We haf returned! (New Spam Thread)

Post here if you have a problem with your account.
User avatar
Kison
Kison
.GIFted
User avatar
User avatar
Kison
.GIFted
.GIFted
Posts: 6714
Joined: January 22, 2007

Post Post #550 (ISO) » Sat Dec 23, 2017 6:30 am

Post by Kison »

Enabled the Nuke extension & added you to the admin & nuke user groups. You can mass delete .

We'll need to figure out how to prevent these from occurring in the first place. They are getting in through the forum registration despite turning on reCAPTCHA a few weeks ago.
User avatar
callforjudgement
callforjudgement
Microprocessor
User avatar
User avatar
callforjudgement
Microprocessor
Microprocessor
Posts: 3972
Joined: September 1, 2011

Post Post #551 (ISO) » Sat Dec 23, 2017 8:18 am

Post by callforjudgement »

Hundreds of spam pages deleted. I did some searches to make sure I didn't miss any ("number" is a good search term, that's in the title of basically every spam page) and cleaned up a few stragglers; I've also checked the entire length of Recent Changes expanded to its maximum size.

This particular spam attack appears to be using humans to bypass the CAPTCHA (we've used some really unusual CAPTCHA solutions on other wikis and it's still been solved). Perhaps requiring posts on the forum before posting would work, but I fear that it would instead tend to lead the spammers to post junk posts in Queue just to get round the restriction. Some solutions that have seemed to help on other wikis: requiring edits to existing pages before new pages can be created (e.g. Wikipedia requires ten, but even one seems to work); and a regex-based title blacklist (searching for 10 digits preceded or succeeded by "number" is unlikely to have many if any false positives, and would match almost all (all?) the spam pattern we've seen. The former can be done with a configuration change (set "autoconfirmed" to 1 edit and 0 days, then remove the ability for non-autoconfirmed users to make pages). The latter can, AFAIK, only be done with the help of an extension; my preferred extension for that is AbuseFilter, as it's incredibly flexible and can be configured to implement more or less any spam-fighting rule you'd want.

(Just for some context, I'm currently an admin on some fairly small wikis, and was an admin at Wikipedia for a while, so I'm fairly experienced with this sort of spamfighting. I'll have to remember to check Recent Changes more often, though.)
scum
· scam · seam · team · term · tern · torn ·
town
User avatar
Kison
Kison
.GIFted
User avatar
User avatar
Kison
.GIFted
.GIFted
Posts: 6714
Joined: January 22, 2007

Post Post #552 (ISO) » Sat Dec 23, 2017 11:33 am

Post by Kison »

Alright, added AbuseFilter. You should have access to it.
User avatar
callforjudgement
callforjudgement
Microprocessor
User avatar
User avatar
callforjudgement
Microprocessor
Microprocessor
Posts: 3972
Joined: September 1, 2011

Post Post #553 (ISO) » Sat Dec 23, 2017 11:44 am

Post by callforjudgement »

Hmm, something seems wrong with how it's installed, I get an Internal Server Error trying to do anything with it. (For example, the "check syntax" button on the filter creation screen.)
scum
· scam · seam · team · term · tern · torn ·
town
User avatar
Kison
Kison
.GIFted
User avatar
User avatar
Kison
.GIFted
.GIFted
Posts: 6714
Joined: January 22, 2007

Post Post #554 (ISO) » Sat Dec 23, 2017 12:00 pm

Post by Kison »

Give it a shot now. Looks like the version we had wasn't compatible with our version of mediawiki.
User avatar
callforjudgement
callforjudgement
Microprocessor
User avatar
User avatar
callforjudgement
Microprocessor
Microprocessor
Posts: 3972
Joined: September 1, 2011

Post Post #555 (ISO) » Sat Dec 23, 2017 12:11 pm

Post by callforjudgement »

OK, I've added an Abuse Filter rule that, out of the ~400 or so edits I tested it against (via batch testing, not individually), should stop all the spam we've seen so far and yet have no influence on legitimate changes.

I've only set the rule to prevent the edits, not to apply any further consequences, so that if I've made a mistake and there are false positives, the worst that will happen is that the edit won't go through; there won't be any automatic blocks or the like applied yet.

If the rule turns out to be successful, I can expand it to block users if they appear to be spamming as their first edit.
scum
· scam · seam · team · term · tern · torn ·
town
User avatar
Kison
Kison
.GIFted
User avatar
User avatar
Kison
.GIFted
.GIFted
Posts: 6714
Joined: January 22, 2007

Post Post #556 (ISO) » Sat Dec 23, 2017 12:24 pm

Post by Kison »

Awesome, thanks a ton for the help!
User avatar
animorpherv1
animorpherv1
Honey Trap
User avatar
User avatar
animorpherv1
Honey Trap
Honey Trap
Posts: 5763
Joined: April 12, 2008
Location: Untraveled Road
Contact:

Post Post #557 (ISO) » Thu Feb 22, 2018 5:16 pm

Post by animorpherv1 »

"Animorpherv1's posts are so powerful that prolonged exposure may cause vertigo, nausea, acute tinnitus, and in rare cases, death." - vonflare

"Ani is right 100% of the time" - Alisae
User avatar
Klick
Klick
Flash Forward
User avatar
User avatar
Klick
Flash Forward
Flash Forward
Posts: 12482
Joined: September 1, 2012

Post Post #558 (ISO) » Sun Mar 04, 2018 6:48 pm

Post by Klick »

In post 5, angelahall wrote:Your version is pretty interesting too! I will try to play it with my friends in the nearest time. I hope that this will be funny
This has been here for a little while. Clever spam account. Link is in the sig.
User avatar
MathBlade
MathBlade
He/Him
Technical Support
User avatar
User avatar
MathBlade
He/Him
Technical Support
Technical Support
Posts: 42761
Joined: September 9, 2013
Pronoun: He/Him
Location: Western US

Post Post #559 (ISO) » Fri May 04, 2018 4:34 am

Post by MathBlade »

viewtopic.php?f=5&t=76173

Please ban this bot/user for advertising.
ScumBlade's eloquent performance left me utterly disoriented, debased, depraved and sent me spiraling into a horrific murky abyss with emotional turmoil and immense despair as my only companions until slowly I suffocate in my own gloom, surrounded by failure. I will never recover. -- Zachstralkita about Mini 1841
GTKAS -- MathBlade
User avatar
singletonking
singletonking
Mafia Scum
User avatar
User avatar
singletonking
Mafia Scum
Mafia Scum
Posts: 1529
Joined: June 6, 2018

Post Post #560 (ISO) » Thu Jun 07, 2018 12:32 am

Post by singletonking »

On indefinite hiatus from playing Mafia.
User avatar
Klick
Klick
Flash Forward
User avatar
User avatar
Klick
Flash Forward
Flash Forward
Posts: 12482
Joined: September 1, 2012

Post Post #561 (ISO) » Wed Sep 05, 2018 2:52 am

Post by Klick »

User avatar
Invisibility
Invisibility
he or she
Jack of All Trades
User avatar
User avatar
Invisibility
he or she
Jack of All Trades
Jack of All Trades
Posts: 5911
Joined: April 17, 2018
Pronoun: he or she

Post Post #562 (ISO) » Wed Sep 26, 2018 12:26 am

Post by Invisibility »

viewtopic.php?p=10462285#p10462285
this i guess is spam because of the advertising?
Invisibility is actually AWESOME!
User avatar
Invisibility
Invisibility
he or she
Jack of All Trades
User avatar
User avatar
Invisibility
he or she
Jack of All Trades
Jack of All Trades
Posts: 5911
Joined: April 17, 2018
Pronoun: he or she

Post Post #563 (ISO) » Wed Sep 26, 2018 12:26 am

Post by Invisibility »

viewtopic.php?p=10462285#p10462285
this i guess is spam because of the advertising?
Invisibility is actually AWESOME!
User avatar
Klick
Klick
Flash Forward
User avatar
User avatar
Klick
Flash Forward
Flash Forward
Posts: 12482
Joined: September 1, 2012

Post Post #564 (ISO) » Tue Oct 23, 2018 10:07 pm

Post by Klick »

User avatar
BNL
BNL
Micro Madness
User avatar
User avatar
BNL
Micro Madness
Micro Madness
Posts: 3338
Joined: September 15, 2015
Location: EDT+12

Post Post #565 (ISO) » Tue Dec 18, 2018 8:03 pm

Post by BNL »

GTKAS - BNL

Busy, on indefinite V/LA. May return April 2020
User avatar
mastina
mastina
She/Her
False Prophet
User avatar
User avatar
mastina
She/Her
False Prophet
False Prophet
Posts: 16668
Joined: October 7, 2016
Pronoun: She/Her
Location: Between Snohomish and Monroe, WA
Contact:

Post Post #566 (ISO) » Tue Mar 19, 2019 9:38 am

Post by mastina »

User avatar
mastina
mastina
She/Her
False Prophet
User avatar
User avatar
mastina
She/Her
False Prophet
False Prophet
Posts: 16668
Joined: October 7, 2016
Pronoun: She/Her
Location: Between Snohomish and Monroe, WA
Contact:

Post Post #567 (ISO) » Sat Mar 30, 2019 12:13 pm

Post by mastina »

Oh my god
They
THINK

We're fucked.

:shifty:
User avatar
Lycanfire
Lycanfire
Mafia Scum
User avatar
User avatar
Lycanfire
Mafia Scum
Mafia Scum
Posts: 2380
Joined: June 4, 2016

Post Post #568 (ISO) » Sat Mar 30, 2019 3:02 pm

Post by Lycanfire »

Seems like they edited in those links. They didn't have them last night.

Isn't trusted user meant to filter out this kind of bot?
User avatar
animorpherv1
animorpherv1
Honey Trap
User avatar
User avatar
animorpherv1
Honey Trap
Honey Trap
Posts: 5763
Joined: April 12, 2008
Location: Untraveled Road
Contact:

Post Post #569 (ISO) » Sat Mar 30, 2019 3:35 pm

Post by animorpherv1 »

Trusted user role doesn't exist any more.
"Animorpherv1's posts are so powerful that prolonged exposure may cause vertigo, nausea, acute tinnitus, and in rare cases, death." - vonflare

"Ani is right 100% of the time" - Alisae
User avatar
mastina
mastina
She/Her
False Prophet
User avatar
User avatar
mastina
She/Her
False Prophet
False Prophet
Posts: 16668
Joined: October 7, 2016
Pronoun: She/Her
Location: Between Snohomish and Monroe, WA
Contact:

Post Post #570 (ISO) » Sun Mar 31, 2019 3:00 pm

Post by mastina »

User avatar
Cheery Dog
Cheery Dog
Kayak
User avatar
User avatar
Cheery Dog
Kayak
Kayak
Posts: 8032
Joined: June 30, 2012
Location: OMG BALL!

Post Post #571 (ISO) » Thu May 02, 2019 6:18 pm

Post by Cheery Dog »

Holder of the Longest Continuous Weekly Mafiascum Post Record. 1 July 2012 - 16 Feb 2023
*It may be held by someone else if you discount the major downtime in 2012 and 2014, I'm not doing the research.
User avatar
Kison
Kison
.GIFted
User avatar
User avatar
Kison
.GIFted
.GIFted
Posts: 6714
Joined: January 22, 2007

Post Post #572 (ISO) » Mon May 13, 2019 4:31 am

Post by Kison »

test
User avatar
BNL
BNL
Micro Madness
User avatar
User avatar
BNL
Micro Madness
Micro Madness
Posts: 3338
Joined: September 15, 2015
Location: EDT+12

Post Post #573 (ISO) » Tue May 14, 2019 8:15 pm

Post by BNL »

GTKAS - BNL

Busy, on indefinite V/LA. May return April 2020
User avatar
Lycanfire
Lycanfire
Mafia Scum
User avatar
User avatar
Lycanfire
Mafia Scum
Mafia Scum
Posts: 2380
Joined: June 4, 2016

Post Post #574 (ISO) » Thu May 16, 2019 9:09 am

Post by Lycanfire »

Probably a bot. Definitely a spam account. It made a few non-bot posts but they were so stupid that I felt that they could be a bot.
Anyway, spammer
viewtopic.php?p=10949532#p10949532
Post Reply

Return to “Help!”