How to slow spammers down

Mick Dawlings Posted in Technical Support 1 year ago

I assume there is a component or something that can help with spammers?
We've not even advertised the site but we're getting hit hard by what seems to be bots creating useless accounts.

Replies
us Mick Dawlings Replied 1 year ago

Part 3

everything found here is official but you are not telling what you are looking for what type of
action/hook/callback you are looking for.

That's not true either. When I have something more technical or 'how do I' question, I post here in the forums. Most of the time, you guys answer with usable information and the rest of the time, try to downplay any ideas being suggested that could help improve your software.

Folks cannot even search your components because you don't have a specific search option just for that long long list. Instead, we have to either already know what we're looking for or go through the entire list.

It's really too bad you chastise your own customers. Not sure how to try to be positive about this when all is does is waste my time so far.

us Mick Dawlings Replied 1 year ago

Part 2

The better method to prevent is to develop a component that uses the signup hook and add certain patterns
in the checking of these names, emails, and if your module result finds the information resemble spam, you
must stop the signup using the hook as below example doing it.

Ya, there's a bit more to it than just that.

You keeps asking about official documentation

Yes, I have asked about documentation, many times but no one ever responds. I've asked 'where is the official, ongoing updated documentation for ossn', not components, not forum posts, the main software called ossn. Is there a collective, updated doc on the main software itself.

I even shared a link to another site where I found such a document but it doesn't seem to be yours but no one ever replies.

us Mick Dawlings Replied 1 year ago

Part 1 since you also limit how much someone can post.

Now i'm called being ludicrous for thinking that social software should have spam controls?

And you say "Many are real people?" Yes, of course they are, they're called spammers and hackers that waste site owners time by building little scripts that do exactly what I showed you.

What is ludicrous is a team of devs sticking together trying to tell a customer that there's no problem here. Spammers and script kiddies are probably the number ONE thing that wastes admin hours with any social software that allows account creations but you think it's less than interesting.

Then you say 'to market their products' which is a ridiculous comment considering I showed you the accounts. It's very clear this is a script kiddy creating account after account just to be a jerk, to harm someone they don't even know and for what reason, obviously not to sell products as username AhUkO7T5GhTscBRtgv.

I've have this software for some time now and so far, it's completely immature considering how it's marketed but I keep struggling to make use of it then you guys post drivel like this. Worse, you also edit posts and censor them too. I"ll take a full snap of this because I suspect you'll edit this as well.

Are you guys kids or wanna be businessmen? You have someone here that took your software seriously and is still trying to make a go of it. Every site that goes up and does well using your software only helps your goals and missions. Why not take input more seriously.

us Mick Dawlings Replied 1 year ago

Really, you say these things about me but do not allow me to reply????

Indonesian Arsalan Shah Replied 1 year ago

The accounts you shared appear to be automated AI spam, which we have also experienced. There is no way to control these because they are programmed to pass the captcha test. It appears ludicrous to blame OSSN for this. People are now creating spam accounts on the community to market their products.
Many of them are real people.

The better method to prevent is to develop a component that uses the signup hook and add certain patterns in the checking of these names, emails, and if your module result finds the information resemble spam, you must stop the signup using the hook as below example doing it.

https://www.opensource-socialnetwork.org/component/view/5891/restrict-usernames .

Which uses https://www.opensource-socialnetwork.org/documentation/view/5589/action-load you may edit that component and filter the users and block them.

You keeps asking about official documentation , everything found here is official but you are not telling what you are looking for what type of action/hook/callback you are looking for. Most of things can be found on community. There is a documentation tab under developers menu and also a references. You are looking for something that is outside the box. We can only provide the way or steps of doing things not doing the things. You must engage a developer who can write and tweak items to your specifications.

On the other hand multiple selection of users on current page https://github.com/opensource-socialnetwork/opensource-socialnetwork/issues/2319

  1. I would also like to ask you which captcha module you are using?
  2. What other measures did you used to prevent them?
  3. Did you searched for apache logs and see where the most signups coming from and tried to block IP?

You may also use the code to delete all unvalidated users

<?php
define('OSSN_ALLOW_SYSTEM_START', TRUE);
require_once('system/start.php');

set_time_limit(0);
$user = new OssnUser();
$list = $user->searchUsers(array(
            'wheres' => array("activation <> ''"),
            'page_limit' => false,
));
foreach($list as $user){
        //if you wanted to perform addtional checks do it here
        //example if($user->fullname like pattern).....
        $user->deleteUser();    
}
us Mick Dawlings Replied 1 year ago

Not sure what to make of your comment Michael. Not a very nice way to treat someone in public forums.
I already know the component does not help. I said that I was trying what ever I could find to prevent this;

enter image description here

Page after page of this nonsense because ossn doesn't even have the most basic thing that any social software should have, spam and bot controls.

As for documentation, I've asked many times if there is any official documentation. Even if there is, it doesn't solve the problem as I see no options what so ever in terms of spam controls.

Your comment is extremely insulting, saying I don't know how to read. Not very nice.

Thanks for adding to the stress of coming back to see the site filled with useless accounts.

German Michael Zülsdorff Replied 1 year ago

I thought I saw somewhere a way to have admin moderate all signups? I'm not sure if it was this software or something else.

This was updated a couple of weeks ago. It does not solve my problem
but could help for now.
https://www.opensource-socialnetwork.org/component/view/3684/disable-member-self-validating
It installs on 7.2 but I see now configuration for it. How does an
admin know when someone signed up?

Mick, perhaps you should leave the configuration of Ossn to someone who is willing and/or able to read and understand the documentation? I mean: What more can I do than provide a detailed description of how it works, like:


II. Purpose and Usage

This component is replacing Ossn's default user activation process like that:

On creating a new member account a mail will be sent to the member as usual
This mail includes a link to be clicked by the member in order to confirm her/his registered address
The member's account still remains inactive, and the site administrator receives a notification email that a new member's activation request is pending and needs to be validated by him
The member may click the activation link some time later again in order to verify the state of his activation request, the site displays a meaningful feedback message like 'activation request still pending' or 'activation successfully completed'
Of course the admin may decline the request completely and remove the pending member instead of activating.

Your comments suggest that you have absolutely no understanding of this, just as you simply ignored the red warning.
"This component/theme does NOT work with the latest OSSN version."

Indonesian Arsalan Shah Replied 1 year ago

Try to use google captcha. We also get spams and they passing google , Cloudflare etc captchas. They are humans. You may often see them here. It have nothing to do with hacker. You just need to design a system that limits the action they perform. Now do you understand why we have restriction here on community? 😂😂😂😂

Do you know what email they use?

us Mick Dawlings Replied 1 year ago

I find no options to even prevent signups while I'm away. Whom ever is doing this will have thousands of accounts by the time I get back. It will take for ever to clean up the mess unless I do it from the database directly.

There must be a strong captcha for ossn, especially since it's easy to tell it's ossn. Once a hacker knows the software you're using, it becomes even easier to hack away. The hacker might even be reading these posts right now.

us Mick Dawlings Replied 1 year ago

Yes, I realized that after I posted but could not edit.
That was the wrong log.

Someone is constantly creating accounts, and using the password reset.
All day, all night and there is no protection what so ever from this kind of problem so far.

I've not found any component or anything that prevents this kind of attack and certainly do not want to have to maintain fail2ban etc for something that should be part of the software.

Do you know of a good captcha component or even a manual moderation for now..
As mentioned, I tried the one component I found but it doesn't seem to do anything.

Premium Version

Due to the many requests in the past for additonal features and components we have decided to develope a premium version. Features like Hashtags, Videos, Polls, Events, Stories, Link Preview, etc included in it.

$199 (Life Time)
Learn More

Other Questions