turned off signatures for some users


Jon Broderick
Administrator
Joined: 10/31/00
Posts: 3,320
Jon Broderick
Administrator
Joined: 10/31/00
Posts: 3,320
10/02/2008 12:52 am
Hi,
We have been getting clobbered with forum spam lately, and have had to disable some features.

The forum spammer's goal is to write links in the forum that point to some site or other.

So we have turned off bbcode in all forums, which disallows links in forum posts.

We have also turned off signatures for free users, which disallows links in signatures. We left signatures on for non-free users. All forum spammers are free users.


We hope to come up with a better solution shortly, but this should give us the maximum usefulness and hopefully discourage future spam.

Sorry about the incovenience, I know people love their sigs :)
Jon
Jon Broderick
Guitar Tricks Instructor


www.GuitarTricks.com - Home of Online Guitar Lessons
# 1
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
10/02/2008 2:20 pm
Bummer, never really seen much spam in sig files myself... is this a permanent change?
# 2
Kevin Taylor
Guitar Tricks Instructor
Joined: 03/05/00
Posts: 4,722
Kevin Taylor
Guitar Tricks Instructor
Joined: 03/05/00
Posts: 4,722
10/02/2008 3:22 pm
Are all these spammers required to verify their emails etc?

I can't remember if Guitar Tricks still does the whole "enter the number above to verify" and "reply by email verification" thing.

If not it might help. (even though it's annoying as hell)
# 3
LChance
Registered User
Joined: 09/03/08
Posts: 36
LChance
Registered User
Joined: 09/03/08
Posts: 36
10/02/2008 3:25 pm
Hi Jon,

Originally Posted by: Jon BroderickWe have been getting clobbered with forum spam lately, and have had to disable some features.

Most spammers are bots. It has been my experience that implementing a couple of things will significantly slow them down, if not stop them entirely.

1. Use CAPTCHA to complete the registration process. Bots cannot read the graphic, so they cannot register.
2. Disable posting by guests (unregistered users).

I'm not trying to step on any toes here. I'm just trying to help. :)
# 4
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
10/02/2008 4:52 pm
I'm a guest and have been posting here for a couple of years. I've thought about registering a few times but I reckon I know enough about playing guitar already... there are quiet a few regulars in and out of the boards that are not registered members too (Maestro Shaz & Speedster to name but two of the most advanced players on the site). I'm not sure ihow many would upgrade just to be able to post but I probably wouldn't (no offense intended - just the way it is with me)...
# 5
Kevin Taylor
Guitar Tricks Instructor
Joined: 03/05/00
Posts: 4,722
Kevin Taylor
Guitar Tricks Instructor
Joined: 03/05/00
Posts: 4,722
10/02/2008 5:02 pm
You wouldn't have to upgrade to paying member status to become a registered user.
It's just basically a verification system showing that you're a real person and not a bot by using CAPTCHA and clicking a link in an email.


I think the forum already requires verification by email but they stopped using CAPTCHA cause it was a pain to use.

I think Guests are allowed to post in the Open Forum though, which might be part of the problem.
# 6
LChance
Registered User
Joined: 09/03/08
Posts: 36
LChance
Registered User
Joined: 09/03/08
Posts: 36
10/02/2008 5:03 pm
Hi Superhuman,

By guests, I was not targeting folks such as yourself. You are a registered user. By guests, I mean folks that can post, without first registering for an account.
# 7
LChance
Registered User
Joined: 09/03/08
Posts: 36
LChance
Registered User
Joined: 09/03/08
Posts: 36
10/02/2008 5:07 pm
Hi Kevin,

I enjoy your lessons, by the way. Good stuff. :)

Originally Posted by: Kevin TaylorI think the forum already requires verification by email but they stopped using CAPTCHA cause it was a pain to use.


I would rather deal with the minor inconvenience of CAPTCHA than this constant bombardment of spam, but that's just me. ;)

CAPTCHA would be a far better solution, IMHO, than stripping features away from us regular folks. :cool:
# 8
Jon Broderick
Administrator
Joined: 10/31/00
Posts: 3,320
Jon Broderick
Administrator
Joined: 10/31/00
Posts: 3,320
10/02/2008 7:27 pm
Originally Posted by: LChanceHi Jon,


Most spammers are bots. It has been my experience that implementing a couple of things will significantly slow them down, if not stop them entirely.

1. Use CAPTCHA to complete the registration process. Bots cannot read the graphic, so they cannot register.
2. Disable posting by guests (unregistered users).

I'm not trying to step on any toes here. I'm just trying to help. :)


I run another board that uses captcha and it isn't even slowing them down these days.

It seems there is something new afoot in bot-land.
Jon Broderick
Guitar Tricks Instructor


www.GuitarTricks.com - Home of Online Guitar Lessons
# 9
Jon Broderick
Administrator
Joined: 10/31/00
Posts: 3,320
Jon Broderick
Administrator
Joined: 10/31/00
Posts: 3,320
10/02/2008 7:27 pm
Originally Posted by: SuperhumanBummer, never really seen much spam in sig files myself... is this a permanent change?


Until we get a better idea.

The sig allows a clickable url, and that is what the bots are after.
Jon Broderick
Guitar Tricks Instructor


www.GuitarTricks.com - Home of Online Guitar Lessons
# 10
LChance
Registered User
Joined: 09/03/08
Posts: 36
LChance
Registered User
Joined: 09/03/08
Posts: 36
10/02/2008 7:38 pm
Originally Posted by: Jon BroderickI run another board that uses captcha and it isn't even slowing them down these days.

It seems there is something new afoot in bot-land.

I wonder what board script you are using? CAPTCHA stops bots at my sites. IMO, stripping BB code does nothing to stop bots (they don't think). They will post their garbage whether the link is "clickable" or not.

There are only two ways that I can think of for bots to beat CAPTCHA. 1) Text is used instead of graphics. 2) There is no randomization of the code written to the graphic file. Assuming, of course, posting has been disabled for gusts. I digress.
# 11
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
10/03/2008 9:15 am
Originally Posted by: LChanceHi Superhuman,

By guests, I was not targeting folks such as yourself. You are a registered user. By guests, I mean folks that can post, without first registering for an account.


I hear ya. Do spammers actually get any returns out of all of this spamming? I mean, surely the web culture has evolved to the stage now that spamming is like exposing yourself in public.... looked at with disdain (for the most part!).
# 12
Kevin Taylor
Guitar Tricks Instructor
Joined: 03/05/00
Posts: 4,722
Kevin Taylor
Guitar Tricks Instructor
Joined: 03/05/00
Posts: 4,722
10/03/2008 3:31 pm
It's all about the money so they don't care.
I think they're getting paid by the click, so they use bots to post millions of these things in the hopes of getting a couple of hundred people to click on the link.
# 13
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
10/06/2008 9:46 am
Just noticed that since the signatures have been done away with there are even more spam posts... ridiculous stuff too. Maybe one of the mods should do a check and delete these posts once a day?
Is the sig file change permanent seeing as the spam happens regardless? A little more moderation should at least keep the problem at bay - some of those explicit posts stay as the top post in a section for a few days at times, not really a good advertisement for new members.
# 14
light487
Forum Administrator
Joined: 07/14/07
Posts: 849
light487
Forum Administrator
Joined: 07/14/07
Posts: 849
10/06/2008 12:46 pm
Some days are worse than others.. I just deleted about a dozen but they are pretty much deleted within 12 hours if not sooner.. I think about 4 to 6 hours is pretty normal for detecting and deleting. To aid us though, people can report the bad posts with the report bad post button on each post. This will send us an email to tell us. I receive my emails on my mobile phone, so I know within 5 minutes of someone reporting a bad post. Can't always get to a computer immediately but I know to check the next time I am near a computer.
light487
Guitar Tricks Moderator


GuitarTricks
Daily Light Blog
# 15
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
Superhuman
Registered User
Joined: 04/18/05
Posts: 1,334
10/06/2008 1:29 pm
Nice one, about to hit the bad post button on the 'teen porn discussion' thread! :eek:
# 16
Kevin Taylor
Guitar Tricks Instructor
Joined: 03/05/00
Posts: 4,722
Kevin Taylor
Guitar Tricks Instructor
Joined: 03/05/00
Posts: 4,722
10/06/2008 4:45 pm
Originally Posted by: light487. To aid us though, people can report the bad posts with the report bad post button on each post. This will send us an email to tell us.


Didn't even realize that button was there until yesterday. Definitely a lot easier than posting a link in the admin forum every time :)
# 17

Please register with a free account to post on the forum.