05-06
Posts: 25,422

Re: Fighting spammers

opensuse.us/forum is 8 times smaller in terms of registered users and 40 times smaller if we consider the number of posts, so it may attract less attention from spammers, but I think it's worth a try.

Offline

#66 2010-09-24 11:29:45

karol
Archivist
Registered: 2009-05-06
Posts: 25,422

Re: Fighting spammers

Should I report new spam sightings here?
https://bbs.archlinux.org/viewtopic.php?id=105436 was a post by some spammer (it's already removed by the mods).

Offline

#67 2010-09-24 11:33:17

jasonwryan
Forum & Wiki Admin
From: .nz
Registered: 2009-05-09
Posts: 18,067
Website

Re: Fighting spammers

No - just use the report button: we keep track of the spammers...


Arch + dwm   •   Mercurial repos  •   Github

Registered Linux User #482438

Online

#68 2010-09-24 11:34:54

karol
Archivist
Registered: 2009-05-06
Posts: 25,422

Re: Fighting spammers

jasonwryan wrote:

No - just use the report button: we keep track of the spammers...

Yeah, I already did that. I was asking if Pierre wants to know if anyone got through the defenses he set up :-)
If he knows, it's OK.

Last edited by karol (2010-09-24 11:35:27)

Offline

#69 2010-09-24 12:31:05

Pierre
Developer
From: Bonn
Registered: 2004-07-05
Posts: 1,950
Website

Re: Fighting spammers

That was hopefully some special case; there was no real advertisement. OK, we could block every IP from China or the Windows user agent. ;-)

Offline

#70 2010-09-24 13:07:54

flamelab
Member
From: Athens, Hellas (Greece)
Registered: 2007-12-26
Posts: 2,160

Re: Fighting spammers

Pierre, does the new way to stop spammers work for now ?

Offline

#71 2010-09-24 13:16:00

Pierre
Developer
From: Bonn
Registered: 2004-07-05
Posts: 1,950
Website

Re: Fighting spammers

Looks good so far. I am still removing some accounts but they all were created before the new implementation. Spammers think if they add their signature spam a few weeks after registering I wouldn't notice.

Offline

#72 2010-09-24 14:09:45

stefanwilkens
Member
From: Enschede, the Netherlands
Registered: 2008-12-10
Posts: 624

Re: Fighting spammers

have a weekly script check all signature fields against a list of known baddies? might lift some of the load. I'm sure the same can be done with the wiki, but the massive amount of queries might warrant a "maintainance" period  where the forums / wiki are periodically unavailable.

spammers should be banned from life sad


Arch i686 on Phenom X4 | GTX760

Offline

#73 2010-09-24 14:53:21

Pierre
Developer
From: Bonn
Registered: 2004-07-05
Posts: 1,950
Website

Re: Fighting spammers

If it were just that easy...they use ips, email and urls mostly only once.

Edit: Just had to delete a new spammer. He first tried with Windows and then switched to Ubuntu (obviously to enter the Bash script). He spent about 5 minutes to update his spam signature. I wonder how much those people are paid that it worth this effort.

I'll probably add some more variations to the "captcha". On the other hand I'll improve the tools to detect such spam. If there is only one per week that would be acceptable. (10min for them to spam us; one click for us to delete their account is still a good balance)

Offline

#74 2010-09-27 04:24:43

panthe0n
Member
From: Noo Zulund
Registered: 2010-09-27
Posts: 33

Re: Fighting spammers

Pierre wrote:

(obviously to enter the Bash script).

If it was not for that one line right there, I would not have had a single clue as to how to answer the question on the register page. lol


Registered Linux User #523818.

Offline

#75 2010-09-27 08:03:22

ngoonee
Forum Fellow
From: Between Thailand and Singapore
Registered: 2009-03-17
Posts: 6,772

Re: Fighting spammers

Pierre wrote:

Edit: Just had to delete a new spammer. He first tried with Windows and then switched to Ubuntu (obviously to enter the Bash script). He spent about 5 minutes to update his spam signature. I wonder how much those people are paid that it worth this effort.

More importantly, how knowledgeable the person must be to know what a bash script is and how it should be run....

THE MONGOLS ARE COMING!!!

Damn this is scary in a way.


Allan-Volunteer on the (topic being discussed) mailn lists. You never get the people who matters attention on the forums.
jasonwryan-Installing Arch is a measure of your literacy. Maintaining Arch is a measure of your diligence. Contributing to Arch is a measure of your competence.
Griemak-Bleeding edge, not bleeding flat. Edge denotes falls will occur from time to time. Bring your own parachute.

Offline

Board footer

Powered by FluxBB