LQ Suggestions & FeedbackDo you have a suggestion for this site or an idea that will make the site better? This forum is for you.
PLEASE READ THIS FORUM - Information and status updates will also be posted here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Friday evening MST, wall of spam, multiple forums... gonna be a long weekend...
Hi...
I thought most, if not all, first time threads had to be cleared by a moderator first, before even they're allowed to be posted on the forum. If that's the case, why are so many of these SPAM threads getting through?
EDIT: Wow, there's a little over 3 pages of SPAM listed on "Zero Reply Threads" as of 6:55 PST.
Regards...
Last edited by ardvark71; 01-29-2016 at 09:00 PM.
Reason: Added information/Deleted word.
I opened a text browser (w3m) and did a search for the english text string that appears in most of the spams.
The results returned a list of a bunch of forums, so I don't think this is targeted to LQ. I must confess, though, I was lazy and followed only a few of the links in the search results.
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,602
Rep:
Quote:
Originally Posted by astrogeek
Friday evening MST, wall of spam, multiple forums... gonna be a long weekend...
Posts from two members got through the new filters, and it's already cleaned up. The spam that is getting through now is roughly .001% of the attempts, and we'll continue to improve the filters.
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,602
Rep:
Quote:
Originally Posted by ardvark71
Hi...
I thought most, if not all, first time threads had to be cleared by a moderator first, before even they're allowed to be posted on the forum. If that's the case, why are so many of these SPAM threads getting through?
The first post made by a new member is evaluated by a variety of heuristics and based on that can be placed in a moderation queue. We err on the side of letting spam through vs blocking legitimate posts, as we want to help new members as quickly as possible. As mentioned, I think the amount of spam we block out of hand would astound most members. The amount of false positives is also very small. It's a balancing act and an area we continually tweak and improve.
Posts from two members got through the new filters, and it's already cleaned up. The spam that is getting through now is roughly .001% of the attempts, and we'll continue to improve the filters.
--jeremy
Thanks for the reply, it is reassuring. And my sympathies.
I know that what we see is only a very small part of the attempts. And I recognize that you and the LQ mods and admins do a remarkable job of keeping as much out as you do.
But when I sit down for an LQ session and see the wall of spam it makes me so angry I could... well, all the cats leave the room! And the problem is now so large and persistent globally that I very nearly despair...
As I type this I see another round has now started, so I'll let you get back to it.
I have done a little investigation on this using w3m, links, and lynx.
If you go to the website specified in the spam, it redirects to another website which appears to be some kind of link farm--it's just a listing of links with some text next to them, at least in a text browser. You can see a screenshot here.
As I don't have Korean installed on my machine and couldn't read it if I did, I get lots of asterisks in the display. If anyone is interested in the whois, I'll be happy to post it, but I doubt it's worth the effort.
I have been doing a little investigation as well, every little bit helps I suppose.
I have loosely profiled the spam users, at least the ones I have been aware of, for the past couple of weeks.
There was an important difference tonight from the past couple of weeks in that the posting rate (posts per user per hour) was similar, but the maximum number of posts per spam user was fixed at a much lower level. Either the spammers were profiling and stopped at a fixed number, or there is some new limit in place which cut them off - I hope it was the latter. If so, it is still high enough to allow much more room for downward adjustment before affecting legitimate users I think.
The lower number of posts per user greatly reduced length of time and overall visibility of the spam quite a bit from the previous week. I hope that trend continues, whatever the source!
*** Update to the Update
First post was at 9:30PM.
It is now about 2:30AM and there has been no letup.
So as of now, 5-1/2 hours and counting few "customers" have been served.
Eight pages deep in the Newbie forum to get past the spam...
This one appears more aggressive than previous instances, with greater number of user names and faster delivery rate per user too. Most are staying below 50 posts per user, but some are now above 160 posts, likely 200+ but I am too tired to track them any more tonight.
My sympathies to the admins who I am sure are dealing with it all.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.