| Index | Recent Threads | Unanswered Threads | Who's Active | Guidelines | Search |
| World Community Grid Forums
|
| No member browsing this thread |
|
Thread Status: Active Total posts in this thread: 21
|
|
| Author |
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
My god, did anyone notice the massice SPAM attack on the AC@H forum? Hundreds of posts in html code, trying to sell some rubbish...
---------------------------------------- I would say, the new forum software might need a little improvement on the security side. I hope, that this attack was the first and last one... So long, Totto [Edit 1 times, last edit by Former Member at Sep 19, 2009 9:58:58 AM] |
||
|
|
Sekerob
Ace Cruncher Joined: Jul 24, 2005 Post Count: 20043 Status: Offline |
Being discussed since the early hours. It's glaringly obvious with this one that something more radical needs to be done on a permanent basis.
----------------------------------------
WCG
Please help to make the Forums an enjoyable experience for All! |
||
|
|
gb009761
Master Cruncher Scotland Joined: Apr 6, 2005 Post Count: 3010 Status: Offline Project Badges:
|
Is there a way where members can automatically be "generated"? - as the vast majority (if not all - I didn't investigate that far), of these "posts" appear to be from different "individuals". If they can be created in such a way, then perhaps some sort of defense against multiple "member" creations such as we can see here needs to be investigated.
----------------------------------------If an automatic way of generating new "members" can't be created, then someone (if not many people), have gone to extraordinary lengths to create that many new "members" and then subsequently post that many new threads... I hope the admins can get to, and clear up the mess as quickly as possible, as there's simply far too many threads to report... ![]() |
||
|
|
Sekerob
Ace Cruncher Joined: Jul 24, 2005 Post Count: 20043 Status: Offline |
For now, use the forum index to approach a support or community section of interest. reCAPTCHA probably has most peoples preference also because it's sort of almost everywhere in place where there is no pre-post forum moderation. Maybe for new posters that can be tiered in addition. 0-10 every post, 10-50, every session, thereafter no more. Sort of the suggestions that could be publicly discussed without giving away what's already in place... and those who know by deduction are asked to not mention these, even speculatively.
----------------------------------------
WCG
Please help to make the Forums an enjoyable experience for All! |
||
|
|
widdershins
Veteran Cruncher Scotland Joined: Apr 30, 2007 Post Count: 677 Status: Offline Project Badges:
|
Glad to see it's being worked on. Any chance of finding someone to delete the offending posts & users to minimise the benefit the spammers get from thier attack?
|
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
That spam attack has been already reported in order to being deleted it
----------------------------------------Please dont post there , thanks Cheers JP [Edit 1 times, last edit by Former Member at Sep 18, 2009 11:49:29 AM] |
||
|
|
knreed
Former World Community Grid Tech Joined: Nov 8, 2004 Post Count: 4504 Status: Offline Project Badges:
|
I would say, the new forum software might need a little improvement on the security side. I hope, that this attack was the first and last one... I want to comment on this statement. This is not a security issue. World Community Grid is designed to allow easy registration and open forum discussions. This can be abused as occurred in this case but this is very different than it being a security issue. At no time was user information exposed that members didn't want exposed nor was ever a thread to any of our servers that could have allowed someone access to our servers. However, as we do not desire to have abuse such as this on our forums, we have tightened some policies regarding posts and quick registrations like this. We will watch to see what happens going forward. The forums software and the website registration has additional tools available to us that we can use to prevent this from happening. However, these tools all increase the chance that we will inadvertently prevent someone who is real and wants to join from having that opportunity. So we will proceed cautiously and only when necessary. If this had been an actual security issue we would have acted swift and decisively. |
||
|
|
knreed
Former World Community Grid Tech Joined: Nov 8, 2004 Post Count: 4504 Status: Offline Project Badges:
|
All of the SPAM threads have been removed.
|
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Indeed Kevin , my thanks to all , so now wouldn´t be a bad idea if totto73 edts his first post and includes ( RESOLVED ) on top, much better
----------------------------------------We have a thread in Suggestions / Feedback called spams solutions thread regards JP [Edit 1 times, last edit by Former Member at Sep 18, 2009 6:16:41 PM] |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Indeed Kevin , my thanks to all , so now wouldn´t be a bad idea if totto73 edts his first post and includes ( RESOLVED ) on top, much better Your wish is my command... ![]() |
||
|
|
|