PM Spam Bot, GooDFriend Options

[Wi-Ta]

we have that and i usualy search google with the emails use it mostly filters out alot of them altho the latest ones seem to be able to bypass most spam registration sites.

Funny thing is when i google Peter Johnson text some days ago there was nothing.
Now 4 day later you get a completely different result.
This is quit disturbing.

Reason for edit: typo

[JJ]

Now it took the name Pandut and is sending the same thing again.

[Pandut]

Now it took the name Pandut and is sending the same thing again.

D:

Thats not good.

[E.V.E.]

I'd rather say Troll alarm.

- E.V.E.

[Wi-Ta]

Don't worry
Moderator S.W.A.T is on alert.

[ComeOn]

Don't worry
Moderator S.W.A.T is on alert.

Good. I feel safe.
(And, yeah, luuckyboy sent me 2 too. Too bad (for him) I use Chrome.)

[Pandut]

I'd rather say Troll alarm.

- E.V.E.

Not troll. Just bored >>

But yeah, go for the e-mail approval thingy, save the forum from spam-bots before it's too late!

[wb21]

Don't worry
Moderator S.W.A.T is on alert.

Well we have to dispose of 'em with:





Anyway, with e-mail approval, I'm afraid that it might be breached if the programmer who created the bots made a e-mail address for the bots to use (I hope not). Following this incident, it seems that it led to a wave of bot spam attacks (coincidence?).

This post has been edited by D' WRTHBRNGR: 24 Jan 2010, 10:13

[Raven]

EMP the damn to submission :xD

[ComeOn]

That'll just make our motherboards sizzle.
Also, is it possbile to make the sender to type in a set of random letters just to send the message? Like the ones used in online shopping sites? It'll may remove those pesky messages.

This post has been edited by ComeOn225: 24 Jan 2010, 15:03

[Alias]

A lot of good bots can bypass CAPTCHAs.

[wb21]

Wikipedia article on the Achilles' heels of CAPTCHAs

I'm sure hackers and evil programmers out there will keep on making better spambots to breach more and more secure systems, like breaking Enigma Machine codes or superpowers having an arms race. Unless this has been resolved, a large part of banned members here would be bots .

As the Hacker says in Gens, "There's always a way in..."

[Shiro]

Yep, always. There is a Russian prog one could buy which can bypass almost any captcha code.

[GeneralCamo]

I remember when i had a virus. it is still floating around. it is called AVR or advanced virus remover scam. a virus that tells you that ALL windows programs are a trojan. they tell you to buy it then when you buy it, they tell you to buy the advanced version. It is from russia. Had to reformat my whole computer. PLEASE be careful.

[Frostyarmy]

if i was careful i wouldent have to create a new network every 1 - 6 months

[Raven]

Or perhaps we can use image based captcha's like the ones used by Rapidshare briefly...True its difficult to understand the picture, but if only a few users are affected daily, perhaps thats a better option

OR

A small questionnaire about SWR projects to make sure the registering person is genuinely interested about the forums.

This post has been edited by Raven: 26 Jan 2010, 8:44

[wb21]

A small questionnaire about SWR projects to make sure the registering person is genuinely interested about the forums.

Sound good, but they could be bypassed by bots by making pre-programmed answers, i.e. thoretically, a human user would first answer the possible questions or browse around the forums as an unregistered guest, and once he/she knows it, it those "answers" would be then be programmed for the bots to use. A randomized set of questions about the team and its projects should also improve system and make things pretty tough for bots.

This post has been edited by D' WRTHBRNGR: 26 Jan 2010, 9:50

[Alias]

The questionnaire is a stupid idea. What about someone who wants to join to actually find out about the mods to begin with?

Just as you would not know as much about SWR's history as I do, a new user would typically not know as much as you. The questionnaire is a flawed concept.

[Yami]

Or perhaps we can use image based captcha's like the ones used by Rapidshare briefly...True its difficult to understand the picture, but if only a few users are affected daily, perhaps thats a better option

I'm for that !

[n5p29]

how about ask new users to type a special word? like "Shockwavemod", or "RussiaECA". this never changes, so if someone type other than that, it's a bot.

example question on user registration (the underscores are the text box):

CODE

Type "RussiaECA" (without quote marks) if you are not a bot:  [_____________________________________________]

it should typed:

CODE

Type "RussiaECA" (without quote marks) if you are not a bot:  [_RussiaECA___________________________________]

will that work?

This post has been edited by n5p29: 26 Jan 2010, 15:44

[Alias]

A bot can just read that. If they can decode CAPTCHAs there's no doubting they can read a simple string of text.

[Wi-Ta]

I found this

CODE

.nosee { display:none; }

<p class="nosee">
  <label for="email">Ihre eMail wird nicht abgefragt, tragen Sie auch hier bitte NICHTS ein:</label>
  <input id="email" name="email" size="60" value="" />
</p>

<?php
  if(isset($_POST['email']) && $_POST['email']) {
    # nicht eintragen, sondern Mitteilung über Spamverdacht
  }
?>

this only works if hide in css

source (German)

[n5p29]

A bot can just read that. If they can decode CAPTCHAs there's no doubting they can read a simple string of text.

then how if the word is located somewhere else? like "Type the SWR Productions motto" ?

This post has been edited by n5p29: 26 Jan 2010, 15:53

[Yami]

Let's face it the bot are becoming more and more smart ... and eeeeeevil xD

[Wi-Ta]

BTW
I just did see we have already CAPTCHA running