Skip to main content
↑
↓
Spherical forums
Community for the
Sphere game engine
New?
Contact Us
to register an account!
1 Hour
1 Day
1 Week
1 Month
Forever
Community
Help
Search
Recent Posts
Log in
Contact Us
News
Spherical
Facebook
-
Twitter
-
Discord chat
New?
Contact us
to register an account!
General Discussion
Site Comments
An immense effusion of spambots from the great darkness
1
2
next
Print
Topic: An immense effusion of spambots from the great darkness
(Read 9061 times)
previous topic
-
next topic
0 Members and 2 Guests are viewing this topic.
Fat Cerberus
Big Chungus
Posts: 2,774
*MUNCH*
Logged
Global Moderator
Sphere Developer
An immense effusion of spambots from the great darkness
January 14, 2016, 12:50:00 pm
I've noticed a lot of spambots seem to have found the forums recently. I can check Who's Online now and it often shows about 8-10 users "Registering for an account". Nothing ever comes of it so the spam filters are obviously doing what they're supposed to, but it's weird that the activity has picked up all of a sudden.
neoSphere 5.9.2
-
neoSphere
engine -
Cell
compiler -
SSj
debugger
forum thread
|
on GitHub
N E O
Hero Poster
Posts: 585
Making it happen!
Logged
Administrator
Senior Administrator
Re: An immense effusion of spambots from the great darkness
Reply #1
–
January 14, 2016, 03:20:16 pm
'Tis odd indeed.
Fat Cerberus
Big Chungus
Posts: 2,774
*MUNCH*
Logged
Global Moderator
Sphere Developer
Re: An immense effusion of spambots from the great darkness
Reply #2
–
April 05, 2016, 10:36:12 am
Aww, looks like one finally made it in.
neoSphere 5.9.2
-
neoSphere
engine -
Cell
compiler -
SSj
debugger
forum thread
|
on GitHub
DaVince
Legendary Poster
Posts: 1,001
Logged
Administrator
Used Sphere for, like, half my life
Re: An immense effusion of spambots from the great darkness
Reply #3
–
April 05, 2016, 11:29:24 am
What's strange is that this "member" wasn't in the group of verified users (only those users can actually post). Something seems to be up with the permissions...
Reported the account to the global spam database and removed posts.
Spherical Downloads Repo
||
My (really old) Sphere stuff
Fat Cerberus
Big Chungus
Posts: 2,774
*MUNCH*
Logged
Global Moderator
Sphere Developer
Re: An immense effusion of spambots from the great darkness
Reply #4
–
April 12, 2016, 11:24:40 am
These spammers are weird. The posts are so impenetrable that I have no idea what they're supposed to be selling. Isn't that counterproductive?
neoSphere 5.9.2
-
neoSphere
engine -
Cell
compiler -
SSj
debugger
forum thread
|
on GitHub
Flying Jester
Legendary Poster
Posts: 1,161
Logged
TurboSphere Developer
Re: An immense effusion of spambots from the great darkness
Reply #5
–
April 12, 2016, 04:46:46 pm
Each one has a link in it, though. That's the payload.
Learn some history?
The Flying Jester's Blog of Sorts
Fat Cerberus
Big Chungus
Posts: 2,774
*MUNCH*
Logged
Global Moderator
Sphere Developer
Re: An immense effusion of spambots from the great darkness
Reply #6
–
May 05, 2016, 01:58:52 am
Okay, someone
really
needs to find out how these guys are getting past the verification. None of them are Verified, which should mean they can't post either. Really strange.
One pattern I have noticed is that they're all sleepers--members since Sept-Oct of last year. Maybe the forum software "forgets" they need verification after a while...
Last Edit
: May 05, 2016, 02:00:26 am by Lord English
neoSphere 5.9.2
-
neoSphere
engine -
Cell
compiler -
SSj
debugger
forum thread
|
on GitHub
Flying Jester
Legendary Poster
Posts: 1,161
Logged
TurboSphere Developer
Re: An immense effusion of spambots from the great darkness
Reply #7
–
May 05, 2016, 02:07:33 am
That last one seems to have registered last year.
Learn some history?
The Flying Jester's Blog of Sorts
Radnen
Big Chungus
Posts: 1,440
Sphere Studio Developer
Logged
Senior Staff
Wise Warrior
Re: An immense effusion of spambots from the great darkness
Reply #8
–
May 05, 2016, 02:19:51 am
Ok, so what's happened here is it's sometimes hard to determine who is real and who is not. Every week we get hundreds of 'potential' accounts, yet they verify as positive for spam. So we delete them. Trouble is there's always a few that get through.
A couple weeks ago I just ran the spam-account-finder tool on all verified users and sure enough a good deal of them came back positive. Which means that at the time, they were good to go, but since then, they have been flagged as spam.
As a rule, we can try email activation. But that increases barrier to entry and some bots might be able to beat that. Especially if the bot software sees that an email invite is basically an open door into the forums.
If you use code to help you code you can use less code to code. Also, I have approximate knowledge of many things.
Sphere-sfml
here
Sphere Studio editor
here
Fat Cerberus
Big Chungus
Posts: 2,774
*MUNCH*
Logged
Global Moderator
Sphere Developer
Re: An immense effusion of spambots from the great darkness
Reply #9
–
May 05, 2016, 02:33:49 am
Ah, I see. So even though the accounts were flagged as spam (and thus not "Verified"), it didn't revoke their verified status fully and they could still post? Sounds like a bug. As for email verification, I thought we already had that? I thought I remembered having to verify via email when I created my account in 2013... hm.
But yeah, it's always a game of cat and mouse. I'm just surprised so many bots are finding the forums lately. We were practically invisible to search engines from ~2013-2014 (after the crash). Did minisphere improve our visibility?
neoSphere 5.9.2
-
neoSphere
engine -
Cell
compiler -
SSj
debugger
forum thread
|
on GitHub
Flying Jester
Legendary Poster
Posts: 1,161
Logged
TurboSphere Developer
Re: An immense effusion of spambots from the great darkness
Reply #10
–
May 05, 2016, 02:55:32 am
It could also have to do with having different forum software and forum addresses. We used to get some pretty severe spam on the old forums. Maybe it just took this long for the old spammer's data to expire and to begin collecting new info?
Learn some history?
The Flying Jester's Blog of Sorts
Rahkiin
Medium Poster
Posts: 152
Mac OSX Developer
Logged
Re: An immense effusion of spambots from the great darkness
Reply #11
–
May 07, 2016, 12:45:27 pm
My user is not Verified and I can post just fine... maybe something in the configuration needs to be made more strict?
It might also be a good idea to do patches on the forum? 2.0.11 is out, we use 2.0.6.
Pegasus API:
https://github.com/sphere-group/pegasus
Delphinus:
https://github.com/joskuijpers/delphinus
DaVince
Legendary Poster
Posts: 1,001
Logged
Administrator
Used Sphere for, like, half my life
Re: An immense effusion of spambots from the great darkness
Reply #12
–
May 07, 2016, 01:22:31 pm
The thing is, there's an "Unverified" and a "Verified" group, and you're in neither. As long as you're not in the Unverified group, you can post. I don't even know why the verified group is there if it's like that...
But something is definitely wrong because accounts aren't being put in either group.
I put you in the Verified group, by the way. Let me know if weird junk happens. (vincentbeers on GMail if you can't seem to contact me here.)
Spherical Downloads Repo
||
My (really old) Sphere stuff
Rahkiin
Medium Poster
Posts: 152
Mac OSX Developer
Logged
Re: An immense effusion of spambots from the great darkness
Reply #13
–
May 07, 2016, 04:59:13 pm
TEST!
Well that works.
Pegasus API:
https://github.com/sphere-group/pegasus
Delphinus:
https://github.com/joskuijpers/delphinus
Fat Cerberus
Big Chungus
Posts: 2,774
*MUNCH*
Logged
Global Moderator
Sphere Developer
Re: An immense effusion of spambots from the great darkness
Reply #14
–
July 05, 2017, 07:48:24 am
I think these spammers have found some sort of exploit to get into the forums or something. It's weird, when you view Who's Online after a spam attack, it shows the bot account's last action as "Logging into the forum", NOT as "Posting in..." like it does with normal members. Are they accessing the database directly or something?
edit:
Yeah, the spam is getting really bad now. I can't even keep up with them anymore. Why isn't there a way to delete all posts by a user? I ban the accounts (because I've seen them log back in and post again otherwise), but then I have to delete all the spam posts, sometimes two pages' worth, one by one... we really do need a better forum system.
Last Edit
: July 05, 2017, 08:47:54 am by Fat Cerberus
neoSphere 5.9.2
-
neoSphere
engine -
Cell
compiler -
SSj
debugger
forum thread
|
on GitHub
1
2
next
Print
General Discussion
Site Comments
An immense effusion of spambots from the great darkness