Suggested anti bot measures

[Gorth]

Since they are getting more and more annoying, Obsidian could make them do something useful...

 

Like modifying the forum software to automatically replace anything remotely ressembling a url by posters with a postcount of less than 5 with a url that points to www.obsidianent.com, www.savethedodo.org, whatever.

 

If you can't prevent them from joining, I'm pretty sure you can prevent them from linking to whatever it is they want to sell

[Dark_Raven]

Or have an admin or global approve a new user account.

[Surreptishus]

Also maybe implement a rule for new posters where they can't post in the main part of the boards (the entirety of the boards as they exist now) until they make a few posts in a specific part of the forum for new members - an introductory area.

 

While it doesn't stop the bots from getting in, it does restrict them to a specific part thus making for easy identification and removal.

 

EDIT: I don't think admin approved accounts is a feasible idea for a public forum. It creates extra work - I'd imagine volume of signing up to be quiet high around the launch of a game. Also how do you tell if a bot really is a bot at that stage?

 

EDIT 2: Also ban certain words in user names. "Viagra" and "Cialis" are two that come to mind.

Edited December 3, 2006 by Surreptishus

[Dark_Raven]

Preban e-mails that have the extension of .ru and .info in them.

[Pop]

A lot of bots seem to have random letters and numbers in their names (ie KyleA236, etc.) so a word ban would only be partially effective. And what about those legitimate Viagra_Cowboys that want in on our fine forum?

 

Perhaps, instead of requiring admin approval (I've seen it done without complaint on forums with +4 active administrators) they could implement one of those confirmation letter scrambles, where a sequence of letters and numbers is displayed on an irregular background to confuse bots and entering the sequence into a box is required to legitimize the registration. That seems to work a lot of times.

 

Or you could disable the ability to create threads when a poster has 0 posts, but this runs into the same problem that the previously mentioned url-privelege runs into (aside from that solution's ineffectiveness in preventing clutter by the creation of threads, which seems to be the priority issue, as I have not yet seen a bot that has posted in an existing thread) in that this is a game forum, and obviously if a n00b turns to the community here for help, they would be largely prevented from getting the assistance they need (few n00bs seem to read or regard forum rules regarding new threads, as it is)

[Fionavar]

At the present moment we are hoping to upgrade the board software next week. I am REALLY sorry for both the frustration this likely causes the community and the extra load it puts on the Mod Squad. In a twisted way I am grateful for them ... as I get to see the membership publicly and PM let me know their concern and extend their care. So thanks! Hopefully not too long now ...

 

Respectfully,

 

Fionavar

[Diamond]

EDIT 2: Also ban certain words in user names. "Viagra" and "Cialis" are two that come to mind.

<{POST_SNAPBACK}>

I don't believe I've seen the bots with these words in their names.

Preban e-mails that have the extension of .ru and .info in them.

<{POST_SNAPBACK}>

HEY! :angry:

[Musopticon?]

Preban any name that starts with 'money' or 'casino' or 'bets'.

[Diamond]

Perhaps, instead of requiring admin approval (I've seen it done without complaint on forums with +4 active administrators) they could implement one of those confirmation letter scrambles, where a sequence of letters and numbers is displayed on an irregular background to confuse bots and entering the sequence into a box is required to legitimize the registration. That seems to work a lot of times.

<{POST_SNAPBACK}>

CAPTCHA

 

This board already has one (registration).

 

 

 

There is an alternative method that involves randomizing form field names and placing hidden html form elements that are attractive to bots.

E.g.:

 

Before:

title field: "title"

post field: "post"

 

After:

bogus hidden field: "post"

title field: "f0Wno6t10"

bogus hidden field: "title"

post field: "qp5ew46A2"

 

EDIT:

Also, the reason that the bots keep picking "" smilie is because it is the first in the list. Add one more hidden element (say, id=0) in front of the list, the bots will pick it, the humans won't. The board can just swallow the post with no error and the bot will think that it has posted, but no actual post would be made.

Edited December 3, 2006 by Diamond

[Immortality]

I have an IPB forum as well.

 

I've also banned all .ru and .info email addresses (among others), HOWEVER, my forum is for a spanish community (english speakers post there occasionally as well). But Obsidian being entirely international has to be able to accommodate russian people too, don't you think?

 

Also, having an admin just to validate accounts sounds to me like a waste of time.... not to mention modifying the forum software to change urls from people with less than 5 posts (if that had been done I wouldn't have had the opportunity to share the Interview to Obsidian with you ahem).

 

Oddly enough, the other day a spambot posted the url to a spambot software in my forums. After reading the info of what the program can do, I was pretty much appalled as everything seems to be 100% automated. They can decipher the image code, they can use the email verification, etc. I'm currently hoping the IPB people think of something for their 2.2 version, which already has a RC 3, but still nothing final.

 

...and even so, I am 100% sure that when version 2.2 gets released, the spambot makers will find a way to make their bots bypass all the filters for that version too.

 

Admins/GMs/Mods, I think we're doomed to delete and ban posts and spambots.

 

Regards,

Edited December 3, 2006 by Immortality

[metadigital]

Bots can't circumvent CAPTCHA; that would prevent the automation of account creation as part of the spam, which would prevent most of the spam, because manually creating an account to spam with would invalidate the advantages of automating the message.

[Diamond]

Then this would mean this board has a poor CAPTCHA in the registration form, I suppose, since it doesn't stop bots from registering.

[metadigital]

Yes.

[Blank]

A lot of bots seem to have random letters and numbers in their names (ie KyleA236, etc.) so a word ban would only be partially effective. And what about those legitimate Viagra_Cowboys that want in on our fine forum?

You're right, let's just do the wordban thing. I don't know if I want a legitimate "Viagra_Cowboy" around.

[Hydrogen]

A lot of bots seem to have random letters and numbers in their names (ie KyleA236, etc.) so a word ban would only be partially effective. And what about those legitimate Viagra_Cowboys that want in on our fine forum?

You're right, let's just do the wordban thing. I don't know if I want a legitimate "Viagra_Cowboy" around.

<{POST_SNAPBACK}>

 

Agreed. I'm not sure that I want one of those around either.

 

 

Hopefully the spambots will be gone soon. Kinda like an early Chirstmas present.

[Dark_Raven]

Early could not come soon enough.

[metadigital]

You're telling me.

[alanschu]

Alternatively, and this is something I have seen other threads do, is to not let new users start new threads until they hit a nominal post count like 50 or so.

 

At least as a stop gap. Some may seem it's a bit draconian, but I think any legit user will not have that much of a hard time getting to 50 posts, especially if they're active enough to be starting new threads.

 

Heck, you could probably make it 5 posts. Or even 1.

Edited December 9, 2006 by alanschu

[Weiser_Cain]

Nah, I've joined places just to ask a question, making me spame topics in order to ask that one question seems counterproductive

[metadigital]

It's all moot.

[Surreptishus]

It's all moot.

<{POST_SNAPBACK}>

Yes, the bots seem quiet today... almost as if they have become mute.

[Krookie]

At the present moment we are hoping to upgrade the board software next week. I am REALLY sorry for both the frustration this likely causes the community and the extra load it puts on the Mod Squad. In a twisted way I am grateful for them ... as I get to see the membership publicly and PM let me know their concern and extend their care. So thanks! Hopefully not too long now ...

 

Respectfully,

 

Fionavar

<{POST_SNAPBACK}>

 

When you say upgrade...Do you mean the forum will have better graphics?

[metadigital]

It's all moot.

<{POST_SNAPBACK}>

Yes, the bots seem quiet today... almost as if they have become mute.

<{POST_SNAPBACK}>

That's just the mods jumping quicker than the forumites.

 

But, yeah, it'll be moo, soon.

[Mortis Nai]

Is there anyway to use the Picture Code Verification up to a certain user level?

 

So that Level 0 requires CAPTCHA varification everytime the user wants to post, but level 1 and Up Does not require CAPTCHA varification?

 

This way it gets around the Bot accounts but does not stand to bug reguler users?

[alanschu]

This solution is a bit less draconian than mine.

 

 

And undermines my Xenophobic desires to scare new users away

Edited December 11, 2006 by alanschu