What do you use to slow down the endless spam signups? The board already moderates the first posts but the endless signups is something I need to stop or at least slow down.
What works for you?
nodeham 2 points 18 days ago
@phenomlab Oh jeez, I hope it does not come to that. One thing that helps is let them sign up all day long but moderate the posts. However, it would be nice to have some other way to control even those endless signups. Gotta find a solution. Since the early days of forums, this has been a big problem.
omega 1 point 17 days ago
@phenomlab Do you think it's the new dead army causing the increase?
brutalbirdie 2 points 16 days ago
Well I did build this plugin https://github.com/... / https://www.npmjs.com/... to filter for exactly stuff like that and mass delete them.
nodeham 1 point 17 days ago
Yes, dead army for sure :).
The thing is, it's been a problem since the early days of forums and it's never been really solved. By invite only is not, in my case at least, a good option. My method is, let them sign up all they want. If they have not posted in 30 days, delete the accounts. I'll automate that soon if that doesn't already exist and the only thing that will help is keeping the bulk of it out of the DB at least.
BUT, that might then cause the problem is spammers needing to be moderated all day long. Really not sure how to win.
omega 1 point 17 days ago
@NodeHam Ah yes phpBB was some spam magnet in its day, and probably still is. Wordpress too.
I'm thinking a improved or reengineered better filtering signup management system would help.
Combined with acc timeout options or staging, with some variable logic, for e.g.:
De-Activate acc if the acc has not:
- signed in again within 7 days
- posted in 30 days
- read less than 10 posts in 24 hours
Allow 1 or more criteria be required to "deactivate" account, you could have follow on variable logic.
If acc has not re-activated within 15 days delete account.
Forming an orderly cleanup queue for low value / spam users, that is automated.
Allowing more flags like IP and email domains would be nice here. Maybe that's there already in NodeBB I can't remember.
It would be helpful to be able to build up native intelligence-patterns for signups, and also filter using above criteria into groups as well, since you may not want to deleted but group acts into value tiers, say if you want to retain what look like viable emails that could be targeted to try and engage user to participate more, a lurker group-tier and so on.
Maybe NodeBB admins share can share anon intelligence-patterns via a central pool that can auto-update other joined in NodeBB instances, thus building a native shall I say federated anti-spam system that is NodeBB exclusive, community maintained, developer supported.
One other thought recently on this issue, was maybe to add in one or more required text field for a user to post brief few words of reasoning why they are signing up, to see if it might compliment hCaptcha and present a hurdle to junk sign ups, maybe another field like "how did you find us", might be a good candidate.
The approach of having a more dedicated signup management system is it would also serve as the place to addition features to for onbaroidng new users, improve the noise to signal ratio of sign ups, an overall more proactive of anyone trying to build up a user base which is no easy task these days using NodeBB as the core platform of choice.
general-discussion
@community.nodebb.org
0
121
16
A place to talk about whatever you want
go to feed...
general-discussion
@community.nodebb.org
0
121
16
A place to talk about whatever you want
go to feed...
For me, the sudden influx of spam registration has become so bad, I've set it to invite only.
save