Spammers working overtime

How can I make this site better? Let me know what you'd like to see!

Moderators: khz, MattKingUSA

Re: Spammers working overtime

Postby nathan » Sat Jul 21, 2012 2:49 am

As an FYI, we are running the latest version according the admin panel - phpBB 3.0.10.

If anybody wants to volunteer to install a mod it's fine with me. Send me a PM so I can make sure to do a bleeding edge backup and get you access.

Also, I'll be a way for some time starting this coming week, so we'd want to aim for the second week of August at the earliest.
User avatar
nathan
Site Admin
 
Posts: 404
Joined: Mon Dec 11, 2006 8:53 pm
Location: Phoenix, AZ

Re: Spammers working overtime

Postby raboof » Sat Jul 21, 2012 10:10 am

Capoeira wrote:1st) The software needs an update. It's from 2007!!!!!

As Nathan mentions, we've been on PHPBB3 for a long while now. The 2007 in the footer is just the theme. I added 2012 so we look more modern now ;)
raboof
Establlshed Member
 
Posts: 1053
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL

Re: Spammers working overtime

Postby Capoeira » Sat Jul 21, 2012 1:49 pm

raboof wrote:
Capoeira wrote:1st) The software needs an update. It's from 2007!!!!!

As Nathan mentions, we've been on PHPBB3 for a long while now. The 2007 in the footer is just the theme. I added 2012 so we look more modern now ;)


sorry for that, didn't knew


nathan wrote:If anybody wants to volunteer to install a mod it's fine with me. Send me a PM so I can make sure to do a bleeding edge backup and get you access.


I would do it, but I would like to have someone to do it with me, perhaps via skype. just to share the responsibility

I also wouldn't want to decide what plugin(s) to instal. I guess one or two of the first 6 : http://www.phpbb.com/customise/db/modif ... ti-spam-9/
but they are not available for 3.0.10 yet
User avatar
Capoeira
Establlshed Member
 
Posts: 1112
Joined: Tue May 12, 2009 1:01 pm
Location: Brazil

Re: Spammers working overtime

Postby raboof » Fri Jul 27, 2012 4:22 pm

This is getting out of hand.

Just today (and it's only 18:30) I have deleted no less than 17 'users', all posting 1 or several spam posts.

nathan wrote:If anybody wants to volunteer to install a mod it's fine with me. Send me a PM so I can make sure to do a bleeding edge backup and get you access.

Also, I'll be a way for some time starting this coming week, so we'd want to aim for the second week of August at the earliest.

I won't admit to any PHPBB skills, but I'm willing to help install whatever mod might help.
raboof
Establlshed Member
 
Posts: 1053
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL

Re: Spammers working overtime

Postby raboof » Fri Jul 27, 2012 4:50 pm

http://www.phpbb.com/community/viewtopi ... &t=2122696 suggests a 'Q&A CAPTCHA' works well.

However, installing one removes the image captcha, that doesn't seem like a good idea. I see we already have some antispam questions, perhaps we should add 'name a linux distro' (and allow answers from a reasonable list)?
raboof
Establlshed Member
 
Posts: 1053
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL

Re: Spammers working overtime

Postby bhilmers » Fri Jul 27, 2012 9:51 pm

raboof wrote:http://www.phpbb.com/community/viewtopic.php?f=46&t=2122696 suggests a 'Q&A CAPTCHA' works well.

I am the administrator of a phpbb3 forum that was practically destroyed by spam, with literally hundreds of posts per day. The Q&A CAPTCHA solved the problem completely. It was very easy to set up. And the question can be somewhat obvious, like, "what is the word following "music" on the Linux Musicians banner above?" (freely), and still be effective. I definitely recommend the Q&A CAPTCHA.
bhilmers
Establlshed Member
 
Posts: 36
Joined: Mon Apr 23, 2012 11:44 pm

Re: Spammers working overtime

Postby raboof » Mon Jul 30, 2012 6:43 am

Not to cheer too early, but after my changes the spam has reduced a lot, and what's left is from users that have completed their registration before saturday. So that's looking pretty good.
raboof
Establlshed Member
 
Posts: 1053
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL

Re: Spammers working overtime

Postby Capoeira » Mon Jul 30, 2012 10:39 am

raboof wrote:Not to cheer too early, but after my changes the spam has reduced a lot, and what's left is from users that have completed their registration before saturday. So that's looking pretty good.



what did you do?
User avatar
Capoeira
Establlshed Member
 
Posts: 1112
Joined: Tue May 12, 2009 1:01 pm
Location: Brazil

Re: Spammers working overtime

Postby raboof » Mon Jul 30, 2012 1:20 pm

Lol looks like i finally broke registration entirely - will look into it tonight. :)
raboof
Establlshed Member
 
Posts: 1053
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL

Re: Spammers working overtime

Postby raboof » Mon Jul 30, 2012 5:28 pm

raboof wrote:Lol looks like i finally broke registration entirely - will look into it tonight. :)

OK, looks like the more advanced captcha options don't work because our style/theme is incompatible with this newer version of phpBB.

I don't dare touch that without a recent backup and support, so I put a normal captcha back. sorry :/
raboof
Establlshed Member
 
Posts: 1053
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL

Re: Spammers working overtime

Postby werock » Tue Jul 31, 2012 11:22 am

bhilmers wrote:
raboof wrote:http://www.phpbb.com/community/viewtopic.php?f=46&t=2122696 suggests a 'Q&A CAPTCHA' works well.

I am the administrator of a phpbb3 forum that was practically destroyed by spam, with literally hundreds of posts per day. The Q&A CAPTCHA solved the problem completely. It was very easy to set up. And the question can be somewhat obvious, like, "what is the word following "music" on the Linux Musicians banner above?" (freely), and still be effective. I definitely recommend the Q&A CAPTCHA.


I second that.

The Q&A 'plugin' should be installed by default in 3.0.10. You can configure it in the 'Spambot Countermesures' bit under the General section. The only thing I have found is that you need to change the question from time to time, as they eventually crack it. And you shouldn't use basic maths questions in the Q&A, as they are easy for spambots to crack.
The normal captcha's are useless - the spambots broke them ages ago.

Another thing you can do (although it involves more moderator work) is to set 'New member post limit' to 1. This will put all new members posts in a moderator queue, so at least if the spammers manage to register their posts won't go though.

PM me if you want any help.
werock
Establlshed Member
 
Posts: 43
Joined: Wed Nov 05, 2008 11:23 am

Re: Spammers working overtime

Postby raboof » Tue Jul 31, 2012 9:06 pm

werock wrote:The Q&A 'plugin' should be installed by default in 3.0.10. You can configure it in the 'Spambot Countermesures' bit under the General section.


I tried that, but it seems our current theme/style causes trouble: the Q&A did not show up, and instead no-one could register anymore.

I'd love your help.
raboof
Establlshed Member
 
Posts: 1053
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL

Re: Spammers working overtime

Postby Capoeira » Wed Aug 01, 2012 2:12 pm

raboof wrote:
werock wrote:The Q&A 'plugin' should be installed by default in 3.0.10. You can configure it in the 'Spambot Countermesures' bit under the General section.


I tried that, but it seems our current theme/style causes trouble: the Q&A did not show up, and instead no-one could register anymore.

I'd love your help.


what's wrong with changing the theme? would be nice to have a "repainting"
User avatar
Capoeira
Establlshed Member
 
Posts: 1112
Joined: Tue May 12, 2009 1:01 pm
Location: Brazil

Re: Spammers working overtime

Postby nathan » Tue Aug 07, 2012 4:12 am

Definitely open to updating the theme.
User avatar
nathan
Site Admin
 
Posts: 404
Joined: Mon Dec 11, 2006 8:53 pm
Location: Phoenix, AZ

Re: Spammers working overtime

Postby StudioDave » Thu Aug 09, 2012 10:49 am

Is it not possible for the spam to be ended here ? How do the spammers get access to a board that requires a login ? Is there a way to foil attempts at logging in if it's not a real person ?

This morning every forum was topped by spam. Not attractive. Yes, I know to check back later, but a newbie directed here from one of my articles might think the site is just a spam collector and not bother returning.

Would a system using a capcha work better ?

Best,

dp
StudioDave
Establlshed Member
 
Posts: 453
Joined: Sat Nov 01, 2008 1:12 pm

PreviousNext

Return to Suggestion Box

Who is online

Users browsing this forum: No registered users and 1 guest