"Questionable" account checks at the time of signup?

Just summarizing for @techapj who is going to experiment with doing these checks and logging the results, here are the services to check new user signup IPs against:

  1. http://www.spamhaus.org/lookup/
  2. SpamCop.net - Blocking List ( bl.spamcop.net )
  3. Inspect an IP | Project Honey Pot
  4. Stop Forum Spam
  5. http://torstatus.blutmagie.de/tor_exit_query.php

Interestingly, this may present a problem.. if a user logs in from a validated email service, say, Facebook or Google, they don’t have to wait for an email with a link to have a valid account, they have a valid account immediately after signing up and can begin posting – subject to standard new user sandbox rate limits, of course.

It’s almost like you can’t really approve someone’s account until you hear back from these ~5 different services, to know if the user account should be put in a manual approval queue first.

Well, anyway, @techapj will experiment with doing these checks at signup time, see how long they take, and log the results behind the scenes. No user-facing UI or outcome yet.

(The other potential problem is users who sign up for a new user account from a “good” IP and then switch to an “evil” IP later. Not sure how realistic that is, though..)

edit: we are putting this on hold for a bit as the last few live spammer IPs we checked against these 5 lists had basically zero hits across all lists :warning: . We’ll continue to spot check live spammer IPs against the 5 lists above, but it isn’t looking so good as a “magic bullet” to prevent spammers from signing up at this point.

3개의 좋아요