Jump to content
Xtreme .Net Talk

Recommended Posts

Posted

Has this board been assaulted by more spam recently or am I just imagining things? It just seems like over the past few weeks there has been more spam posts than normal (more than zero and sometimes two or three at once).

 

Any thoughts? Mods, you probably know best. Is there a spam wave or is it just me?

  • *Experts*
Posted

I've noticed it as well - probably 1 to 3 a day. I just tried to register as a new user and there is the "advanced" feature of typing in the text that displays in a picture, all "mooshed" around. That helps prevent automated registrations so I'm guessing the spammers are 1 person at a time. I would guess they're individuals getting paid to spam boards such as these.

 

I believe they still must register with a valid email address and wait for that, which further indicates individual spammers versus some automated process. Just my guess...

 

-ner

"I want to stand as close to the edge as I can without going over. Out on the edge you see all the kinds of things you can't see from the center." - Kurt Vonnegut
Posted
This happens on a vehicle forum I admin. I belive they get paid to do this. We get the same exact spam by different email addresses, and alot of times, it is a close email name, such as abc123@whatever.com, then next time it is abc124@whatever.com. It gets very frustrating to keep the board clean from this crap.
Live as if you were to die tomorrow. Learn as if you were to live forever.
Gandhi
  • Leaders
Posted
If they sign up with e-mails on the same domain, is it possible to block specific domains for email addresses? For example, some sites (not vB boards in particular) don't allow certain domains such as yahoo/hotmail for signing up.
[sIGPIC]e[/sIGPIC]
Posted
CAPTCHA is extremely effective against bots and other automated attacks. It's been so long that I don't remember but does this board send an email challenge to verify the sign up? What about blocking IP addresses?
Posted
CAPTCHA is extremely effective against bots and other automated attacks. It's been so long that I don't remember but does this board send an email challenge to verify the sign up? What about blocking IP addresses?

 

Your IP changes if you have a basic account when you log on.

 

 

Also blocking certain type of email is possible. The one site I am on, we would see something and I would do a check to make noone else was on that type and would block any email addresses with the same ending. But then they get smart and started using hotmail or yahoo accounts. Problem with that is we would lose alot of legitimate posters. I use a yahoo account.

 

I believe the spamming on forums have increased, because the email blocking is getting much better.

Live as if you were to die tomorrow. Learn as if you were to live forever.
Gandhi
Posted
I've noticed it as well - probably 1 to 3 a day. I just tried to register as a new user and there is the "advanced" feature of typing in the text that displays in a picture, all "mooshed" around. That helps prevent automated registrations so I'm guessing the spammers are 1 person at a time. I would guess they're individuals getting paid to spam boards such as these.
For those that aren't aware, there are tools out there for these <insert your pleasure> out there. These tools have the capability of reading these scrammbled pictures (pictocodes).

 

Change the process in registration, then you will avoid spammers...

My name in binary (from ASCII):

01000001011001000110000101101101 010100000110010101110100011100100110100101100101

Posted
These tools have the capability of reading these scrammbled pictures (pictocodes).
I'm sure you could make the images sufficiently scrambled such that a human could read it while a computer could not. The way around this (in a pseudo automated way) is to set up some kind of a front that feeds the scrambled images from the target site through a high traffic website (usually pr0n) and collect image to display mappings. If everything goes well you'll collect money for the content in addition to cracked CAPTCHAs. It's cheap and effective.

 

Of course, this will only work in cases where there is already a vulnerability on your site such as the ability to algorithmically determine which scrambled image is displayed (so you can look up the correct response in your mapping).

 

Your IP changes if you have a basic account when you log on.
True...I forgot about dynamic IP addresses. And banning an IP block would just be malicious.
Posted
As I'm not about to give the site any business, I modified their advertised picture. Attached is an example of pictocodes that one program seems to be able to bypass:

My name in binary (from ASCII):

01000001011001000110000101101101 010100000110010101110100011100100110100101100101

Posted

I doubt there is an example of every CAPTCHA on the internet in that image...

 

Anyway, I was just curious about the surge that seemed to be going on. The board seems more than amply secure and I think the mods do a great job of removing what little junk manages to work its way on to the board before it becomes too obtrusive.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...