Go Back   vb.org Archive > Community Central > Community Lounge
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 06-07-2011, 10:22 AM
8thos's Avatar
8thos 8thos is offline
 
Join Date: Aug 2010
Location: Pensacola, FL
Posts: 772
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default What's The Point of E-Mail Confirmation?

My site's e-mail confirmation is broke so I disabled it.

So I started thinking, if someone uses a fake e-mail account to register, would it matter since their IP is logged?

If they forget their password and the e-mail account is wrong then their screwed. Yes I know.

Nor will they get notifications. But is it really that serious? I've noticed a lot of people will sign up but not get to post because of email confirmations.

and I'm not worried about spam bots. Question and Answer fixes that easily.
Reply With Quote
  #2  
Old 06-07-2011, 11:34 AM
Disasterpiece's Avatar
Disasterpiece Disasterpiece is offline
 
Join Date: Apr 2007
Location: GER
Posts: 765
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Discussed this recently: https://vborg.vbsupport.ru/showthrea...24#post2204324

Quote:
So I started thinking, if someone uses a fake e-mail account to register
Your choice to do something against this. There are enough methods to keep trashmail adresses outside and it's only important that the user specifies an email adress where he can receive emails.

Quote:
If they forget their password and the e-mail account is wrong then their screwed.
Not your problem.
Also: There's a contact form users can use if their account is important to them.

Quote:
I've noticed a lot of people will sign up but not get to post because of email confirmations.
If they won't even click on a simple activation link, I wouldn't bother much about them. But that's just my opinion.
Reply With Quote
  #3  
Old 06-07-2011, 05:42 PM
8thos's Avatar
8thos 8thos is offline
 
Join Date: Aug 2010
Location: Pensacola, FL
Posts: 772
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Disasterpiece View Post
Discussed this recently: https://vborg.vbsupport.ru/showthrea...24#post2204324


Your choice to do something against this. There are enough methods to keep trashmail adresses outside and it's only important that the user specifies an email adress where he can receive emails.


Not your problem.
Also: There's a contact form users can use if their account is important to them.


If they won't even click on a simple activation link, I wouldn't bother much about them. But that's just my opinion.
I clicked on your link and says I don't have permission to view.

I also didn't care if a member wouldn't bother clicking to view activation links.

but as I've been having lots of issues with my site crashing etc, I'll take em however way I can.
Reply With Quote
  #4  
Old 06-07-2011, 07:01 PM
Boofo's Avatar
Boofo Boofo is offline
 
Join Date: Mar 2002
Location: Des Moines, IA (USA)
Posts: 15,776
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

And watch your SPAM count up up right along with it.
Reply With Quote
  #5  
Old 06-07-2011, 09:08 PM
8thos's Avatar
8thos 8thos is offline
 
Join Date: Aug 2010
Location: Pensacola, FL
Posts: 772
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Boofo View Post
And watch your SPAM count up up right along with it.
Nah. Security Question and Answer fixes that easily.

For instance, ask a spam bot a random question like:

'Name of member with ninja avatar'

and it can't answer. If it's a person who joins just to spam, they'd have to do some searching first. Most spammers don't have time for that so they'll give up.
Reply With Quote
  #6  
Old 06-07-2011, 09:33 PM
Boofo's Avatar
Boofo Boofo is offline
 
Join Date: Mar 2002
Location: Des Moines, IA (USA)
Posts: 15,776
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Spammers will use the lack of email verification to get in and post their links. That is the general idea. Plus, when you start getting emails bounced because they gave you a fake email address, hosts usually don't like it.
Reply With Quote
  #7  
Old 06-07-2011, 10:48 PM
nitra1000's Avatar
nitra1000 nitra1000 is offline
 
Join Date: Dec 2009
Location: uk
Posts: 312
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

While the QandA might solve your spam problem, hotmail and the like will spambox you if you send too many notifications to incorrect accounts
Reply With Quote
  #8  
Old 06-07-2011, 10:50 PM
Disasterpiece's Avatar
Disasterpiece Disasterpiece is offline
 
Join Date: Apr 2007
Location: GER
Posts: 765
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Octavius. View Post
Nah. Security Question and Answer fixes that easily.

For instance, ask a spam bot a random question like:

'Name of member with ninja avatar'

and it can't answer. If it's a person who joins just to spam, they'd have to do some searching first. Most spammers don't have time for that so they'll give up.
for automated attacks, you're right.
For attacks directed specificly to your forum, this might be one less barrier.
Reply With Quote
  #9  
Old 06-08-2011, 04:31 AM
vijayninel's Avatar
vijayninel vijayninel is offline
 
Join Date: Mar 2009
Posts: 537
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Boofo View Post
And watch your SPAM count up up right along with it.
This is completely wrong an misleading. I dont have e-mail verification on my site and have 0 spam despite being specifically targeted by human spammers in addition to bots.

Bots and human spammers can create e-mail accounts and verify them as well. e-mail verification is quite useless for preventing spam and is an inconvenience to general users. I would suggest not to use it.
Reply With Quote
  #10  
Old 06-08-2011, 06:52 AM
Boofo's Avatar
Boofo Boofo is offline
 
Join Date: Mar 2002
Location: Des Moines, IA (USA)
Posts: 15,776
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by vijayninel View Post
This is completely wrong an misleading. I dont have e-mail verification on my site and have 0 spam despite being specifically targeted by human spammers in addition to bots.

Bots and human spammers can create e-mail accounts and verify them as well. e-mail verification is quite useless for preventing spam and is an inconvenience to general users. I would suggest not to use it.
No, it is not wrong and misleading. Spammers look for sites like yours where they don't have to prove who they are. That makes dissemination of spam all that much easier. If they aren't doing spam in posts, you can almost bet they are doing it in PMs.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 11:06 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04945 seconds
  • Memory Usage 2,260KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (8)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete