Author Topic: Playing Whack-A-Mole with Spammers  (Read 21157 times)

Indirik

  • Exalted Emperor
  • ******
  • Posts: 10849
  • No pressure, no diamonds.
    • View Profile
Playing Whack-A-Mole with Spammers
« Topic Start: September 21, 2011, 04:35:50 PM »
So... The wiki is now a target for wiki spammers. They create an account, upload a single graphic, then create one new page with it.  We've blocked 13 of them so far this month.  10 of them in the past week or so.

Anything we can do to block this kind of thing?
If at first you don't succeed, don't take up skydiving.

Anaris

  • Administrator
  • Exalted Emperor
  • *
  • Posts: 8525
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #1: September 21, 2011, 04:43:15 PM »
By the looks of it, the BadBehaviour extension we were using before won't cut it, either, as they also create a user page for themselves.

It seems almost like we need to restrict Wiki account creation to those with BM accounts :-\
Timothy Collett

"The only thing you can't trade for your heart's desire...is your heart." "You are what you do.  Choose again, and change." "One of these days, someone's gonna plug you, and you're going to die saying, 'What did I say? What did I say?'"  ~ Miles Naismith Vorkosigan

Perth

  • Honourable King
  • *****
  • Posts: 2037
  • Current Character: Kemen
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #2: September 21, 2011, 04:46:22 PM »
Cast a hex upon the unholy aberrations!  >:(
"A tale is but half told when only one person tells it." - The Saga of Grettir the Strong
- Current: Kemen (D'hara) - Past: Kerwin (Eston), Kale (Phantaria, Terran, Melodia)

Tom

  • BM Dev Team
  • Exalted Emperor
  • *
  • Posts: 8228
    • View Profile
    • BattleMaster
Re: Playing Whack-A-Mole with Spammers
« Reply #3: September 21, 2011, 07:14:00 PM »
I've updated Bad Behaviour to the latest version and also add the Nuke extension so we can get rid of the crap easier and more completely.

Let's see if the new Bad Behaviour cuts this down. Otherwise... I don't know.

Bael

  • Mighty Duke
  • ****
  • Posts: 1022
  • Have sword, will travel!
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #4: September 21, 2011, 08:39:27 PM »
I've updated Bad Behaviour to the latest version and also add the Nuke extension so we can get rid of the crap easier and more completely.

Let's see if the new Bad Behaviour cuts this down. Otherwise... I don't know.

Every player of BM has an application key in their player data. Why not make it a requirement for creating a wiki acount? After all, who else but BM players would need a wiki account?

Sure, they could go to all the trouble of creating a BM account, and then get a key and then create a wiki account, but that would be quite a bit more of a mission.

Tom

  • BM Dev Team
  • Exalted Emperor
  • *
  • Posts: 8228
    • View Profile
    • BattleMaster
Re: Playing Whack-A-Mole with Spammers
« Reply #5: September 21, 2011, 09:32:40 PM »
Sure, they could go to all the trouble of creating a BM account, and then get a key and then create a wiki account, but that would be quite a bit more of a mission.

Most importantly, it can't be automated that easily. But it means messing with the MediaWiki code, probably writing another extension. There should be an easier way.

Ramiel

  • Noble Lord
  • ***
  • Posts: 413
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #6: September 22, 2011, 02:33:45 AM »
Most importantly, it can't be automated that easily. But it means messing with the MediaWiki code, probably writing another extension. There should be an easier way.

Easier but far more time consuming would be having only the Admins making new accounts? Guessing its out of the options anyways.

Maybe more Wiki admins to help deal with the threat from the abomina.... errr... Spammers?
To be True, you must first be Loyal.
Count Ramiel Avis, Marshal of the Crusaders of the Path from Pian en Luries

Indirik

  • Exalted Emperor
  • ******
  • Posts: 10849
  • No pressure, no diamonds.
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #7: September 22, 2011, 02:37:09 AM »
Locking/deleting them at the current pace is no big deal. Delete a page, an image, and lock an account. It's just repetitive and annoying. Better to prevent them from doing it in the first place.

It used to not be a problem In the first eight months of this year, we locked, I think, 11 accounts. Now there are 13 more so far this month alone. Hopefully the updated plugins will fix it.
If at first you don't succeed, don't take up skydiving.

De-Legro

  • Honourable King
  • *****
  • Posts: 3838
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #8: September 22, 2011, 02:49:51 AM »
Can we tell if the spamming is automated or not?
Previously of the De-Legro Family
Now of representation unknown.

Indirik

  • Exalted Emperor
  • ******
  • Posts: 10849
  • No pressure, no diamonds.
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #9: September 22, 2011, 02:56:55 AM »
We can pretty much guarantee that it is. All the spammer account names are two real names followed by a number (f.ex. FrankSmith4), they upload one graphic with a characteristic name appended with random numbers (f.ex. solar panels 4453.jpg), then create a page that *looks* real and has phrases relating to the supposed topic with links to their advertised site. Almost guaranteed to be automated.
If at first you don't succeed, don't take up skydiving.

De-Legro

  • Honourable King
  • *****
  • Posts: 3838
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #10: September 22, 2011, 03:03:35 AM »
Something as simple as a captcha extension might do the job.
Previously of the De-Legro Family
Now of representation unknown.

Indirik

  • Exalted Emperor
  • ******
  • Posts: 10849
  • No pressure, no diamonds.
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #11: September 22, 2011, 03:15:21 AM »
It might. But captchas have been broken, too. Let's hope Bad Behavior fixes it.
If at first you don't succeed, don't take up skydiving.

Tom

  • BM Dev Team
  • Exalted Emperor
  • *
  • Posts: 8228
    • View Profile
    • BattleMaster
Re: Playing Whack-A-Mole with Spammers
« Reply #12: September 22, 2011, 12:04:09 PM »
Captchas are broken, though they still offer some defense.

The best bet really would be to do something during account creation that is specific to the BM wiki. If anyone finds an extension that does that, I'll be more than happy to install it. Something simple like "you need to enter your family name so we can link it" would do. Or the other option would be to move account creation into the game and disable account creation in MediaWiki. But that needs someone who researches how to script account creation in MediaWiki because I really don't have time for that right now.


Nosferatus

  • Testers
  • Mighty Duke
  • *
  • Posts: 1093
  • Too weird to live, too rare to die
    • View Profile
Re: Playing Whack-A-Mole with Spammers
« Reply #13: September 22, 2011, 10:35:43 PM »
remove TMP and i'll stop, if you don't i'll keep adopting new methods to anoy your asses to death! ha!

 ::)
Formerly playing the Nosferatus and Bhrantan Family.
Currently playing the Polytus Family in: Gotland, Madina, Astrum, Outer Tilog

Tom

  • BM Dev Team
  • Exalted Emperor
  • *
  • Posts: 8228
    • View Profile
    • BattleMaster
Re: Playing Whack-A-Mole with Spammers
« Reply #14: September 23, 2011, 05:15:46 AM »
sorry, Nos, this is not funny. Spammers deserve the death penalty and I don't want to hear jokes about these life-sucking, time-wasting parasites.