Fighting Spam

We just got our first spam today in form of a forum topic with series of urls to unrelated sites.

Spam is a good thing in that it proves that this site is visible enough to attract spam, but certainly a bad thing for life simplicity.

 

We should discuss measures we'll have to put in place as spam becomes more and more of a problem. Could be first like asking people to authenticate before being able to post. We also have to discuss the subject of captchas.

 

Frederic 

imagen de Anonymous

More spam

We got spam again. This time from a

If we get this again, I'm wondering if we would not have to move to user registration approval before allowing first time post.

 

Frederic Baud

BarCampBank - P2PVenture
My blog

imagen de Anonymous

Captcha on registration?

We may just need captcha on registration..

Sam Rose Social Synergy Web Weblog

imagen de Anonymous

Right, Captchas

Yes, if we know that there are some bots around able to self-register on Drupal (that means able to read a return mail to get the password), we should do that. If that is humans registering then using bots to pollute the site, we may need to put in place an approval process for new registrations

Frederic Baud

BarCampBank - P2PVenture
My blog

imagen de Anonymous

Implementing Captchas on self-registration

We should implement Captchas on self-registration. If that fails, next level will be to moderate regisration. We should think of what we do for FCF 2008

Frederic Baud

BarCampBank - P2PVenture
My blog

imagen de Anonymous

Can we implement captcha on self-registration?

We just got a spam attack amounting to 19 "Knut" comments. I think we should set captchas for self-registration. Sam, is that something you can look into?

Thanks,

Frederic Baud

BarCampBank - P2PVenture
My blog

imagen de Anonymous

Captcha on self-registration may not be enough

I implemented captcha for self-registration for BFWatch and FCF2008. Unfortunately, it seems an obvious fake user just registered on FCF2008 despite the math captcha. Either there is a bot that is already able to circumvent math captcha or - more probably - registrations are one by a human hand, and then the account is used by spam bots. I'll have to test with a different captcha, but if this is the second case happening we may have to use admin moderation as the only solution.

Frederic Baud

BarCampBank - P2PVenture
My blog

imagen de Anonymous

Forbidding anonymous posts

We just got a spam attack with a flood of more than 30 spam topics. In face of this, I turned off the ability to post for anonymous users. This is a quick fix and we'll have to see if we want to implement shrewder procedures to re-allow anonymous posts while preventing automatic spammers.

Sorry for people subscribing to RSS feeds that we'll see all these messages going through their readers. With times, we should reach a cleaner situation with a well-balanced secrutity policy in regard of the spam attraction we keep generating.

Frederic Baud

BarCampBank - P2PVenture
My blog

imagen de Anonymous

Captcha

Yessir, we'll need captcha of some kind, I think, for anonymous posting

Sam Rose Social Synergy Web Weblog

added captcha

...for anonymous comments.

turned on anon comments

restored anon comments. Captcha should no wblock spam (it is a question asker captcha)

JoeAnonymous can post again

Just testing the new post mechanism,

 

Frederic

imagen de Anonymous

Anonoymous users can not post & Registration is moderated

All,

Because there has been too much spam bot attacks on this site, I turned access controls to "nonymous users can only read" and I turned self-registration to moderated (spam bots were too easliy defeating the Captchas installed on this Drupal site).

Since registration is moderated, I may be sometime slow to approve pending applications.

I received a hint showing that someone had problem with the Captcha. Appologies for this. If anyone has problems, you can contact me at admin at barcampbank.org.

Thanks,

Frederic Baud

BarCampBank - P2PVenture
My blog