Hi All,
Just to add some commentary here, I've been helping Daveman by deleting spam posts and spam accounts for several months. That system was a very good one when the spam filter was working -- even when it was only working 50% of the time.
But these days it's like chasing your shadow.
Re: new member registrations, Daveman had set up a very good system and I was also managing that. It was very simple to manage, and a new registrant would be approved in 1-2 days. FYI, the human registration requests stood out very obviously from all the spam bot registration requests.
But the current spam filter is like a mosquito screen that's been torn.
If this forum ultimately needs to move to the Google group platform that was started ~ one year ago, during a similar SMF spam crisis, I think everyone would get used to it quickly. Google groups are very easy to use, have decent spam blockers, and are FREE.
https://groups.google.com/forum/m/?hl=en#!forum/poiscenter
It would be a good idea for many of you to go over to the POIS Google group that had been set up, just to check it out, to get a sense for it. Once your posts start populating it, it would develop a great personality. ??
I'm not pushing for that...please don't think I am. It's just that raising money for a new spam blocker, plus donations to cover monthly maintenance fees on SMF -- could become unwieldy.
Stef
Hi Stef,
I want to thank you for the time you have put in helping Daveman with the spam and registration problems. All the moderators here are so dedicated, and that is why this forum has kept its high supportive and informative value for POIS sufferers. So thanks to you, to Daveman, to Demo, and to all others who contribute to the smooth running and preservation of this forum.
I have a question for you, which is quite technical, but seems to be at the root of the problem.
I have no details about the options and the technical possibilities of the current Simple Machines Forums version we have here, so I will try to put it as simply as possible.
First, in any forum, in order to be able to post any message, it is mandatory to have been accepted as a member. Clearly, those spammers that have succeeded in spamming the forum lately have become members at some point in time.
So, the spams we saw lately, are they from:
1. a bot that have been a silent member for a certain time,having succeeded in the registration process before the second, explanation mail have been asked for in the more elaborate signing up process?
Or
2. is it that some spammers take the time to manually write e-mails that look authentic, then they get accepted, and once accepted, they begin to spam right away ?
Or
3. are there hacking spamming bots which can by-pass completely the registration process, being able to make themselves members without any approval or real registration, and then spam at will ?
If 1 is true, this possibility will fade away, as new illegitimate registrations are now blocked.
I would be very surprised that 2 would be true, and that spammers would take the time to write a legitimate-looking e-mail. If so, the mandatory "Brief reason for wanting to join the forum" should be upgraded to something like "elaborate about your motivations in joining the forum, in a text long enough so it is obvious that you are not a spammer who just want an access to the forum". Becoming a member is useful only if you want to write messages on the board, viewing the messages need no membership. Those who want to become members should be able to write something more elaborate tnan "I think I have POIS and want to ask some questions".....
I am not sure that 3 is possible, and that a bot can hack the forum and register itself without any approbation, and start to post right away. But if so, I would suggest that the forum should just be sealed on a regular basis, and re-opened only for brief periods, in order to register and accept those who have written legitimate explanation mails. I agree with Prancer on that, there is not dozens of legitimate POISers who want to register each week. Moreover, for about 100 legitimate new members, only maybe one will post more than one time on the board, and most will not post even once ( just check the forum stats, in the member list, sort by "posts". All the members who have posted at least 1 message hold in the first 12 pages of 418 pages !!! this means that 97.1% of the registered members of this forum have never posted a single message ) . So there is no rush to accept new members. Even if registration would become possible only once in every 2 weeks or so, that's still acceptable, in my opinion.
You have made the suggestion of moving to the Google groups forum. The problem is that the value of this forum is in part in the wealth of information it contains, and in the fact that this information is easily searchable, is organized in sub-forums,in threads, etc ( the old NSF forum, with everything fused in one single thread, was very far from this ). Moving to another place, even if this one stays available for viewing only, would be disappointing.
Also, I have mentioned I would be willing to help pay for a good spam filter, or what is necessary to reduce the management time needed on this forum. A one shot investment sounds realistic, but just like you, I would not be in favor of a chronic, monthly fee, which is not really the norm for a public internet forum, and would not work in the long term.
There is some hope, anyway - the next version of Simple Machines Forum, SMF 2.1, which is still in beta, is supposed to have "Improved spam defenses, registration will be blocked if a user tries to register too quickly and also inept bots can be tripped up by hidden form variables.", as seen on
http://wiki.simplemachines.org/smf/Differences_between_SMF_2.1_and_SMF_2.0 . Would this be enough? I don't know, but it sounds better than the current defenses.
Sorry for this long post. Just my personal opinions on this rather important reflexion we have on this forum future, and the best way to keep it up and running.