Shadowrun

Catalyst Game Labs => Forum Business => Topic started by: Jackal on <09-03-10/2109:06>

Title: Forum Security
Post by: Jackal on <09-03-10/2109:06>
Nice choice on using SMF for the forum software. I've always liked it better than PHP. That said, with the lack of at least email authentication you can guarantee spam floods. I use the software for pretty much a nothing site, hidden in a sub-directory and I had to resort on using Member Approval (aka, every member had to be manually approved by me) and High Complexity on the visual verification.

Though honestly I don't think the visual verification stops anything other than people with bad eyes because I'm convinced the bots find a loophole around them. At the very least I'd require e-mail activation. But that's just me.

I've ran my own forums on and off over the years and for some reason I can not grasp, spammers still think that flooding forums is a good way to sell their cra....products....
Title: Re: Forum Security
Post by: Bull on <09-03-10/2117:55>
Email verification doesn't help.  It didn't slow down Spammers on Dumpshock at all.  Dunno how well visual worked. 

Bull
Title: Re: Forum Security
Post by: FastJack on <09-03-10/2140:21>
<snip>spammers still think that flooding forums is a good way to sell their cra....products....
Stupid Azzie Corp-hacks. Trust me, if they didn't keep the spam in their UV sector, I'd have killed it by now.
Title: Re: Forum Security
Post by: Caine Hazen on <09-03-10/2210:41>
shit, jackel... they'll let anyone in...

yeah, we'll see how this develops over the next few weeks, and see how security goes
Title: Re: Forum Security
Post by: MJBurrage on <09-04-10/1453:16>
I've ran my own forums on and off over the years and for some reason I can not grasp, spammers still think that flooding forums is a good way to sell their cra....products....
The real problem here is the low cost of spamming.  Spam works because it is so easy and cheap that even if less than 1 in 1000 buy something, the spam has made its sender a profit.

The only solution, other than filters, that would work, would be international regulation with international punishment.
Title: Re: Forum Security
Post by: Jackal on <09-04-10/1841:43>
shit, jackel... they'll let anyone in...

yeah, we'll see how this develops over the next few weeks, and see how security goes

See, proof about the lack of security. ;)
Title: Re: Forum Security
Post by: Casazil on <09-05-10/1943:27>
Spammers must think that Yahoo Groups (or at least mine) are not spam worthy then.

Granted my group isn't very active though.

But if those groups don't get alot of spam maybe they are doing something that works???
Title: Re: Forum Security
Post by: Jackal on <09-10-10/0545:54>
Well, needless to say, if you check the members roster you'll already see spambot id's showing up. It honestly doesn't rake long for them to find new forums. Wish I knew a truely effective way to get rid of forum spammers for
 good.
Title: Re: Forum Security
Post by: FastJack on <09-10-10/0916:10>
Well, needless to say, if you check the members roster you'll already see spambot id's showing up. It honestly doesn't rake long for them to find new forums. Wish I knew a truely effective way to get rid of forum spammers for
 good.
Nuclear bombardment from space.

Unfortunately, that would just leave the Corporate Court, Mars Colony and whoever else is up there left...
Title: Re: Forum Security
Post by: Jadehellbringer on <09-10-10/0943:42>
Eh, it's why there are moderators here. After years of squirreling out and banning spambots on the Battletech forums, it's nothing new to do the same here. I've gotten pretty good at it- if anyone sees spam posts, keep doing what you've been doing and report them to the mods so we can teach them the error of their ways.
Title: Re: Forum Security
Post by: Kontact on <09-19-10/0520:46>
Though honestly I don't think the visual verification stops anything other than people with bad eyes because I'm convinced the bots find a loophole around them.

You can get the code from GNAA's trollforge (http://www.gnaa.eu/browser/trollforge) backup if you want to try and find a way to beat the old bot algorithm used to read captchas.  I imagine it has been improved since the original project died off a couple years ago.  Just be careful.  Those cats don't play nice.
Title: Re: Forum Security
Post by: KarmaInferno on <10-04-10/2205:06>
Is there a "moderate first post" option in SMF?

Requiring the first message from a new member be approved before it posts would really cut down on spammers.

It works great on the message boards I've moderated on Yahoogroups, the spammers mostly don't even try if the "moderate first post" option is turned on.




-k
Title: Re: Forum Security
Post by: Devil on <10-07-10/2232:48>
Email conformation is standard for forums these days. Email confirmation doesn't slow people down or piss people off. It's pretty much expected these days to gain access to any good public forum.

I can imagine having to wait for administrator membership approval or confirmation of your first post. Something like that on a public forum would annoy me far more.

How do other gaming co. forums handle these spam issues? Constant moderation? Captchas?
Title: Re: Forum Security
Post by: Jadehellbringer on <10-08-10/1608:30>
Email conformation is standard for forums these days. Email confirmation doesn't slow people down or piss people off. It's pretty much expected these days to gain access to any good public forum.

I can imagine having to wait for administrator membership approval or confirmation of your first post. Something like that on a public forum would annoy me far more.

How do other gaming co. forums handle these spam issues? Constant moderation? Captchas?

Assassins.  ;D
Title: Re: Forum Security
Post by: hazmat the monstar on <10-08-10/1909:39>
Email conformation is standard for forums these days. Email confirmation doesn't slow people down or piss people off. It's pretty much expected these days to gain access to any good public forum.

I can imagine having to wait for administrator membership approval or confirmation of your first post. Something like that on a public forum would annoy me far more.

How do other gaming co. forums handle these spam issues? Constant moderation? Captchas?

Assassins.  ;D

I am currently out of work if you have a target... - Anonymous runner X45
Title: Re: Forum Security
Post by: KarmaInferno on <10-21-10/0315:42>
Annd... this time nearly every forum and subforum got spammed tonight.




-k
Title: Re: Forum Security
Post by: Angelone on <10-22-10/1756:59>
Yeah, and I goofed an reported each one... Sorry again mods.

Someone had better get that troll bouncer on his job this is getting ridiculous.
Title: Re: Forum Security
Post by: Kot on <11-18-10/1436:43>
SM has spam filters? And registering filters?
Title: Re: Forum Security
Post by: mattness on <11-21-10/1925:52>
SM has spam filters? And registering filters?

Maybe as an addon/plugin (that's why SR-PL forum got the same problem).
I'm an admin of SMF forum for 3+ years, and one day, I gonna block all .ch & .ru traffic (spambots attack through german IPs as well, but it's not fair to german fans to block them because of that...)
Title: Re: Forum Security
Post by: raben-aas on <12-08-10/0752:08>
Ever tried the Akismet spam protection?
In Wordpress, it works pretty well.

http://custom.simplemachines.org/mods/index.php?mod=544
Title: Re: Forum Security
Post by: Kot on <12-08-10/0757:44>
Erm. Any Admin here? Those plugins would stop the spamming.
Title: Re: Forum Security
Post by: raben-aas on <12-08-10/0800:01>
... would PROBABLY and/or HOPEFULLY stop the spamming ...
Title: Re: Forum Security
Post by: Doc Chaos on <12-08-10/1015:51>
They will. Trust me, I use them in SMF boards all the time. Ok, maybe none of them is frequented like this one, but still...
Title: Re: Forum Security
Post by: JM_Hardy on <12-08-10/1019:57>
For some reason, I've had bad luck getting plugins to work. I install them, but they don't actually get in and work. Not sure what I'm doing wrong, but then I'm not really a nuts-and-bolts web guy at all.

Jason H.
Title: Re: Forum Security
Post by: Kot on <12-08-10/1023:52>
We sure do have someone with that kond of skill here? Temporary admin privledges to fix it should be enough.
C'mon, guys? Anyone? Aren't you tired of spambots?
Title: Re: Forum Security
Post by: FastJack on <12-08-10/1059:13>
*cough* I admit, I'm not a professional forum designer, but I am a web developer/designer... ;D
Title: Re: Forum Security
Post by: PeterSmith on <12-08-10/1315:16>
I'll pass along the advice I got from the BattleTech forums' back-end admin:

Don't start installing custom modules in SMF. It can jack up your upgrade path, to the point that you can't upgrade an existing board. You have to install fresh.
Title: Re: Forum Security
Post by: Doc Chaos on <12-09-10/0047:57>
I don't know what that guy installed, but the idea behind all of the mod and module capabilities of SMF is to allow that and AVOID having to work your actual files, so you can always upgrade, because nothing gets actually changed.
Title: Re: Forum Security
Post by: trea5on on <06-29-11/1316:36>
any way to get rid of the captcha on every post?
Title: Re: Forum Security
Post by: Critias on <06-29-11/1404:21>
any way to get rid of the captcha on every post?
I think it turns off after a certain number of posts.
Title: Re: Forum Security
Post by: Onion Man on <06-30-11/0127:07>
any way to get rid of the captcha on every post?
I think it turns off after a certain number of posts.

I don't think I've seen a captcha since I hit 'chummer'.
Title: Re: Forum Security
Post by: trea5on on <06-30-11/1446:48>
yea, it's gone now, lol.