Jump to content

Does anyone know why people do this?


Recommended Posts

  • SnowJapan Moderator

I'm not a particularly technical person but wanted to ask if anyone had any ideas.

 

We have our SJ Questionnaire online and recently we have these clowns filling out the form with the usual spam and meaningless drivel. At the moment we get probably over 30 of these a day. Content pretty much the same so it looks like it is the same people. Why, I wonder, I can't see how they are getting any benefit at all from it.

 

Then there's the recent sudden increase in Forums registrations with similar drivel written in the registration form, each coming from the same email address. Do they actually think we are going to approve them? I dread to think what the forums would be like now if anyone could post without being registered....

 

\:\)

Link to post
Share on other sites

Weird, if they were wanting to do mail injections or something to send spam theyd surely have a more sophistaced system in place, at least using diff email addresses each time. so its probably just some total weirdo who somehow found this site and took a liking to it.

Link to post
Share on other sites

SJ#4, I'd say most of us that do post probably do so for two reasons. We are bored with our jobs, lives, etc, but more importantly there are some pretty interesting discussions on this forum and the level of intelect (myself not included) is quite high. For the others I would suspect they log on, go through the process and do so for much of the same reasons but for one reason or another they don't have anything to say or don't know how to say it. And of course there are just some nuts out there (sorry nuts!) Or of course there are those that are simply felonious people with nothing but bad intentions

Link to post
Share on other sites
  • SnowJapan Admin

Kintaro, thanks. Yes I agree.

 

But in these cases we are talking about peope filling in the Forums registration fields with things like this:

 

Location: sefwerfiewjfoweisf

Nationality: dzfifiseofsefowsfosijdfoij

Signature: sefpisjdfoidsfsfjsofjseeofs

etc

 

And then doing the same thing going though new registration forms with similar literally minutes later.

 

For the Questionnaire forms, we're getting more conventional spam content (viagra, adjustable beds confused.gif etc).

 

It's hard to understand why people might totally waste their time on things like this. It doesn't take us long to delete trash like this, but there has been a noticably large increase in the last few months.

 

The thing that takes more time is the huge amount of junk mail that comes in to our addresses. Probably a 4 figure number each day. We do have filters and the like to get rid of it quickly but it's still a pain. And one that is gradually getting worse unfortunately.

Link to post
Share on other sites

As thursday says, it sounds like a program is doing it. Some company will be claiming the ability to register at 10 million sites with the click of a button. They would have picked up this site and added all the data on the registration page, and linked it to their software.

We have the same problem with links. We vet all the links and only allow travel links, but we get about 30-40 new links a day for the "want a whopper penis" type site.

 

Some solutions are to:

1. Change the name of the registration page (but they'll find you again)

2. Change the names of the fields on the registration form (but again this is easy to find out)

3. Use a image type recognition system (like Earthnet does for the email)

Link to post
Share on other sites

I normally use an image verification system to prevent these bot attacks. Its not so hard to do, just install GD library to your PHP and read the php documentation on how to make a random image.

 

Example:

gd_image.php

 

All the bot attacks I had before were mail injection attempts. You can tell if its mail injection if there is stuff like 'content-type:' somewhere in the nonsense characters (which by the way are characters from a file they are attempting to attach to the mail injection).

 

To be honest, if you are not preventing this kind of thing, then I'd have a good look at all the security in the site. cleaning up all post data etc.

Link to post
Share on other sites
×
×
  • Create New...