Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #21  
Old 11-21-2012, 02:53 PM
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Posts: 3,134
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by BirdOPrey5 View Post
I disagree. The point of using bots is automation.

You set the bot to run and you go one about your day. Whether it takes 5 minutes or 5 hours is of no real concern to the person spamming links across forums.

Yes it will take longer when the bots start adapting, but they will because there is still much money to be made with spamming links.

While the time-lock method is a good method it is still going to be better to have some sort of captcha type challenge easy for humans but impossible for bots, long term, IMO.

That said no reason not to install the bot-time-check for now.

- My 2 cents.
And of which, slower bots mean less money, long term.

The time test is just another arrow in the quiver.

I have no doubt that as the time based test becomes more popular, botnet admins and botnet software designers will try to do a workaround. Problem is, they won't be all that aware of all the variables involved. Your individual setting, variable page load times - they would almost have to program in a 60 second delay in their bots. Multiply that times let's say, 10,000 bots in a botnet and that is ALOT of lost minutes.
Reply With Quote
  #22  
Old 11-21-2012, 03:02 PM
doogie88 doogie88 is offline
 
Join Date: Oct 2006
Posts: 121
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by BirdOPrey5 View Post
I disagree. The point of using bots is automation.
It's speed and automation. If they have to wait 15 seconds per account, that's 4 per minute, 240 per hour. That sounds like a lot, but these guys are trying to reach thousands of forums. So it does slow it down a bit. Not enough to stop them though. They can probably just run more instances.

I am still getting spam this morning and have timer set to 18 seconds.
Reply With Quote
Благодарность от:
Max Taxable
  #23  
Old 11-21-2012, 03:05 PM
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Posts: 3,134
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by doogie88 View Post
It's speed and automation. If they have to wait 15 seconds per account, that's 4 per minute, 240 per hour. That sounds like a lot, but these guys are trying to reach thousands of forums. So it does slow it down a bit. Not enough to stop them though. They can probably just run more instances.

I am still getting spam this morning and have timer set to 18 seconds.
Human spammers are going to pass the time test. This is why you still need other tests.

There's not alot that can be done about humans spamming.

--------------- Added [DATE]1353515210[/DATE] at [TIME]1353515210[/TIME] ---------------

For those getting spam hammered have you tried blocking known spam user agents?

This Mod by Simon Lloyd is handy for that, can cut spam both automated and human, drastically. Chiefly, put early versions of MSIE into the list... versions 2-6 especially. You'll be surprised how much it helps.

The thread contains lists of blocked user agents myself and others provided.

Yet another arrow in the quiver too...
Reply With Quote
  #24  
Old 11-21-2012, 04:31 PM
ScottishScoobie ScottishScoobie is offline
 
Join Date: Jun 2012
Posts: 28
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

This is not spam lol.

why not use a free account at CloudFlare.

my host pointed me to them, i can see counties, IP's and its linked to a few sites where you can click on their information and it shows you what sites they have been spamming and what it is they are dropping on there.

im down to approximately 2 per day from a few hundred when i first migrated to the site.

have not implemented anything other than question/answer and CloudFlare.

that to me tells me that the 2 - 3 that get through are actually human.
Reply With Quote
  #25  
Old 11-21-2012, 04:37 PM
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Posts: 3,134
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by ScottishScoobie View Post
This is not spam lol.

why not use a free account at CloudFlare.

my host pointed me to them, i can see counties, IP's and its linked to a few sites where you can click on their information and it shows you what sites they have been spamming and what it is they are dropping on there.

im down to approximately 2 per day from a few hundred when i first migrated to the site.

have not implemented anything other than question/answer and CloudFlare.

that to me tells me that the 2 - 3 that get through are actually human.
I used CF for about a year. Downtime was a recurring issue with it, so I discarded it. It made no difference at all for spam on my site, due to the tests I already had. It also didn't really help my speed much, wasn't doing anything, really.

What will stun you is, when you install the time based test we're talking about, just how many autospam bots that it will catch and report, even though you're on CF.

Be amazed.
Reply With Quote
  #26  
Old 11-23-2012, 11:59 AM
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
Senior Member
 
Join Date: Jun 2008
Location: New York
Posts: 10,610
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by doogie88 View Post
It's speed and automation. If they have to wait 15 seconds per account, that's 4 per minute, 240 per hour. That sounds like a lot, but these guys are trying to reach thousands of forums. So it does slow it down a bit. Not enough to stop them though. They can probably just run more instances.

I am still getting spam this morning and have timer set to 18 seconds.
You're assuming the software waits for one forum to finish before moving on to another. There is no logical reason they couldn't hit 100 forums at once and even if they wait 30 seconds, that is 100 forums * 2 a minute * 60 minutes = 1200 an hour. Slowing down the time it takes to register is a trivial change that will have a negligible impact in the long run.
Reply With Quote
  #27  
Old 11-23-2012, 05:21 PM
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Posts: 3,134
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by BirdOPrey5 View Post
You're assuming the software waits for one forum to finish before moving on to another. There is no logical reason they couldn't hit 100 forums at once and even if they wait 30 seconds, that is 100 forums * 2 a minute * 60 minutes = 1200 an hour. Slowing down the time it takes to register is a trivial change that will have a negligible impact in the long run.
This is all assuming they will track their failures and take the time to determine the source of the failure. Figuring out it's time based is the first challenge. Then figuring out what delay to set is the other. Variables there include page load time, and the setting of the timeout for each individual site. They would almost have to program a 60 second delay between the time the registration form loads, and clicking "submit," to bypass all those variables.
  • They don't know your time setting and..
  • They don't and can't know what kind of pageload times they're going to see.
I have no doubt that as the time based test becomes more popular, botnet admins and botnet software designers will try to do a workaround. Problem is, they won't be all that aware of all the variables involved. Your individual setting, variable page load times - they would almost have to program in a 60 second delay in their bots. Multiply that times let's say, 10,000 bots in a botnet and that is ALOT of lost minutes. And time IS money for these creeps.
Reply With Quote
  #28  
Old 11-23-2012, 06:10 PM
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
Senior Member
 
Join Date: Jun 2008
Location: New York
Posts: 10,610
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

What "All variables" though? As you just said a 60 second delay would completely defeat the time checks, every time.

So they program a 60 second delay- It still doesn't stop anything in the long run because you are attacking forums in parallel, not in series.

Really the only way this mod is a long term solution is if it doesn't become popular.
Reply With Quote
  #29  
Old 11-23-2012, 06:26 PM
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Posts: 3,134
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by BirdOPrey5 View Post
What "All variables" though? As you just said a 60 second delay would completely defeat the time checks, every time.

So they program a 60 second delay- It still doesn't stop anything in the long run because you are attacking forums in parallel, not in series.

Really the only way this mod is a long term solution is if it doesn't become popular.
Let's find out!

It's still a 60 second delay each time, for each board - whether they have the time check or not.

This mod isn't any be all end all, it's just yet another arrow in the quiver. Just another hoop for them to have to jump through. Time will tell if it gets defeated.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 04:43 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.26097 seconds
  • Memory Usage 2,278KB
  • Queries Executed 12 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (7)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (9)post_thanks_box
  • (1)post_thanks_box_bit
  • (9)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit
  • (9)post_thanks_postbit_info
  • (9)postbit
  • (9)postbit_onlinestatus
  • (9)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete