Communities

Writing
Writing
Codidact Meta
Codidact Meta
The Great Outdoors
The Great Outdoors
Photography & Video
Photography & Video
Scientific Speculation
Scientific Speculation
Cooking
Cooking
Electrical Engineering
Electrical Engineering
Judaism
Judaism
Languages & Linguistics
Languages & Linguistics
Software Development
Software Development
Mathematics
Mathematics
Christianity
Christianity
Code Golf
Code Golf
Music
Music
Physics
Physics
Linux Systems
Linux Systems
Power Users
Power Users
Tabletop RPGs
Tabletop RPGs
Community Proposals
Community Proposals
tag:snake search within a tag
answers:0 unanswered questions
user:xxxx search by author id
score:0.5 posts with 0.5+ score
"snake oil" exact phrase
votes:4 posts with 4+ votes
created:<1w created < 1 week ago
post_type:xxxx type of post
Search help
Notifications
Mark all as read See all your notifications »
Meta

Comments on Spammers have found this site!

Post

Spammers have found this site!

+7
−0

I just noticed that when you go to the users page and select the age tab, the start of the list is dominated by user names that are obvious spam.

While they are not very effective because few people are likely to see them, I still think something should be done about them.

All of those seem to have an URL in their user name, so they should be easy to find automatically.

History
Why does this post require attention from curators or moderators?
You might want to add some details to your flag.
Why should this post be closed?

1 comment thread

General comments (4 comments)
General comments
luap42‭ wrote over 4 years ago · edited over 4 years ago

If it's of any help: All accounts with an ID >= 8184, except on Writing for the IDs 8200, 8227 and 8240 and on Meta 8196, 8198, 8219 seem to be SPAM accounts (please double-check to prevent innocent accounts from being deleted, though)

manassehkatz‭ wrote over 4 years ago · edited over 4 years ago

This is, unfortunately, an ever-growing problem. On a synagogue site I maintain where I used to get a handful of spam signups a month, I have started to get a dozen or more every day. In that case, I renamed the original signin script and added a message on the registration page to email webmaster to sign up. That isn't really an option here.

manassehkatz‭ wrote over 4 years ago · edited over 4 years ago

Best practices is a double opt-in like we have for the codidact.org announcements list - request just sits in an unseen pending queue until user verifies by Replying to (or clicking a link inside) the confirmation email. No idea what would be involved to do that for QPixel. I have written such things before (the codidact list is a 3rd-party product, so I didn't actually have to write that one) - not terribly hard to do.

Masked Man‭ wrote over 4 years ago

@manassehkatz While that certainly raises the bar quite high for the spammers, it is still beatable by spammers creating throwaway email accounts on the fly. The entire process including "clicking" the link can be automated. If we ever get such a "determined" (?) spammer, we could include a random "puzzle" on the sign in form. Not Google's CAPTCHA (eww!), but something like "3 + 2 =?" Still not unbeatable though.