Slashdot Mirror
Ask Slashdot: Using a Sandbox To Deal With Spambots?
shellster_dude writes "Slashdot is certainly no stranger to the problem of spam bots. While blocking a spam bot may seem like the best solution, it is likely that the spammer will simply re-register with a different name. While trying to solve this dilemma on my own forums, I had an epiphany. What if, instead of blocking a spam bot, I could mark a spammer, and then hide all their comments from everyone else? The spammer could continue to go their merry way, spamming to their heart's content. When they visit the forum, they see their spam comments correctly placed in the threads, but their comments would only be visible to them. Thus, an effective sandbox which would prevent them from registering a new user once they had been 'blocked.' Are any other Slashdotters familiar with this technique? Does any software currently use this technique?"
I wouldn't say it "doesn't work." I experienced this shadow banning after I mentioned I not only own a Hybrid electric car, but also a diesel car that gets similar mileage (49MPG). Well the environmentalists furiously attacked me for daring to use the word "diesel" in their forum, and the group owner (also anti-diesel) made my posts invisible.
It took me a few weeks to realize that none of my posts were being responded too. Rather than waste time with another account, I just left the place. So the shadow-ban worked.
My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
Because it will be trivial for a spammer to check his posts from another account?
I remember reading an article on Joel on Software some time ago that talks about this kind of approach. The difference was that instead of only showing those posts to the spammer/troll's account, they were also shown to that poster's /8 or /16 subnet (or something like that). This goes far in solving the problem for multiple accounts (but still fails for proxy servers).
The downside is that the troll's "local Internet" sees the spam/troll, but the greater Internet doesn't. It always seemed like a good tradeoff to me.
Wish I could find the article now, but not having any luck.
"What do you despise? By this are you truly known." --Princess Irulan, Manual of Muad'Dib
/)
Easy solution. Make it so that spammers can see posts by everyone, including other spammers. That way spammers will think they are being successful, especially if you do an IP block on them.
Until the 2nd, 3rd, 4th account is identified and marked as a spam account, it won't be able to see the posts of the 1st account.
I think you overestimate spammers. 99.9999999% of them aren't people, they're bots. I doubt they're even checking from other accounts.
No sig today...