Super Soaker Central forums

Ben · 01-01-2010, 08:06 AM

We just had a PM spammer who managed to get out 241 PMs before I noticed. He's been banned and I deleted every PM he sent. Apologies to those who were spammed.

In the future, please let me know if you receive a spam PM. These can be hard to detect as PM spammers intentionally avoid messaging administrators.

Ben · 03-17-2010, 08:39 AM

Another PM spammer sent off 390 PMs before I stopped him. I deleted them all and banned the user in question.

I'll be looking into ways to avoid this problem. I've already doubled the minimum time between sending PMs to 120 seconds and set email verification to be required for registration.

Banning use of anonymous proxies is another thing we could do as these spammers use anonymous proxies. Not allowing PMs to be sent until a user has 1 post makes sense too. Neither of these can be done without modifying the board, though. There also are some modifications that automatically add new entries to our ban lists, but as far as I know I'd need to upgrade vBulletin to use them.

You guys have any other ideas?

Specter · 03-17-2010, 12:06 PM

IP ban maybe?

C-A_99 · 03-17-2010, 01:06 PM

IP bans don't work on users behind proxies. However, they should work on proxies themselves but there should be a better method to block them due to how many there are. (some proxies are constantly being created to, for example, get around unreasonable internet filtering at schools or work)

If I remember correctly, SSC used to not require birthday entry, but now it seems that it does. (correct me if I'm wrong) Blocking proxies would be an additional privacy barrier for users to deal with and in this day and age, you can't blame anyone for wanting to preserve privacy/security. That said, I think very few, if any users go around here via proxy for privacy. Proxies seem to be most commonly used on forums to circumvent IP bans.

I don't know how banning proxies would work, but I'm sure you have a way to do it.

The PM time delay shouldn't be increased too far. 2 minutes is already quite a bit and can deter those who simply wish to send another message to correct/clarify something. However, it may be the only way if the BB software doesn't have any features to detect when the user, say, sends 10 PM's in an hour. (I'm assuming it doesn't otherwise you would have implemented it already)

For email, there's not much that can be done. Non-ISP/domain name provided webmail is the most commonly used system so banning gmail/yahoo/hotmail is not a good option. If I remember correctly, you were already aware of this issue.

That's about all I know of that I could suggest for now.

zeda.beta · 03-17-2010, 05:39 PM

You could have a set post barrier for new members, so that no one can send a private message until we recognize them as an actual member of the SSC community. 10-15 posts should be adequate.
-Zeda

Specter · 03-17-2010, 05:49 PM

Quote:

Originally Posted by zeda.beta

You could have a set post barrier for new members, so that no one can send a private message until we recognize them as an actual member of the SSC community. 10-15 posts should be adequate.
-Zeda

Ben did say he has it set that you can't send a PM until you have 1 post, but I agree it could be set a little higher than 1 because the spammer may notice that and leave a post with no relevance to a topic just so that they can send the PMs. (unless however it is a spam bot)

zeda.beta · 03-17-2010, 06:12 PM

That is why we have to check the new members, and make sure they are posting with relevance to the topics, or at least trying to. @Specter: But I didn't see that, at least one post is going to stop the spambots.
-Zeda

01-01-2010, 08:06 AM	#1
Ben Founder Join Date: Mar 2003 Location: College Park, Maryland Posts: 6,395 UserID: 1	PM spammer banned We just had a PM spammer who managed to get out 241 PMs before I noticed. He's been banned and I deleted every PM he sent. Apologies to those who were spammed. In the future, please let me know if you receive a spam PM. These can be hard to detect as PM spammers intentionally avoid messaging administrators. __________________ / Please read this before emailing or PMing me Do not ask me water gun questions by email or PM. My response will be to post the question at the forum. My free time is limited. If I do have time I will post a reply to your thread. Private questions and suggestions are welcome by PM and email. Also, I do not sell or buy water guns online. Last edited by Ben : 06-10-2010 at 08:56 AM.

03-17-2010, 08:39 AM	#2
Ben Founder Join Date: Mar 2003 Location: College Park, Maryland Posts: 6,395 UserID: 1	Re: PM spammer banned Another PM spammer sent off 390 PMs before I stopped him. I deleted them all and banned the user in question. I'll be looking into ways to avoid this problem. I've already doubled the minimum time between sending PMs to 120 seconds and set email verification to be required for registration. Banning use of anonymous proxies is another thing we could do as these spammers use anonymous proxies. Not allowing PMs to be sent until a user has 1 post makes sense too. Neither of these can be done without modifying the board, though. There also are some modifications that automatically add new entries to our ban lists, but as far as I know I'd need to upgrade vBulletin to use them. You guys have any other ideas? __________________ / Please read this before emailing or PMing me Do not ask me water gun questions by email or PM. My response will be to post the question at the forum. My free time is limited. If I do have time I will post a reply to your thread. Private questions and suggestions are welcome by PM and email. Also, I do not sell or buy water guns online. Last edited by Ben : 03-17-2010 at 08:51 AM.

03-17-2010, 12:06 PM	#3
Specter I'll be around, but not as much as before Join Date: May 2007 Location: Bound Brook, NJ/Widener U-Chester, PA Posts: 447 UserID: 1090	Re: PM spammer banned IP ban maybe? __________________ My "arsenal": Customizable APH, Storm 600 pistol (still haven't finished fixing this), launcher- Model:AB1.0(Decommissioned), AB1.5, soon AB 1.1(2"rebuild) maybe ill get something else in the future My site

03-17-2010, 01:06 PM	#4
C-A_99 Administrator Join Date: Aug 2006 Location: MI, US Posts: 1,227 UserID: 809	Re: PM spammer banned IP bans don't work on users behind proxies. However, they should work on proxies themselves but there should be a better method to block them due to how many there are. (some proxies are constantly being created to, for example, get around unreasonable internet filtering at schools or work) If I remember correctly, SSC used to not require birthday entry, but now it seems that it does. (correct me if I'm wrong) Blocking proxies would be an additional privacy barrier for users to deal with and in this day and age, you can't blame anyone for wanting to preserve privacy/security. That said, I think very few, if any users go around here via proxy for privacy. Proxies seem to be most commonly used on forums to circumvent IP bans. I don't know how banning proxies would work, but I'm sure you have a way to do it. The PM time delay shouldn't be increased too far. 2 minutes is already quite a bit and can deter those who simply wish to send another message to correct/clarify something. However, it may be the only way if the BB software doesn't have any features to detect when the user, say, sends 10 PM's in an hour. (I'm assuming it doesn't otherwise you would have implemented it already) For email, there's not much that can be done. Non-ISP/domain name provided webmail is the most commonly used system so banning gmail/yahoo/hotmail is not a good option. If I remember correctly, you were already aware of this issue. That's about all I know of that I could suggest for now. __________________ Teams, Armory, Local Water Warfare, etc. HydroBrawl Water Warfare.

03-17-2010, 05:39 PM	#5
zeda.beta Senior Member Join Date: May 2009 Location: Crater 5, Moon Posts: 462 UserID: 1825	Re: PM spammer banned You could have a set post barrier for new members, so that no one can send a private message until we recognize them as an actual member of the SSC community. 10-15 posts should be adequate. -Zeda __________________ I reject your reality and substitute my own. Quack damn you.

03-17-2010, 06:12 PM	#7
zeda.beta Senior Member Join Date: May 2009 Location: Crater 5, Moon Posts: 462 UserID: 1825	Re: PM spammer banned That is why we have to check the new members, and make sure they are posting with relevance to the topics, or at least trying to. @Specter: But I didn't see that, at least one post is going to stop the spambots. -Zeda __________________ I reject your reality and substitute my own. Quack damn you.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)