Page 2 of 4

Posted: Mon Dec 03, 2007 11:25 am
by toTOW

Posted: Mon Dec 03, 2007 3:56 pm
by toTOW

Posted: Mon Dec 03, 2007 9:23 pm
by toTOW

Bots

Posted: Tue Dec 04, 2007 2:06 am
by v00d00
Sorry if any of these have already been noticed, but here we go.

<-- 1-50 -->
None thankfully.


<-- 51-100 -->
http://foldingforum.org/profile.php?mod ... ofile&u=67
http://foldingforum.org/profile.php?mod ... ofile&u=70
http://foldingforum.org/profile.php?mod ... ofile&u=71
http://foldingforum.org/profile.php?mod ... ofile&u=72
http://foldingforum.org/profile.php?mod ... ofile&u=80


<-- 101-150 -->
http://foldingforum.org/profile.php?mod ... file&u=102
http://foldingforum.org/profile.php?mod ... file&u=116
http://foldingforum.org/profile.php?mod ... file&u=150


<-- 151-200 -->
http://foldingforum.org/profile.php?mod ... file&u=155
http://foldingforum.org/profile.php?mod ... file&u=157
http://foldingforum.org/profile.php?mod ... file&u=159
http://foldingforum.org/profile.php?mod ... file&u=165
http://foldingforum.org/profile.php?mod ... file&u=166
http://foldingforum.org/profile.php?mod ... file&u=169
http://foldingforum.org/profile.php?mod ... file&u=184
http://foldingforum.org/profile.php?mod ... file&u=191
http://foldingforum.org/profile.php?mod ... file&u=194
http://foldingforum.org/profile.php?mod ... file&u=200


<-- 201-250 -->
http://foldingforum.org/profile.php?mod ... file&u=220
http://foldingforum.org/profile.php?mod ... file&u=222
http://foldingforum.org/profile.php?mod ... file&u=235
http://foldingforum.org/profile.php?mod ... file&u=236
http://foldingforum.org/profile.php?mod ... file&u=237
http://foldingforum.org/profile.php?mod ... file&u=239
http://foldingforum.org/profile.php?mod ... file&u=244
http://foldingforum.org/profile.php?mod ... file&u=246

Those are the easy ones that posted web addresses when the accounts were created. There is probably others that i havent found, but i'll keep looking.

Posted: Tue Dec 04, 2007 3:01 am
by Cprossu

Posted: Tue Dec 04, 2007 10:55 am
by v00d00
Its a pity we couldnt use this CAPTCHA system.

http://www.defectiveyeti.com/iacaptchas/

Posted: Tue Dec 04, 2007 11:46 am
by toTOW
As I said before, this mod may help : http://phpbb.mwegner.de/english/phpbb2/ ... stion-mod/

Or the one that were included in phpBB plus used on the FCF ... sorry I don't read german, but i think this could help : phpbb plus website : http://www.phpbb2.de/ ... and the two first mods here http://www.cback.de/cback_software/phpbb2mods.php

Posted: Tue Dec 04, 2007 2:03 pm
by toTOW

Posted: Tue Dec 04, 2007 4:42 pm
by 7im
v00d00 wrote:Its a pity we couldnt use this CAPTCHA system.

http://www.defectiveyeti.com/iacaptchas/
I just read where a company is selling software that can OCR the captcha text, and bot their way in to any site.

I also read the next iteration of captcha will be to identify objects instead of letters and numbers. For instance, they will show a picture of a kitten, and you have to enter "kitten" to get in. I suppose "cat" would also be accepted.

hack, fix, hack, fix... ;)

Posted: Tue Dec 04, 2007 4:46 pm
by uncle_fungus
Using a RAC (registration authorisation code) + the captcha is by far the most difficult to hack, especially if we change the RAC regularly. And the RAC can be the answer to a question (which would require a human to read it), it would be nigh on impossible for a bot to register.

Posted: Tue Dec 04, 2007 6:08 pm
by toTOW
Even with the visual confirmation activated, the bots can register ... as phpbb is opensource and widespread, they bypass most of the protection ...

I don't know how they do, but they're very hard to stop ... as you can see, they're a lot on the forum :(

this one has just registered : http://foldingforum.org/profile.php?mod ... file&u=277

Posted: Tue Dec 04, 2007 6:15 pm
by uncle_fungus
Yeah, every so often I'm going through the recent registrations and removing the spam bots.

Once we get things sorted with server permissions etc. Bruce and I can start fixing things like this.

Posted: Tue Dec 04, 2007 8:04 pm
by Cprossu

Posted: Tue Dec 04, 2007 9:55 pm
by bruce
I'm not fully convinced that this user can be considered a spammer. They do have a web-page that is commercial site, but it's in russian and there were several legitimate russian members of FCF.org. I'll remove the WWW entry and see what happens.

Many of the other, more obvious spammers have been removed, and we'll continue to fight them until we can get some mods installed on the board to block them.

EDIT: Never mind. On closer inspection it's not a FAH person, so I deleted them.

Posted: Tue Dec 04, 2007 10:42 pm
by Cprossu
yeah, I double check anyone I think that's one with googlecaches before I list em, wouldn't like to list anybody legit as being a spambot :(

btw
http://foldingforum.org/profile.php?mod ... file&u=295
http://foldingforum.org/profile.php?mod ... file&u=296
http://foldingforum.org/profile.php?mod ... file&u=297
http://foldingforum.org/profile.php?mod ... file&u=299