5 ms·

Were you using an unusual user agent or a VPN or something?

by shawnz 8y ago

askvictor 8y ago
Why would they bother checking the user agent when it's the easiest thing to spoof (really, you probably can't even call it spoofing)
- shawnz 8y ago
  I'd bet that the vast majority of botters/phishers which Facebook deals with are amateurs. That said, I meant using unusual user agent software, not really just having an unusual user agent string.
  - HenryBemis 8y ago
    No need for software, one can easy change it on the about:config of Firefox and/or there are some cool add-ons that can rotate/change the user agent of a Firefox on the "desired frequency"
  - adrianhel 8y ago
    We have a Wordpress site that suddenly saw a surge of hacking attempts. Turns out they all had IE7 user agents. Blocked that, not a problem anymore. Wouldn't surprise me if big sites use simple measures for such simple attack attempts as well.
codeulike 8y ago
Twist: he is a robot, and when he sent them a photo, it was a robot photo. Square metal head, lights for eyes, antenna coming out the top. The works.
- felipemnoa 8y ago
  That would have been hilarious! Somebody should try it when they I accuse you of being a robot.
- cma 8y ago
  Maybe he isn't a robot, but his given birth name was zxcvbn4038
  - jacobush 8y ago
    or bobby tables
    - HenryBemis 8y ago
      "Little Bobby Tables we call him..." That is my favourite XKCD comic!
  - kerneis 8y ago
    A friend of mine uses a fake last name on Facebook because her real name is Fake, which they refuse to accept as real. (Her name is actually Faux, which means fake in French.)
- dylan604 8y ago
  I would assume a submitted photo of a robot would go over just as well as when I was once asked to add a picture to the company's internal website of employees by our HR dept. I never add photos of me to anything, so instead, in good humor, downloaded a random anonymous silhouette type avatar. That didn't work for them, and I was told "I need a picture of you". So, I open up photoshop, found a generic picture frame online, and added the word YOU inside the frame. Shortly after this, my supervisor comes in to pay me a visit. Some people just have no sense of humor.
  - jrs235 8y ago
    Have someone take a portrait photo of the back of your head.
    - z3t4 8y ago
      Or take the photo using a potato. The security at my gym requires a photo id - but you can barely see who's on the picture. It looks to be printed with a dot printer.
  - mikro2nd 8y ago
    In much the same situation, I just said NO. A protracted argument unfolded over the next few days until the matter was settled by me skimming a copy of the Conditions Of Service booklet across the desk and saying, "Show me where it says I have to." Immediate manager was not happy, but it soon blew over.
  - senorjazz 8y ago
    I don't a real human looks at the photo. It will be CV process that tries to identify the image with whatever word proof was asked to be present. Hence the high rate of rejections
yorwba 8y ago
I got banned from Twitter within 5 Minutes of trying to figure out the user interface, and my best guess as to why it happened is that their anomaly detection is overfit to their existing users. So when a new user starts exploring randomly instead of directly going to look at ads, they're behaving much more like a scraper than what the system has learned to recognize as a normal user.
- shawnz 8y ago
  I think that's very unlikely. There are over 100,000 new accounts created on Twitter every day so we would expect a large and frequent amount of bans if what you are saying were true. Furthermore most Twitter visitors don't have accounts so it would be pretty foolish to base their anomaly detection on a metric that most of their visitors fail.
  - berdario 8y ago
    It's actually well known that you'll get blocked by Twitter within the first 2 minutes of registering, whatever you'll do. They probably use it as a way to enforce their "soft" requirement of a phone number. After verifying that you have a working phone number, you'll get unblocked. Also, Twitter routinely renders their tweets unaccessible to non-logged-in users, due to rate limits on their api (which is used by their web frontend). So, I'm not one bit surprised if anyone would describe Twitter as foolish: that's exactly how they act
    - thaumasiotes 8y ago
      Hey, I have some experience creating intentionally suspicious Twitter accounts. There is no phone number requirement. They're just as happy with an email address. If you provide neither of those, then your account functionality is restricted (with a big obvious banner showing at the top of every page), but you still don't get blocked. Once I needed to create several accounts at once and then have all but one of them follow the last one. Those accounts got blocked, but it's hard to blame Twitter for that.
    - xkcd-sucks 8y ago

Were you using an unusual user agent or a VPN or something?

by shawnz 8y ago

Were you using an unusual user agent or a VPN or something?

Why would they bother checking the user agent when it's the easiest thing to spoof (really, you probably can't even call it spoofing)

shawnz 8y ago
I'd bet that the vast majority of botters/phishers which Facebook deals with are amateurs. That said, I meant using unusual user agent software, not really just having an unusual user agent string.
- HenryBemis 8y ago
  No need for software, one can easy change it on the about:config of Firefox and/or there are some cool add-ons that can rotate/change the user agent of a Firefox on the "desired frequency"
- adrianhel 8y ago
  We have a Wordpress site that suddenly saw a surge of hacking attempts. Turns out they all had IE7 user agents. Blocked that, not a problem anymore. Wouldn't surprise me if big sites use simple measures for such simple attack attempts as well.

codeulike 8y ago

Twist: he is a robot, and when he sent them a photo, it was a robot photo. Square metal head, lights for eyes, antenna coming out the top. The works.

felipemnoa 8y ago
That would have been hilarious! Somebody should try it when they I accuse you of being a robot.
cma 8y ago
Maybe he isn't a robot, but his given birth name was zxcvbn4038
- jacobush 8y ago
  or bobby tables
  - HenryBemis 8y ago
    "Little Bobby Tables we call him..." That is my favourite XKCD comic!
- kerneis 8y ago
  A friend of mine uses a fake last name on Facebook because her real name is Fake, which they refuse to accept as real. (Her name is actually Faux, which means fake in French.)
dylan604 8y ago
I would assume a submitted photo of a robot would go over just as well as when I was once asked to add a picture to the company's internal website of employees by our HR dept. I never add photos of me to anything, so instead, in good humor, downloaded a random anonymous silhouette type avatar. That didn't work for them, and I was told "I need a picture of you". So, I open up photoshop, found a generic picture frame online, and added the word YOU inside the frame. Shortly after this, my supervisor comes in to pay me a visit. Some people just have no sense of humor.
- jrs235 8y ago
  Have someone take a portrait photo of the back of your head.
  - z3t4 8y ago
    Or take the photo using a potato. The security at my gym requires a photo id - but you can barely see who's on the picture. It looks to be printed with a dot printer.
- mikro2nd 8y ago
  In much the same situation, I just said NO. A protracted argument unfolded over the next few days until the matter was settled by me skimming a copy of the Conditions Of Service booklet across the desk and saying, "Show me where it says I have to." Immediate manager was not happy, but it soon blew over.
- senorjazz 8y ago
  I don't a real human looks at the photo. It will be CV process that tries to identify the image with whatever word proof was asked to be present. Hence the high rate of rejections

yorwba 8y ago

I got banned from Twitter within 5 Minutes of trying to figure out the user interface, and my best guess as to why it happened is that their anomaly detection is overfit to their existing users. So when a new user starts exploring randomly instead of directly going to look at ads, they're behaving much more like a scraper than what the system has learned to recognize as a normal user.

shawnz 8y ago
I think that's very unlikely. There are over 100,000 new accounts created on Twitter every day so we would expect a large and frequent amount of bans if what you are saying were true. Furthermore most Twitter visitors don't have accounts so it would be pretty foolish to base their anomaly detection on a metric that most of their visitors fail.
- berdario 8y ago
  It's actually well known that you'll get blocked by Twitter within the first 2 minutes of registering, whatever you'll do. They probably use it as a way to enforce their "soft" requirement of a phone number. After verifying that you have a working phone number, you'll get unblocked. Also, Twitter routinely renders their tweets unaccessible to non-logged-in users, due to rate limits on their api (which is used by their web frontend). So, I'm not one bit surprised if anyone would describe Twitter as foolish: that's exactly how they act
  - thaumasiotes 8y ago
    Hey, I have some experience creating intentionally suspicious Twitter accounts. There is no phone number requirement. They're just as happy with an email address. If you provide neither of those, then your account functionality is restricted (with a big obvious banner showing at the top of every page), but you still don't get blocked. Once I needed to create several accounts at once and then have all but one of them follow the last one. Those accounts got blocked, but it's hard to blame Twitter for that.
  - xkcd-sucks 8y ago