GooRoo
Administrator
Owner Administrator
I luv Gruntz!
Posts: 7,425
Display Name: GooRoo
|
Post by GooRoo on Sept 23, 2013 15:39:05 GMT -8
I may have to investigate some sort of login filter that displays a random string and requires the person attempting to login to duplicate the string. Apparently, the perp who posted the dozens of SPAM threads somehow has a URL spoofer that generates a string that ProBoards software does not recognize as 'spoofed'. At least, several dozen of the 'guests' in the last few days were one person, quickly creating accounts, going through the authorization process and then posting SPAM ... all within about five minutes between initial logins! Candidates for (multiple) thumb amputations, if you ask me!
|
|
|
Post by Perfect Grunt on Sept 24, 2013 1:40:11 GMT -8
I don't remember the registration process, but does it involve a "secret link" shipped to the provided e mail adress?
|
|
GooRoo
Administrator
Owner Administrator
I luv Gruntz!
Posts: 7,425
Display Name: GooRoo
|
Post by GooRoo on Sept 24, 2013 13:43:18 GMT -8
I don't remember the registration process, but does it involve a "secret link" shipped to the provided e mail adress? It is not a "secret link", just a code to enter when following the link to the authorization process. But that is easily automated ... by a competent programmer ... just script opening the e-mail and search for the string preceding the 'code'. What I am talking about is the sort of thing where the string to be copied is graphic, randomly moving up and down in the dialog box, in varying sizes of fonts ... very difficult to automate. These SPAMmers (or perhaps a single perpetrator) probably have a couple of browser tabs open, one to receive the authorization code and one to do their dirty work. Thinking about it, that would only require them to take one extra step in creating an account under a ficticious ID and URL ... entering the scrambled string. I guess it is just not worth my effort. I will just have to check in more often and delete the SPAM threads (and the SPAMmers) ASAP. With the wide spread of time zones, between Gaby and I, we should be able to make it not worth the creep's time to bother us.
|
|
|
Post by SwordGrunt on Sept 24, 2013 15:26:13 GMT -8
At least it doesn't happen often, and can be easily controlled. These people really have nothing better to do...
|
|
|
Post by Blaze The Movie Fan on Sept 24, 2013 15:45:26 GMT -8
The solution seems simple to me. IP ban that spammer.
|
|
|
Post by Perfect Grunt on Sept 25, 2013 2:12:57 GMT -8
Hey, there's another one in this forum!
It would be great if the "report to mod" function would work...
|
|
GooRoo
Administrator
Owner Administrator
I luv Gruntz!
Posts: 7,425
Display Name: GooRoo
|
Post by GooRoo on Sept 25, 2013 12:39:47 GMT -8
Hey, there's another one in this forum! It would be great if the "report to mod" function would work... It does work! I have responded to such reports in deleting SPAM and SPAMmers. And I appreciate those reports!!!
|
|
|
Post by Blaze The Movie Fan on Sept 26, 2013 10:21:27 GMT -8
GooRoo, have you IP banned the spammer yet? I'm sure that is the right solution to this entire problem.
If the spammer is IP banned he has no chance of posting here ever again.
|
|
GooRoo
Administrator
Owner Administrator
I luv Gruntz!
Posts: 7,425
Display Name: GooRoo
|
Post by GooRoo on Sept 26, 2013 12:26:33 GMT -8
GooRoo, have you IP banned the spammer yet? I'm sure that is the right solution to this entire problem. If the spammer is IP banned he has no chance of posting here ever again. The SPAMmer apparently has something to 'spoof' his/her URL, since all of those SPAM posts had different login IDs and different e-mail addresses and URLs ... yet the material was all for the same junk. I did ban in three different formats, but I doubt that will stop him/her ... only quick responses to delete the offending material will work, and hopefully discourage the perp from repeating.
|
|
|
Post by Perfect Grunt on Sept 27, 2013 1:21:23 GMT -8
It would be great if the "report to mod" function would work... It does work! I have responded to such reports in deleting SPAM and SPAMmers. And I appreciate those reports!!! Umm, when I click on "Report to mod" (I did it just now with your post), all I get is an empty page with "error calling pre_reportpost -- Undefined subroutine &ProBoards::Include::db_quote called at /usr/local/PBV4.5/modules-new/reportpost.pl line 28. ". Do you receive my report nontheless? GooRoo, have you IP banned the spammer yet? I'm sure that is the right solution to this entire problem. If the spammer is IP banned he has no chance of posting here ever again. The SPAMmer apparently has something to 'spoof' his/her URL, since all of those SPAM posts had different login IDs and different e-mail addresses and URLs ... yet the material was all for the same junk. I did ban in three different formats, but I doubt that will stop him/her ... only quick responses to delete the offending material will work, and hopefully discourage the perp from repeating. Spammers often use more than one IP. And when someone hacked another ones PC, the innocent "another one" is banned as well.
|
|
GooRoo
Administrator
Owner Administrator
I luv Gruntz!
Posts: 7,425
Display Name: GooRoo
|
Post by GooRoo on Sept 27, 2013 9:45:05 GMT -8
Interesting! I also did a 'report' and received the same error message. But it worked several times in the past two weeks ... I was notified of offending posts! Something is broken, that I will have to report to ProBoards Support. (Maybe ProBoards isn't entirely 'safe' from hackers.)
|
|