3 ms·
This is a lot bigger than you'd expect. Nearly all the spam that makes it into the database on my sites is human-powered. It's maybe only 1% of the total atta
by jasonkester 18y ago
This is a lot bigger than you'd expect. Nearly all the spam that makes it into the database on my sites is human-powered. It's maybe only 1% of the total attack volume, but because simple checks knock out nearly all the noise, it becomes the most significant fraction that you have to deal with.
- ErrantX 18y agolimit it to 1 account creation per IP per hour :) Yeh they can use a ton of proxies to get round that but I bet it cuts the account creation right down. And it shouldnt affect 99.999999% of "real" users.
- jasonkester 18y agoAh, but there's the rub. Extrapolating from my comment above, your number one job is to make spammers feel successful when they fail. If you reject new accounts like this, you'll force them to write those little proxies to get around your system. The better thing to do is to simply notice what they're doing and flip the IsSpammer bit on all those new accounts (including the first one.) That way you can correctly classify any content they may post from those accounts in the future.
- ErrantX 18y agoThere's the age old argument of which system to go for: Passive (my suggestion) or Active (yours). Probably both have merits but I am inclined to agree yours is the better way :D