[08-Mar-2012] New SPAM mitigation scheme in place

SPAM attack this morning at around 6:45 am (Central Standard US) lasted just a couple of minutes before we smoked the Spammer. Before I could look at the name to post here, posts were gone. I only had to mark about 10 posts. Seems to be working pretty effectively.

That was fun! I only had to mark about 5.

Yeah took a break from posting for a few minutes to go Spam hunting - success!

One problem though, he/she has moved some old threads to the front page. Even though the spammer's gone, those old threads remain there

OK, you guys are right, my manual testing apparently uses a standard comment un-publish function that worked correctly. The community moderated approach uses an un-publish mechanism that apparently has a bug. I filed a bug report, we'll see what comes of it.

sb, thanks for your efforts to keep this place spam and bug free :)

Thanks... hopefully the Drupal/plugins-team is quick to implement that function.

THANKS!!!

Looks like the captca measures are working.

Yesterday I needed to verify my post by solving a math problem, and just now I accidentally pressed the "SAVE" button twice and got some kind of warning.

How can I tell my wife that the Gucci handbag purchase is canceled? Cry

Damnit, I missed the bloodbath!

Good job guys!

ty very much mister admin!

Time to make the math equations harder?

I still say add handbag to the list of swear words...that would have broken half the links in that last post

I wonder if they will eventually avoid us, since their posts disappear, or if there are so many that they'll never notice....

This is not working. 3 major spam attacks last night. We can stop them within 10-20 minutes, but they can get 100 posts in before enough people mark them. There needs to be a stronger barrier up front.

I don't know if it would be possible, but I saw one forum where they had a CAPTCHA of blurry text, but the instructions said to ignore the CAPTCHA and just enter the word human. Or something like that. Even if spammers are using humans to register, they probably don't speak English, so simple questions are better than blurry text or math.

simple questions for flashaholics, not just general simple questions. something like "which is d. chow's company? (***rs****s)"

That might be too hard even for "legal" newbies.

If you just tell them what to put in the blank, you could let the bots hammer away at the CAPTCHA and they'd never get it right.

Alternatively you could ask really, really simple questions like What does the B in BLF stand for.

budget

budgets

:D i win!

I don't think the CAPTCHA was working a few hours ago. I posted twice and either I ignored it or did not see the math question, but my comments were still posted. I do see it now though and it is working.

We sure did get hammered this morning! Everything is all out of whack and recent posts from last night are literally burried in pages of old posts. I hope Sb can put everything back in order for us.