AlliedModders

AlliedModders (https://forums.alliedmods.net/index.php)
-   Off-Topic (https://forums.alliedmods.net/forumdisplay.php?f=15)
-   -   is this site get hacked? an invalid thread and user appears in Sourcemod - General (https://forums.alliedmods.net/showthread.php?t=344895)

little_froy 12-18-2023 03:29

is this site get hacked? an invalid thread and user appears in Sourcemod - General
 
1 Attachment(s)
the user named "validhack"
I think this site is very old, should improve the security.

mlibre 12-18-2023 08:08

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
are spambot

DarkDeviL 12-18-2023 16:35

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by little_froy (Post 2814604)
the user named "validhack"

Please just use the Report Post (https://forums.alliedmods.net/images/buttons/report.svg) button below the user's profile.

Both when you see stuff like this, but also if there are other posts that you feel may be in violation with the AlliedModders Rules.

Quote:

Originally Posted by mlibre (Post 2814614)
are spambot

Correct.

Quote:

Originally Posted by little_froy (Post 2814604)
I think this site is very old

The problem, regardless the age of the site, is that these spam bots are getting more and more "sophisticated":

I once saw something that looked like a spam bot, so therefore I triggered an infraction causing a ban, with a reason like "Spam bot? - Appeal via Contact Us, if you're real.".

I was surprised to see that potential spam bot return and spam again, but it appeared that it had been appealing about the ban, and due to the appeal, it was apparently considered real by someone else.

Quote:

Originally Posted by little_froy (Post 2814604)
should improve the security.

Although you can get a long way, with a lot of effort, the result you eventually notice, isn't going to be the same forever.

Changing to another kind of forum isn't going to help, or magically fix the problem either.

Spam bots are learning your layers of defence, which means to be pro-active, it requires you to be constantly on guard, and be adapting to new things.

That rarely works that well, together with things driven by volunteers.

There is simply no permanent fix to the problem, regardless what you do (or don't do).

mlibre 12-21-2023 15:16

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
a simple captcha in the login or in the comment boxes would be enough, I bet these bots are so noob that they couldn't overcome the challenge.

Ryan2 12-22-2023 02:25

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by mlibre (Post 2814780)
a simple captcha in the login or in the comment boxes would be enough, I bet these bots are so noob that they couldn't overcome the challenge.

I posted about this at the beginning of the year.

https://forums.alliedmods.net/showthread.php?t=341302

Most of the spam accounts are hijacked accounts with legit post history etc. This forum needs to reset everyone's password if they want to stop this.

Of course a year past almost and nothing has been done.

mlibre 12-23-2023 07:08

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
fixed :idea:

Quick Reply
Message: Hello friends, I bring you an incredible special offer, you cannot miss it...
Rant:
3x-8=x?
  • 1
  • 4
  • 7

Post Quick Reply | Go Advanced

Jhob94 12-23-2023 13:20

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by mlibre (Post 2814828)
fixed :idea:

Quick Reply
Message: Hello friends, I bring you an incredible special offer, you cannot miss it...
Rant:
3x-8=x?
  • 1
  • 4
  • 7

Post Quick Reply | Go Advanced

That would block more real users that suck at math and some spambots would still bypass it :lol:

DarkDeviL 12-23-2023 14:16

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by mlibre (Post 2814780)
a simple captcha in the login or in the comment boxes would be enough

No, unfortunately not.

Quote:

Originally Posted by mlibre (Post 2814780)
I bet these bots are so noob that they couldn't overcome the challenge.

While some bots may be "so noob", as you explain, many of them aren't.

Quote:

Originally Posted by Ryan2 (Post 2814788)
I posted about this at the beginning of the year.

The issue you posted about, was regarding existing - but hijacked accounts.

This thread is about new spam bot registrations.

Account 355909 (literally named "validhack") was created on 2023-12-18, and posted it's junk on on 2023-12-18 06:54 (CET, +0100).

Quote:

Originally Posted by Ryan2 (Post 2814788)
Most of the spam accounts are hijacked accounts with legit post history etc.

That one is actually false.

It does happen like that, but it definitely isn't the most of it that has an existing legit post history and/or old account creditability, in the way as you say.

Quote:

Originally Posted by Ryan2 (Post 2814788)
This forum needs to reset everyone's password if they want to stop this.

I don't really agree with the "everyone's" part though, however, something like that may also become useful, in regards to stopping the problem with the existing - but hijacked accounts.

Having a mandatory password reset, such as if you've been gone from the forums for e.g. 3 months, or 12 months, before you can access the forums again, could be a way of reducing the impact of that specific issue.

But again, a such thing won't prevent the kind of junk that this specific thread is targetting.

Quote:

Originally Posted by Ryan2 (Post 2814788)
Of course a year past almost and nothing has been done.

What exactly do you expect to be done, explained down to the smallest detail?

Quote:

Originally Posted by mlibre (Post 2814828)
fixed :idea:

A such kind of captcha, or any other kind of captcha, even if you create your own customized one, it will proving it's effect for a very limited amount of time.

As I said above:

Quote:

Originally Posted by DarkDeviL (Post 2814638)
Spam bots are learning your layers of defence, which means to be pro-active, it requires you to be constantly on guard, and be adapting to new things.

Quote:

Originally Posted by DarkDeviL (Post 2814638)
There is simply no permanent fix to the problem, regardless what you do (or don't do).

That being said, I will be more than happy to admit that I also believe more things could be tried, in order to act more pro-actively to the issues.

But two questions comes up again and again, in regards to that:
  1. How many false positives do we want?
  2. What is most important?
    a) Effective spam bot defence
    b) That we are not limiting the ability for regular users to use the forums.

WATCH_D0GS UNITED 12-24-2023 06:20

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Very simple solution:

In order to sign-up at AlliedModders.net, please send $3 to the following address..."

Mordekay 12-24-2023 06:53

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by WATCH_D0GS UNITED (Post 2814858)
Very simple solution:

In order to sign-up at AlliedModders.net, please send $3 to the following address..."

:mrgreen:

That would stop them all at once.
But to be fair to users out of not so rich countries, it should be any currency and a low number.

WATCH_D0GS UNITED 12-24-2023 09:36

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by Mordekay (Post 2814859)
:mrgreen:

If you thought this was funny, imagine this: https://forums.alliedmods.net/showthread.php?p=2590227

Mordekay 12-25-2023 15:50

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by Website
Invalid Thread specified. If you followed a valid link, please notify the administrator


DarkDeviL 01-08-2024 18:46

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by WATCH_D0GS UNITED (Post 2814858)
Very simple solution:

In order to sign-up at AlliedModders.net, please send $3 to the following address..."

Sounds like we're having some of the same thoughts? :D

Well, once in the past, on Discord, someone was bringing up something, that sounded like complaints that the administrators/moderators were not doing enough in order to combat the spam on the forums, although I didn't comment it at that time, I was thinking about a comment like:

Quote:

Originally Posted by DarkDeviL's Thought
We can always set up a $100 USD registration fee, that you have to pay in order to have your account activated. It will likely kill a lot of the spam bots, but it will surely also prevent some people from being able to participate.

I'm however under the impression that we would get a lot of hate with that...

Quote:

Originally Posted by Mordekay (Post 2814859)
That would stop them all at once.

I don't think we would be stopping all of them at once, alone with a $3 fee though.

Quote:

Originally Posted by Mordekay (Post 2814859)
But to be fair to users out of not so rich countries, it should be any currency and a low number.

I don't think a low number would give the solution to the problem though.

In the end, we're always getting back to:

Quote:

Originally Posted by DarkDeviL (Post 2814844)
That being said, I will be more than happy to admit that I also believe more things could be tried, in order to act more pro-actively to the issues.

But two questions comes up again and again, in regards to that:
  1. How many false positives do we want?
  2. What is most important?
    a) Effective spam bot defence
    b) That we are not limiting the ability for regular users to use the forums.

A registration fee could solve 2.a, but it will add complications in regards to 2.b, especially if we're talking about the not so rich countries, as mentioned above.

An alternative to the registration fee could be the KYC kind of way, like banks / financial institutions, where we would require identity documents (e.g. passport, driver license, ...) in order to activate the account.

But such kind of KYC would likely be scaring people away, or otherwise give complications just like a registration fee would.

mlibre 01-09-2024 10:30

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by Jhob94 (Post 2814841)
That would block more real users that suck at math and some spambots would still bypass it :lol:

Of course I exaggerated a little, something as basic as addition and subtraction.

Quote:

Originally Posted by DarkDeviL (Post 2814844)
A such kind of captcha, or any other kind of captcha, even if you create your own customized one, it will proving it's effect for a very limited amount of time.

It will take some time to adjust, it can serve as a temporary "brake", which is still better than nothing.

WATCH_D0GS UNITED 02-28-2024 14:07

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
https://i.ibb.co/n6CRQJ6/2024-02-28-120212.jpg

Quote:

Originally Posted by WATCH_D0GS UNITED (Post 2814858)
Very simple solution:

In order to sign-up at AlliedModders.net, please send $3 to the following address..."


Jhob94 02-28-2024 15:06

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Will never happen. This is a free open source community as it should.
The problem is not the spambots, the problem is that we need more active staff. Also a tool to delete or at least move to a staff-only sub-forum would also be nice to make the forum more clean.

tranhuyenchau2k3 03-10-2024 10:04

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
:nono::nono::nono:

Neeeeeeeeeel.- 03-13-2024 09:10

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by DarkDeviL (Post 2814844)
That being said, I will be more than happy to admit that I also believe more things could be tried, in order to act more pro-actively to the issues.

But two questions comes up again and again, in regards to that:
[LIST=1][*]How many false positives do we want?

I've also manage a forum and adding captcha to <1 month old or <50 posts accounts reduced spam drastically.

+ARUKARI- 03-14-2024 03:38

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by Neeeeeeeeeel.- (Post 2819427)
I've also manage a forum and adding captcha to <1 month old or <50 posts accounts reduced spam drastically.

And your forum has a country block.

mlibre 03-14-2024 09:14

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
the idea of ​​limiting participation in the forum without first making a payment, I don't think it would be a good option, you know why, just look at the donations received and draw your conclusions, I still maintain the hypothesis of implementing an innovative captcha. We are not programmers? get creative.

Quote:

Originally Posted by +ARUKARI- (Post 2819459)
And your forum has a country block.

due to ddos ​​attacks

SHIELD755 03-16-2024 23:05

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Maybe at least 3 days need to passed since account creation to do any comment or posts ( idk if it exists )






if(g_iUserCooldown[id] < get_gametime() + 259200) xD

Jhob94 03-17-2024 06:42

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
The staff has been busy, I don’t think there will be any anti-spam changes soon.
The proper solution would be Bugsy selecting more one or two moderators.
On AMXX, approval system could also be removed and become like sourcemod. If it’s bad, unapproved. Else let it be.
I mean, what’s the point of having approved plugins if there are no approvals for years?
Hamlet’s job would become much easier to handle by himself and forum would get cleaner.

WATCH_D0GS UNITED 03-17-2024 12:42

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
-> The forum does not support No-Steam.

-> The forum does not charge a $3 fee, in order to be more inclusive.
-> Valve games costs more than $3.
-> A visitor who is not able to pay a $3 fee is not able to buy Valve games.

-> The forum does support No-Steam.

Jhob94 03-17-2024 13:14

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
What non-steam has to do with this? This is an open source community, i don’t know why you are insisting on it.
“ The term open source refers to any program whose source code is made available for use or modification as users or other developers see fit. Unlike proprietary software, open source software is computer software that is developed as a public, open collaboration and made freely available to the public.”

WATCH_D0GS UNITED 03-17-2024 16:03

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by Jhob94 (Post 2819673)
What non-steam has to do with this? This is an open source community, i don’t know why you are insisting on it.
“ The term open source refers to any program whose source code is made available for use or modification as users or other developers see fit. Unlike proprietary software, open source software is computer software that is developed as a public, open collaboration and made freely available to the public.”

It's like you are really bad with logics.

And what's the point of this comment: "The term open source..."


"We never knew what open source is in our life. A lot of thanks for this very useful information!"

Jhob94 03-17-2024 16:37

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
My logics are bad? You want the community to stop being open source just because people pay for games. Guess what, games were always paid. If the staff wanted to charge people to create accounts they would have already made it on the past, back when the community was super active. Just stop your non-sense talk, your suggestion goes against everything this community stands for.

WATCH_D0GS UNITED 03-17-2024 17:53

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
As We've said before, it's better for you to say nothing.

Do you remember how many bullshit you added in this thread https://forums.alliedmods.net/showthread.php?t=105030 when our first post on it already clearly explained the reason the stuff not worked?

You came to that thread just like you know everything, and in the end it was just like We were teaching a novice.

For someone who created an account in this forum in 2012 and denotes no much knowledge about runtime, does not cache results from natives and still ignoring even in the most called forwards, the slowness of your understanding is considerable high.

"AlliedModders is an open-source development community. We are focused on server-side modifications to any and all games on the Half-Life 1 and Half-Life 2 platforms"

So what else you want to expect from a visitor in this forum? What kind of subject?

Our post before yours already points out everything.

The forum has open source stuff. Files are freely accessible and downloadable, no need to sign-up or even a password to get access.

Which obviously does not mean posting stuff on the forum has to follow the same principia.

What the heck are you talking about?

People will still access the stuff for free.
Who said the forum will sell plugin scripts?

It's a suggestion for security enhancement and for a better experience for the forum users who are here with the desire to see only stuff related to the content they love and not spending their time reading, reporting and deleting unrelated stuff.

You do not need to comment anything else when something is already enough.

Jhob94 03-17-2024 19:03

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
I don’t know why your first account got banned but i am pretty sure it was reasonable. Again, what does that thread has to do with this topic? You are always arguing and derailing off-topic trying to make a point at all cost. This community will never charge users, i’ve been here for long enough to know it. That isn’t an option and you would know if you tried to read the forum rules and objectives.

There are several people here with 0 programming background that manage to learn some cool stuff. If you don’t like it this way feel free to respect whoever banned your first account and don’t come back to this forum. But don’t come here demanding the forum to change it’s community essence just because you don’t like to report spambots.

WATCH_D0GS UNITED 03-17-2024 19:43

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by Jhob94 (Post 2819700)
I don’t know why your first account got banned but i am pretty sure it was reasonable. Again, what does that thread has to do with this topic? You are always arguing and derailing off-topic trying to make a point at all cost. This community will never charge users, i’ve been here for long enough to know it. That isn’t an option and you would know if you tried to read the forum rules and objectives.

There are several people here with 0 programming background that manage to learn some cool stuff. If you don’t like it this way feel free to respect whoever banned your first account and don’t come back to this forum. But don’t come here demanding the forum to change it’s community essence just because you don’t like to report spambots.

You should be ashamed to return to this topic.

Anyone who read our previous post has already seen that you confuse people and continue to confuse them by saying that charging a fee to open a account in the forum means blocking access to files and pages.

Anyone can see the amount of time you make us waste due to your own problems.

And about our account, you hate our presence in the forum.

But don't worry, We will be here forever.

asherkin 03-18-2024 11:01

Re: is this site get hacked? an invalid thread and user appears in Sourcemod - Genera
 
Quote:

Originally Posted by Neeeeeeeeeel.- (Post 2819427)
I've also manage a forum and adding captcha to <1 month old or <50 posts accounts reduced spam drastically.

This is the drastically reduced amount of spam - approximately 90% of spam post attempts are blocked by the existing automated measures.


All times are GMT -4. The time now is 23:22.

Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.