We've got bots! POSTING bots!
Shika's on AIM, but he's not answering me.
Are you going to try to get him to delete the topic or something?
Looks like our security measures are obsolete. If one bot can get in, what's to stop others? After helping to get rid of over 10,000 bots, it's kind of a downer to me.
That's the plan.
Hopefully he or another mod will be along soon. I guess what we need to do now is just keep an eye open for spam topics and get them deleted as soon as possible.
R u talking about the software stuff that's being advertised?
Precisely.
Like I said in the topic the bot posted, its sole purpose is to advertise. It won't respond to anything.
...then y does it's account say it's still online?
EDIT: well, not anymore now...
Sorry to sound like a nag, but would you type out all of your words? Forums aren't text messages.
I usually do, but my little brother was rushing me off my computer.
geez...
I wouldn't worry too much about it. You normally type out all your words, like you said, so occasionally using a letter to represent a word is perfectly okay.
Well, it looks as though the topic is gone. We'll have to be on the lookout for more.
In other news, my creative consultants better get online soon. DX
Quote from: Twilight Wolf on November 10, 2008, 06:22:48 PM
You normally type out all your words, like you said, so occasionally using a letter to represent a word is perfectly okay.
yeah, but it's not good enough for
HNS, I mean,
Hi no Seijin... :(
Well, we've had five total spambot attacks in the past 24 hours. Any suggestions as to what we should do about this? My suggestion was to improve our CAPTCHA system, but if not possible, what do you guys think should be done? Should we just delete the topics as they come along?
5!? i thought there were only 2!
Nope, there was another one that happened a few hours ago, and two more late last night.
Gamefreak's looking into updating the forums again.
Quote from: Twilight Wolf on November 11, 2008, 04:58:19 PM
there was another one that happened a few hours ago, and two more late last night.
man, I keep missing all the fun...
AND: i think we've got another one. it's logged on now, advertising some type of pill.
Make that six. I just deleted another bot thread. THey seem to be attacking the announcement section for some reason.
ha, i saw it first.
Why hasn't "Soon new year!" been deleted?
Well, it's gone now.
If another shows up, say so in this topic, do NOT reply to it.
wait, why can't we reply to it?
Your posts just get deleted anyways...
Perhaps this should be moved to General Discussion so it won't turn into a spamfest? It is *sort of* important, anyways.
EDIT: Thanks to whichever mod moved this.
Well, ever since I joined in July, I've only seen maybe 1 spambot. Why so many all the sudden?
because some spambots are so advanced, they can break through CAPTCHA
Our CAPTCHA is a pretty weak, though... I posted about it in one of the spambot topics before it got deleted.
no, I mean today and yesterday, there's been 6. Why ONLY the past 24 hours? was the CAPTCHA thing changed yesterday maybe?
No, it's just the advanced spambots have found us. There'll probably be more along soon enough unless we upgrade the CAPTCHA.
Do we still have email activation going? That's what prevented the old bots from posting. If we don't, we should reimplement that as well.
Quote from: JQ Pickwick on November 11, 2008, 06:27:05 PM
No, it's just the advanced spambots have found us.
Now we're popular! :D
If only we could attract more actual users, though...
But anyways, anyone willing to make another account to see if you get an activation email? We need to research this.
In august, you had to.
So you got a confirmation email with a password in August? Well, since we upgraded at the end of July, and you got an email in August, then I don't see why we should have changed in that time.
Damn, this means the bots can not only get around simple CAPTCHAs, but also use the activation email!
It's the sign of the apocalypse! RUUUUUUUUUUUN!!!!!!
spamming aside, It's not that horrible that spambots are coming. I think it's kinda fun. :)
You guys should be more optimistic...
Um, I'm not techno wiz, but if we let the spambots come willy nilly, don't we run the risk of crashing TDC? That doesn't sound fun at all.
OR... They're a special bot that bypasses those securities. Not necessarily go through activation emails (which might be why you see them posting only once).
Also, if spambots are all over a forum, it makes your site look bad. Who knows how ilong it'd be before they're posting links to porn?
No, I don't mean to invite them here, but if a couple happen to get through, we shouldn't make such a big deal.
Not to mention we used to have around 14,000 spambots before we did a massive cleanup. I remember back in July 2007 when we had 2600 registered users... a year later we had over 14,000. They take up bandwidth, as well, so when we got rid of them, the forums were a bit faster.
We've had the same problem over on Phase *coughmygraphicssitewhichyoushouldalltotallyjoinifyou'reinterestedinmakingbettergraphicscough*, but it was solved easily enough by updating forum software to the next level-- which institutes reCAPTCHA. They've had bots that can bypass CAPTCHA and email validation for a while now on IPB, vBulletin and what not, and apparently they're just now getting to coding bots for YaBB SE.
So then, why don't we just do that?
Thanks for the input, Tach. Do you know of how we could implement such a measure? You seem to know about this sort of thing.
Uhh, Tach? I think you mean SMF 1.1.5
Ah, JQ's right, we're not using YaBB SE any more.
Gamefreak just needs to update the system from his magical mystical admin control panel.
Quote from: JQ Pickwick on November 11, 2008, 06:53:40 PM
Uhh, Tach? I think you mean SMF 1.1.5
stfu, my point remains that it's not a huge thing. In fact, that's probably the reason we're getting a bot or two now. NOBODY has heard of YaBB SE being used except for Desert Colossus (note, in the previous statistic I was 'everybody'), whereas SMF is a bit more popular.
Well, how difficult would such a change be? Would it require a major change like updating the whole forums?
Um, yes? Oh no, that'll take all of five minutes!
Well, I'm not sure weather it was advertising or not, but someone posted links to porn. Now I get the point. Mods can make them go away now plz.
Now they're posting again. mods, please delete the name.
We can only delete posts, not users. :-/
Perhaps we should create a list of spambots so we can ban and delete them later?
EDIT: A new spambot, this time in the "Minish Cap" section.
EDIT 2: Another one, this time in the Chatboard.
Quote from: MagmarFire on November 11, 2008, 07:36:40 PM
We can only delete posts, not users. :-/
Why is that? then they can just keep posting over and over.
Administrators are the only folks 'round here that can perform said deletion/banning. The moderators are more of paper-pushers than enforcers, but you didn't hear that from me.
Giving someone who isn't in control of the site the ability to remove whoever they want is never a good idea, Fishy.
If it'll do any good, I'll keep an eye open...
Thanks, it'll help.
By the way, new spambot in "Announcements."
What do I do if I see one? Ban it? I don't have those powers! (Panicks) Oh, god! WHAT DO I DO?!?!?!?
edit: I took a look at the bot. That's what they look like. ANy way to get rid of them?
No offense, but I thought RGH 526 was a spambot for a minute there. I was about ready to say that TW was all alone with a couple of spambots.
Sorry, man. ;)
Anywho, to answer FishyRules, a spambot generally only posts once, and then never comes back. At least, I have never seen the same spambot post twice in one forum.
None taken. However, I would grow suspicions since I haven't been on for so long! Whoops!
Anyway, what do we do with them?
Edit: It's me, Link104! Hello? Link104? Remember? I just changed my name.
Actually, I just didn't recognize your name. But I do know you used to be known as Link something.
Yes. Link104. Anyway, could I have my question answered? Pretty please?
Well, RGH 526, there's not much you can do except let us know in this topic so that a mod can delete their topic, and later on Gamefreak will delete the spambots themselves.
Knew there were three numbers.
Anywho, if you have a mod's AIM screen name, you could always IM them. I just IMed JQ, but my AIM is saying he's idle, so he might be busy with college stuff right now.
Um, there is another spambot in announcements.
Taken care of.
The same spambot posted again in "Announcements!" I didn't know they could do that...
Just had a spambot in Announcements advertising a video making fun of Obama. Definitetly the most unique bot I've seen.
I find it funny that some bots don't post at all.
New spambot in announcements, this time peddling porn.
Let's hope we can do something about this bot problem soon...
That last one I just deleted posted the pictures flat out. This is getting out of hand; and I think I have an idea. Can we make every board inaccessible to members without a certain amount of posts? Say 10 or so. Yes we won't get any new members until the problem is fixed, but honestly I don't want their first impression of this site to be "WOW PORN"
Sounds good to me until we can get a new CAPTCHA system implemented. It shouldn't be much of a problem, anyways, since most, if not all, of the people who post here any more, even the newer members, have at least ten posts. If we go through with this, we should be sure to make a point of letting potential new users know.
Thats a really good idea!
I support it, even though I do like getting new members.
Just put an article up on the front page saying ATTENTION NEW MEMBERS: WHEN YOU MAKE AN ACCOUNT, PM GameFreak THE ADMINISTRATOR, AND HE WILL RAISE YOUR POST COUNT, or something of that nature.
I support this plan, too. Seems to be one of the few safeguards until we get an upgrade anyway.
Yeah, I just deleted a topic called "The Heart of India Movie" and it posted PICTURES. Flat out 100% uncensored pictures.
This has got to stop NOW.
FIrst of all, we have to got to focus our energies on on getting a new CAPTCHA. it's the only way we'll be able to stop them.
Anyone have any idea on how to put in/update a new captcha system?
Yes. Everything will be FTP'd by Sunday night at the latest. Until then, it's just a matter of defending the castle walls.
Where the hell is GF when you need him?
This newest spambot appears to have nothing to advertise. Just says "Hi there, I'm Steffi, nice to meet you all." And it's website is TDC.
...
Odd.
Quote from: JQ Pickwick on November 15, 2008, 01:37:08 PM
Where the hell is GF when you need him?
He probably has stuff to do in real life.
So are we agreed, then? All boards inaccessible to members with fewer than ten posts? However, I think we should just post the notice ZV was talking about right on the forum index in addition to the front page. This way, everyone can see it.
I see no problems with Shika and ZV's plan except new members might not know what a PM is. How about we have something like:
"ATTENTION NEW MEMBERS! Due to a number of spam bots registering into the website, we require that you CLICK HERE *that will lead to Gamefreak's PM page* and tell the forum administrator you are not a spam bot. Thank you."
To quote the topic title: No!
First of all, I strongly oppose giving potential new members any post requirement or anything. It just doesn't seem to make sense.
As far as having new members PM Gamefreak to explain that they are, in fact, sentient human beings - Gamefreak could probably make it so that he just has to approve new members. However, both of these solutions have the same problem: what if GF isn't around enough to do this frequently? The PM system would probably work best, but it needs constant watch no? I suppose we don't get too many new members, but still.
... is there even a way to limit access based on post count? :-\
Keep in mind that this would only be temporary; if I'm understanding Tacheon correctly, it would only be implemented for a day or two at most until we can upgrade our security.
EDIT: Another spambot. Tread with caution.
They can't get into the Gerudo Fortress, the mod-only area. So if we make it so only guys with two stars or whatever can get into the boards, we should be good. Of course, some newer members will be unable to post for a while, but...meh. We'll update soon.
Also, new porn bot just deleted in Announcements. My eyes are burning by now.
I admire your bravery, Shika. The same goes for the other mods, as well. You guys deserve medals or something.
Actually, why not make it so that members with just one post can access the boards? All of the new members we've got now will be able to post, but no spambots, since they don't have any posts to start with.
How about they post their requests in a special board created for that purpose, and the TDC members judge whether this member is a bot or not? Only mods/admins can approve new members. This way, we have quite a few members on the lookout for those actually interested in joining.
No to all. I'm going to keep badgering KP and Gamefreak until this gets fixed-- no other method is required except for deleting what we see.
New spambot in "Announcements." Careful, I think it's the same one that posted the first topic with porn in it.
That is indeed the same bot that's been posting there before.
*Sigh*
Why can't GameFreak just get here and end this nightmare.
Well, I suppose thats what us Mods are here for eh?
Defend the walls until the king arrives.
I'm being as active as humanly possible on the lookout for these bots.
I hope the rest of you are doing the same.
...
*sniff*
I love you guys!
*cries like a little girl*
You're lucky you have a mod here who's probably twice the average age of most other users here <_<
I'm legally allowed to look at this crap anyhow
So am I
UGH! Where is he?
...Pervs. 8)
It's too bad Dr. Rabies isn't here, then we could tell him to get Gamefreak on. Oh well...
So anyway, pretty much all we can do is delete the spam bot posts. Let's wait until Gamefreak gets back before we make solutions.
Also, I have a solution of my own in case Gamefreak doesn't get on for a while: set it up so that if Gamefreak doesn't log into TDC for a month, then administration abilities are automatically given to one of the mods. This way we'd only have one when we it's clear Gamefreak can't make it.
you realize that in order for ANY of those plans to be effective, an administrator would have to be here to change the settings?
oh well... maybe GF will consider making Tacheon a permanent co-admin.
If anyone should be a permanent co-admin, it should be Mags. I'm just here temporarily, sort of as tech support.
Well, GF is here, so let's ask him to set that up for one of the mods. Mags seems like the best choice.
Gamefreak's been on, guys, and I'm sure he's working on it. Just relax.
Quote from: Zelda Vet on November 16, 2008, 08:16:58 AM
*Sigh*
Why can't GameFreak just get here and end this nightmare.
Well, I suppose thats what us Mods are here for eh?
Defend the walls until the king arrives.
I'm being as active as humanly possible on the lookout for these bots.
I hope the rest of you are doing the same.
...
*sniff*
I love you guys!
*cries like a little girl*
I personally feel that I haven't been on as much as I should have to help you guys delete these bots. For that, I apologize, and I will try harder to assist.
I've been on too much. Parents angry about it and all >.>
Wait, why should Magz be the co-admin? Why NOT Tacheon? Tacheon is the one that's knows how to navigate this tech-gibberish.
Mags is more trustworthy. I'm the noob creepy hacker guy. Chaotic neutral and whatnot.
Than KP, he's not the creepy hacker type!
Well, neither am I, but that's beside the point. But still, I say that you're plenty trustworthy, Tacheon. Anything "questionable" you do is never too serious and is more along the lines of light-sided humor.
The point is, we need someone who knows how to work with forum software.
Yet again I find myself wishing I was friends with Bill Gates.
Are there any tutorials anywhere that we can take a peek at?
I would pass on the Bill Gates. He once tried to buy out nintendo. The jerk.
Quote from: RGH 526 on November 16, 2008, 07:47:49 PM
I would pass on the Bill Gates. He once tried to buy out nintendo. The jerk.
This is General Discussion, not the Chatboard. :\
Well, I see we lost our super-sweet smilies in the update.
That sucks.
???
I guess we did.
We'll get them back, I'm sure.
Quote from: Davy Jones on November 16, 2008, 07:50:32 PM
Quote from: RGH 526 on November 16, 2008, 07:47:49 PM
I would pass on the Bill Gates. He once tried to buy out nintendo. The jerk.
This is General Discussion, not the Chatboard. :\
I was referring to Shika's comment on Bill Gates. But, you're right. Back on topic! :)
We SO did not lose our smilies....
Though perhaps we should have KP look into the matter?
I can only see two smilies that have changed. I don't understand. ???
It may just be the browser. I'm using IE.
The smilies have changed for me, now. Link is gone, replaced with Mr. Generic Yellow Face.
Well, mine are still here! :) I still have link! I don't know about you...
Yeah, mine are back to normal now, as well. Seems like it's back to normal for everyone, which Whocares didn't care for.
Actually, mine have been the same the whole time. Why you guys wern't is beyond me.
Quote from: RGH 526 on November 25, 2008, 07:46:15 PM
Actually, mine have been the same the whole time. Why you guys wern't is beyond me.
Because you never emptied your cache-- the link (lol) was the the same, so your computer just filled in that space with what it assumed would be there, to save space. That's why a lot of image rotators don't work for Internet Explorer.
Oh, fantastic, then!
*sigh* we got another one in the chatboard. Mods, please delete, unless someone wants to buy some Canadian viagra first... ???
Quote from: FishyRules on December 04, 2008, 08:25:36 PM
*sigh* we got another one in the chatboard. Mods, please delete, unless someone wants to buy some Canadian viagra first... ???
Did both.
Things're looking up, eh?
Seriously though, I wonder how THIS one slipped through.