1. SPS Accounts:
    Do you find yourself coming back time after time? Do you appreciate the ongoing hard work to keep this community focused and successful in its mission? Please consider supporting us by upgrading to an SPS Account. Besides the warm and fuzzy feeling that comes from supporting a good cause, you'll also get a significant number of ever-expanding perks and benefits on the site and the forums. Click here to find out more.
    Dismiss Notice
Dismiss Notice
You are currently viewing Boards o' Magick as a guest, but you can register an account here. Registration is fast, easy and free. Once registered you will have access to search the forums, create and respond to threads, PM other members, upload screenshots and access many other features unavailable to guests.

BoM cultivates a friendly and welcoming atmosphere. We have been aiming for quality over quantity with our forums from their inception, and believe that this distinction is truly tangible and valued by our members. We'd love to have you join us today!

(If you have any problems with the registration process or your account login, please contact us. If you've forgotten your username or password, click here.)

PM Spammers

Discussion in 'Sorcerous Sundries' started by Taluntain, Feb 4, 2008.

  1. Taluntain

    Taluntain Resident Alpha and Omega Staff Member ★ SPS Account Holder Resourceful Adored Veteran Pillars of Eternity SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) New Server Contributor [2012] (for helping Sorcerer's Place lease a new, more powerful server!) Torment: Tides of Numenera SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) BoM XenForo Migration Contributor [2015] (for helping support the migration to new forum software!)

    Joined:
    Jun 11, 2000
    Messages:
    23,635
    Media:
    494
    Likes Received:
    560
    Gender:
    Male
    Remove all ads!
    [​IMG] It has come to my attention that lately people (or bots) have been signing up on the boards and then sending spam private messages to our users. We have a zero tolerance policy regarding this - whether a real user or bot, any kind of unsolicited advertising via private messages will result in an instant ban and deletion of the user and all their private messages.

    I'm taking steps to beef up security so that this doesn't happen any more, but manual spammers (China slave labour or equivalent) are much harder to stop than bots.

    If ANY user receives ANY sort of advertising/spam private message from ANY member, please forward the spam PM to me (Taluntain) immediately so that I can deal with the spammer.

    By the way, if you receive a notice of a new PM via e-mail, but see no new PMs when you get on the boards, it means that you've been sent a spam PM, but it has been removed by the time you got on to the boards.

    Apologies for the inconvenience.
     
    Last edited: Feb 4, 2008
    Taluntain, Feb 4, 2008
    #1
  2. Dalveen

    Dalveen Rimmer gone Bald Veteran

    Joined:
    Oct 11, 2002
    Messages:
    1,443
    Media:
    3
    Likes Received:
    9
    Oh great, spam bots PMing everyone, and i STILL don't get any PM's... :(
     
    Dalveen, Feb 4, 2008
    #2
  3. Ziad

    Ziad I speak in rebuses Veteran

    Joined:
    Aug 3, 2004
    Messages:
    4,088
    Media:
    57
    Likes Received:
    47
    Wow. I had no idea bots had become this advanced.

    I hope there are no bots capable of using someone else's account to send a message. It would be pretty irritating to get banned because some bot spammed through your account.
     
    Ziad, Feb 4, 2008
    #3
  4. Taluntain

    Taluntain Resident Alpha and Omega Staff Member ★ SPS Account Holder Resourceful Adored Veteran Pillars of Eternity SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) New Server Contributor [2012] (for helping Sorcerer's Place lease a new, more powerful server!) Torment: Tides of Numenera SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) BoM XenForo Migration Contributor [2015] (for helping support the migration to new forum software!)

    Joined:
    Jun 11, 2000
    Messages:
    23,635
    Media:
    494
    Likes Received:
    560
    Gender:
    Male
    They just make their own accounts, they don't need to use other people's.

    I've added this to the first post: "By the way, if you receive a notice of a new PM via e-mail, but see no new PMs when you get on the boards, it means that you've been sent a spam PM, but it has been removed by the time you got on to the boards."
     
    Taluntain, Feb 4, 2008
    #4
  5. Barmy Army

    Barmy Army Simple mind, simple pleasures... Adored Veteran

    Joined:
    May 26, 2003
    Messages:
    6,586
    Media:
    2
    Likes Received:
    162
    Same brother, we're just not popular!
     
    Barmy Army, Feb 4, 2008
    #5
  6. Dalveen

    Dalveen Rimmer gone Bald Veteran

    Joined:
    Oct 11, 2002
    Messages:
    1,443
    Media:
    3
    Likes Received:
    9
    Well, i know why your not, but.... ;)
     
    Dalveen, Feb 4, 2008
    #6
  7. Barmy Army

    Barmy Army Simple mind, simple pleasures... Adored Veteran

    Joined:
    May 26, 2003
    Messages:
    6,586
    Media:
    2
    Likes Received:
    162
    Don't we all mate... Popularity if overrated!
     
    Barmy Army, Feb 4, 2008
    #7

  8. The Magister Gems: 26/31
    Latest gem: Diamond

    Joined:
    Oct 17, 2006
    Messages:
    2,364
    Media:
    16
    Likes Received:
    7
    Gender:
    Male
    I had no idear this was happening. I stull didn't get any PM's either.


    What really makes me wonder is who would spam SP members?
     
    The Magister, Feb 4, 2008
    #8
  9. Disciple of The Watch

    Disciple of The Watch Preparing The Coming of The New Order Veteran

    Joined:
    Aug 20, 2005
    Messages:
    7,024
    Likes Received:
    38
    Gender:
    Male
    We should be thankful that SP is relatively spam-free.

    I moderate a cellphone forum, and we had to put up a manual account activation to stop the flow of spam. "Natural male enhancement", weight loss pills, cellphone wholesales, pr0n - you name it, I've seen it.

    And it's not SP related, but just a month or so ago, I got hit by a massive wave of spam from phoney eBay users. I was flooded with over 100 of those messages PER DAY for a FULL FREAKING MONTH. Do a quick calculation just how much spam this equals into. :mad: :mad: :mad: :flaming: :flaming: :flaming:
     
    Disciple of The Watch, Feb 4, 2008
    #9

  10. cmorgan Gems: 6/31
    Latest gem: Jasper

    Joined:
    Jan 31, 2006
    Messages:
    192
    Likes Received:
    3
    darn - sorry - got one, but deleted before reading this thread - will send if another pops through the filter.

    And here I thought that some unknown woman named elsie108 was thinking I was such a cool guy and al :cool: l...
     
    cmorgan, Feb 5, 2008
    #10
  11. Montresor

    Montresor Mostly Harmless Staff Member ★ SPS Account Holder

    Joined:
    Aug 11, 2005
    Messages:
    3,103
    Media:
    127
    Likes Received:
    183
    Gender:
    Male
    Spammers ... :mad: :nolike: :grr: :almostmad: :flaming: ...

    A manual activation procedure, as suggested by DotW, will prevent bots from opening accounts. For example, a new user will have to open an e-mail and click on an activation link, then perform some operation on the page that opens.

    This will also be a major nuisance to real people trying to open a large number of accounts, since they will need a large number of active e-mail addresses (if a single e-mail address can only be used for one SP account - just remember to block the e-mail address when you block the account so it can't be reused). So on top of the time it takes to open an account at SP, they have to spend extra time opening a new Hotmail or Gmail or Yahoo account every time.

    If all else fails, new accounts could be limited to a certain number of PMs and posts per day for a certain period, which should see to it that spammer accounts are outed and blocked before they can be really profitable.
     
    Montresor, Feb 5, 2008
    #11
  12. Disciple of The Watch

    Disciple of The Watch Preparing The Coming of The New Order Veteran

    Joined:
    Aug 20, 2005
    Messages:
    7,024
    Likes Received:
    38
    Gender:
    Male
    Manual activations technically COULD work, but keep in mind the forum I moderate is rather small. SP is MUCH bigger, so it could make manual activations a real pain.

    The best option I see would be to temporarely disable ALL posts (public+PM) for newly registered users. It could go hand-in-hand with the manual activations (in case a manual approval of a spam account occurs - yes, it can happen), or work as a standalone system.

    Or ultimately, if all else fails, go for banning blocks of IP adresses.
     
    Disciple of The Watch, Feb 5, 2008
    #12
  13. Taluntain

    Taluntain Resident Alpha and Omega Staff Member ★ SPS Account Holder Resourceful Adored Veteran Pillars of Eternity SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) New Server Contributor [2012] (for helping Sorcerer's Place lease a new, more powerful server!) Torment: Tides of Numenera SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) BoM XenForo Migration Contributor [2015] (for helping support the migration to new forum software!)

    Joined:
    Jun 11, 2000
    Messages:
    23,635
    Media:
    494
    Likes Received:
    560
    Gender:
    Male
    This kind of PM limiting is not possible currently. I could make it impossible for new users to use the PM system altogether, but that'd also mean that they wouldn't get our Welcome PM, which is a rather big downside.
     
    Taluntain, Feb 5, 2008
    #13
  14. Ziad

    Ziad I speak in rebuses Veteran

    Joined:
    Aug 3, 2004
    Messages:
    4,088
    Media:
    57
    Likes Received:
    47
    I'm always against banning IP addresses. The way my internet connection works a couple of hundred of users (possibly several hundreds) all get our local IP addresses then we all interact with the rest of the internet through a handful of external IP addresses. Every once in a while I stumble a site that tells me I'm banned, even though I've never seen it before, and I start cursing whoever used the internet in the building and got banned. I know IP banning is much easier for the admins, and I suppose some poor soul will have to pay for the spammers if that ends up being the only viable solution.
     
    Ziad, Feb 6, 2008
    #14

  15. Enagonios Gems: 31/31
    Latest gem: Rogue Stone

    Joined:
    Apr 8, 2001
    Messages:
    6,089
    Likes Received:
    5
    lmao :D
     
    Enagonios, Feb 6, 2008
    #15
  16. Disciple of The Watch

    Disciple of The Watch Preparing The Coming of The New Order Veteran

    Joined:
    Aug 20, 2005
    Messages:
    7,024
    Likes Received:
    38
    Gender:
    Male
    I mentioned manual activations in my last post. The email + link Monty mentions would block bots, but there are also some real people spamming.

    The policy we have in place in the forum I moderate against spammers is relatively easy: First, the registration webpage has some code on a drawing which acts as a first line of defense against bots. Second, an email is sent to one of the three Admins (if the third one doesen't show up more often, I think it's not impossible I get promoted to Admin). The Admin inspects the new account, and decides to approve or not the new account. While the account is waiting to be approved, the user/spammer cannot post messages of any kind, both private and public. If approved, the account is closely monitored, and if it turns out to be a spammer, both username and email get a permaban.

    To also further choke out the spammer traffic, one of the Admins put a ban on all @hotmail.com (and it's variants) and @gmail.com (+ variants), both being spammer favorites. We know this policy affects legit users. The Admin in question said he'd monitor traffic and check if we keep this ban enforced or not.

    As a result, it's been aeons since I last canned a spammer. Manual approvals work like a charm, but we are a small forum with small traffic, so Admins aren't overwhelmed with approval requests. SP, I suspect, has much bigger traffic, so it likely would be, ah, more difficult to do, but this policy is a very effective way to thin out spam.
     
    Disciple of The Watch, Feb 6, 2008
    #16
  17. Taluntain

    Taluntain Resident Alpha and Omega Staff Member ★ SPS Account Holder Resourceful Adored Veteran Pillars of Eternity SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) New Server Contributor [2012] (for helping Sorcerer's Place lease a new, more powerful server!) Torment: Tides of Numenera SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) BoM XenForo Migration Contributor [2015] (for helping support the migration to new forum software!)

    Joined:
    Jun 11, 2000
    Messages:
    23,635
    Media:
    494
    Likes Received:
    560
    Gender:
    Male
    90% of registrations from hotmail and gmail are legit. Blocking both will get rid of most spammers, but it'll affect valid users far more.
     
    Taluntain, Feb 6, 2008
    #17
  18. Disciple of The Watch

    Disciple of The Watch Preparing The Coming of The New Order Veteran

    Joined:
    Aug 20, 2005
    Messages:
    7,024
    Likes Received:
    38
    Gender:
    Male
    Tal, I know most of the registrations from Hotmail and Gmail are legit. I do not believe the ban still in place - I'm just a mod, so there are some things I'm not privvy to.

    The manual approval might be a viable option, but it all depends on the traffic here.
     
    Disciple of The Watch, Feb 6, 2008
    #18
  19. Taluntain

    Taluntain Resident Alpha and Omega Staff Member ★ SPS Account Holder Resourceful Adored Veteran Pillars of Eternity SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) New Server Contributor [2012] (for helping Sorcerer's Place lease a new, more powerful server!) Torment: Tides of Numenera SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) BoM XenForo Migration Contributor [2015] (for helping support the migration to new forum software!)

    Joined:
    Jun 11, 2000
    Messages:
    23,635
    Media:
    494
    Likes Received:
    560
    Gender:
    Male
    For other kinds of spammers, yes, but PM spammers don't really give themselves away at registration usually. Anyway, the measures that we're employing are obviously not something I'll disclose here for every spammer to read. ;)
     
    Taluntain, Feb 7, 2008
    #19
Sorcerer's Place is a project run entirely by fans and for fans. Maintaining Sorcerer's Place and a stable environment for all our hosted sites requires a substantial amount of our time and funds on a regular basis, so please consider supporting us to keep the site up & running smoothly. Thank you!

Sorcerers.net is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to products on amazon.com, amazon.ca and amazon.co.uk. Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates.