Gp32x.com Needs Better Security


Alex.

Retired
Joined
Aug 24, 2005
Messages
4,616
First the spyware exploit a couple of months ago, then the server hack of the archive, and now this out-of-control spam bot. At leats enable e-mail validation before registering new users, it's the most minimal and most important security measure this forum needs right now.

- Alex
 
Alex. posted on Sep 20 2006 at 06:56 PM said:
First the spyware exploit a couple of months ago, then the server hack of the archive, and now this out-of-control spam bot. At leats enable e-mail validation before registering new users, it's the most minimal and most important security measure this forum needs right now.

- Alex

Yeah, it seems like the more popular the '2X is getting, the more crap we have to put up with ...
 
Last edited by a moderator:
realy nothing new, we get that kind of spam since months, usaly the mods are pretty faste at deleting it, i came home a hour to late...
 
Vimacs posted on Sep 20 2006 at 10:15 PM said:
realy nothing new, we get that kind of spam since months, usaly the mods are pretty faste at deleting it, i came home a hour to late...
too late is an understatement. THE DAMAGE IS DONE TO THE YOUNG'UNS :lol:
 
Last edited by a moderator:
daclassicgamingmaster posted on Sep 20 2006 at 10:23 PM said:
Vimacs posted on Sep 20 2006 at 10:15 PM said:
realy nothing new, we get that kind of spam since months, usaly the mods are pretty faste at deleting it, i came home a hour to late...
too late is an understatement. THE DAMAGE IS DONE TO THE YOUNG'UNS :lol:

:lol: yeah ... anyone clicking on links clearly labled 'gay boy sex' is already damaged to begin with ... unless said clickers are gay boys ...
 
Last edited by a moderator:
TelcoLou posted on Sep 21 2006 at 12:57 PM said:
daclassicgamingmaster posted on Sep 20 2006 at 10:23 PM said:
Vimacs posted on Sep 20 2006 at 10:15 PM said:
realy nothing new, we get that kind of spam since months, usaly the mods are pretty faste at deleting it, i came home a hour to late...
too late is an understatement. THE DAMAGE IS DONE TO THE YOUNG'UNS :lol:

:lol: yeah ... anyone clicking on links clearly labled 'gay boy sex' is already damaged to begin with ... unless said clickers are gay boys ...

LOL
let's have a poll
 
Last edited by a moderator:
How about one of those safety picture generators where you have to enter a code that`s shown in the picture... that would be easy for registration and also you wouldn`t have to wait for the crappy email to arrive.

And yeah, I was late for the gayporn too... dammit. :lol:
 
No no, we need both image code and e-mail validation. What do you care though, you're already registered :)

- Alex
 
Alex. posted on Sep 21 2006 at 11:54 AM said:
No no, we need both image code and e-mail validation. What do you care though, you're already registered :)

- Alex

True that... but why both? I don`t think any bot can get through an image code system.
 
Last edited by a moderator:
xnopasaranx posted on Sep 21 2006 at 01:45 PM said:
Alex. posted on Sep 21 2006 at 11:54 AM said:
No no, we need both image code and e-mail validation. What do you care though, you're already registered :)

- Alex

True that... but why both? I don`t think any bot can get through an image code system.

Not directly, but a lot of bots just download the image and place it onto a warez/crack site where people downloading the crack have to first type the text shown in the image in. once they've done that the bot uses that text to register on the site.

Email validation is a good start, also not allowing user accounts using free email address providers used to be another solution, such as banning hotmail.com/yahoo.cmo etc but a lot of people use gmail now so that could be problematic, although they should still have an isp email account with which to initially sign up?

The other option is to force the first post any user makes to be placed in an authorisation queue. Once they've had a single post approved all further posts are auto approved.

Yet another option is to rename the signup script pages to something else and mod the code to use that. Again won't stop everything, but will kill off some bots.

All the above take time to do though and arn't perfect :(
 
Last edited by a moderator:
Not directly, but a lot of bots just download the image and place it onto a warez/crack site where people downloading the crack have to first type the text shown in the image in. once they've done that the bot uses that text to register on the site.
Do they actually do that?! :blink:
 
Hanz™ posted on Sep 21 2006 at 12:29 PM said:
Not directly, but a lot of bots just download the image and place it onto a warez/crack site where people downloading the crack have to first type the text shown in the image in. once they've done that the bot uses that text to register on the site.
Do they actually do that?! :blink:

If they do that that is extremely intelligent... :o
 
Last edited by a moderator:
Nooooooo
I always assumed IDIOTS wrote cracking programs! :rolleyes:

Well, we could claim that they are "idiots" in the insulting sense, but not idiots in the "educatory" sense...
 
It's my belief that most spambots are actually overpaid (for what they do) people. Those two barriers may just be enough to slow them down and make their 'work' unefficient.

- Alex
 
Back
Top