FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.

» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > CentOS > CentOS Development

LinkBack Thread Tools
Old 09-14-2011, 05:17 PM
Hristo Benev
Default URGENT: Website and fora at risk due to automated spammer account creation (Phil Schaffner)

>-------- Оригинално писмо --------
>От: centos-devel-request@centos.org
>Относно: CentOS-devel Digest, Vol 79, Issue 7
>До: centos-devel@centos.org
>Изпратено на: Сряда, 2011, Септември 14 19:00:04 EEST

>Send CentOS-devel mailing list submissions to
> centos-devel@centos.org
>To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.centos.org/mailman/listinfo/centos-devel
>or, via email, send a message with subject or body 'help' to
> centos-devel-request@centos.org
>You can reach the person managing the list at
> centos-devel-owner@centos.org
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of CentOS-devel digest..."
>Today's Topics:
> 1. URGENT: Website and fora at risk due to automated spammer
> account creation (Phil Schaffner)
>Message: 1
>Date: Wed, 14 Sep 2011 11:44:54 -0400
>From: Phil Schaffner
>Subject: [CentOS-devel] URGENT: Website and fora at risk due to
> automated spammer account creation
>To: "The CentOS developers mailing list."
>Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
>Forum moderators have been battling spammers creating bogus accounts by
>the thousands using automated "bots". The only way moderators currently
>have to attack the problem is by a laborious process of searching for
>such accounts and selecting them for deletion. This has been working,
>although at the cost of considerable time to perform the operations;
>however, such accounts are currently being created at a rate of
>thousands per day making deletion of 50 at a time via the web interface
>a practical impossibility.
>Our approach has been to delete all "Inactive" accounts more than 7 days
>old (these are being created at a rate of about 1 per minute) and
>"Active" accounts with no posts and either no logins, or with no logins
>in the last 30 days. The latter are the rapidly growing problem, and
>more than 40,000 accounts with zero posts created between 7 and 30 days
>ago currently exist. Account creation at this rate will likely bring
>the site down if the situation is not dealt with soon.
>Proposed approach:
>1. Implement some automated way of deleting accounts as described above.
>2. Implement captcha or some other mechanism in the account creation
>process to foil the bots.
>CentOS-devel mailing list
>End of CentOS-devel Digest, Vol 79, Issue 7

There is also another way of lowering the number of accounts.

It is called zbblock


It has the ability to block sertain IPs based on behaviour.

Good news is that it almost does not require product support.

It should be used with caution too..

100 лв БОНУС. Най-високи коефициенти. Tempobet.com
CentOS-devel mailing list

Thread Tools

All times are GMT. The time now is 08:55 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org