Handling trolls with multiple accounts over VPNs

If you feel it’s so simple, feel free to propose it as a plugin in Marketplace with a budget.

2 个赞

Could pull some estimate out of a hat, that how complex this kind of implementation would be? I am not even sure if cookie tagging is the right approach, there might something more clever, but it is a topic worth discussing as IP logs are nowadays white noise and disposable emails are available for free (for exp. Outlook.com offers email aliases).

Moderation is a very time consuming part of community management. Improving the available tools would actually be something of real value. Maybe we could crowd fund it as a community, if there is interest. As a non-profit our financial resources are very limited, but with allies we could pull something off.

1 个赞

see Build a browser fingerprinting plugin

1 个赞

A neat feature would be to require SMS verification on registration. So one phone number per account. A new mobile phone number is way harder to get than another mailbox.

Not really. There once was a time that I created digital ocean and mailgun accounts for my clients and used some app to generate phone numbers to recieve a text. It was tedious, but neither difficult nor expensive.

6 个赞

Tedious would probably put some sort of a speedbump in front of your “bored asshole” types, at least. Can’t imagine phone number verification would ever go into core, though, too much variance in service provider, et al. Probably wouldn’t be hard to build a plugin for it, though, if anyone was feeling frisky.

6 个赞
  • Enable must approve users in settings for all new users. Reject all suspicious sign up that comes from VPN, temp-email or anonymous name.

  • Require restrict approval for all new users.

  • Whitelist certain e-mail providers to avoid chances of using temp-emails.

  • Blacklist those e-mail from which troll is generally coming.

  • Set min trust value for message

image

  • Require approval/Block based on certain offending keywords

  • Blacklist offensive username.

  • Block VPN server IP by AS Num. For example, in screenshot I have shown DO.

  • Ask for legal Identity and Address proof as image URL hosted by them in Sign up form under text field. :fire:

5 个赞

I’ll echo this being something that would be useful in trying to detect, and deal with, banned members coming back as new accounts.

It would be very helpful if the system would flag (simply for attention) mods when/if any account logs in with an IP address that is the same as any other account. A match not just for Registration and Last IP, but for any IP that’s ever been recorded.

Could have whitelist to allow admins to take out IP’s that would result in too many false positives.

But, otherwise, having this sort of automatic notification of common IP address for all IP’s ever recorded for all accounts, would be very helpful in letting mods know which accounts to follow up with special attention.

Very little can be done when a troll is not only motivated enough to keep coming back, but is fastidious enough to cover his tracks meticulously.

But trolls seem to pretty much always slip up at some point.

Currently, it requires mods manually checking Last IP frequently and being lucky enough to catch the IP address commonality in real-time. We catch people like this quite a bit, but I imagine that it’s just the tip of the iceberg.

5 个赞

所以我们目前正面对一个问题用户:他创建虚假账号,被封禁后更换 VPN IP,再注册新邮箱并创建新账号。

我有一个不同的建议,但不确定是否可行:
设置一个选项来屏蔽“匿名”IP 地址,例如来自 VPN 服务的 IP。

Discourse 目前使用 MaxMindDB 进行 IP 查询,而 MaxMindDB 确实提供匿名 IP 数据库。不过,我对 MaxMindDB 的集成并不了解。

如果这能够实现,至少可以阻止用户通过 VPN 掩盖 IP 来创建多个账号,这将大幅减少恶意捣乱行为。

4 个赞

哦,有意思。作为第一步,我们能否在这里显示 MaxMind 是否将该 IP 标记为匿名?@nbianca,能否请您(当然,等您回来后)花 30 分钟看看这是否可行?

不过 @RobinTS,如果您指的是另一个或额外的 MaxMind 数据库,我们不太可能将其引入。我在想,“匿名”是否是现有数据库(如地理位置信息)中的一个标识。

9 个赞

该关联数据库属于付费且需“联系我们”询价的层级,因此我们无法提供。

12 个赞

啊,真遗憾。我也看到过一些可以检查类似内容的 API。我一直在使用 这个 来手动查询新用户的 IP 地址。我相信肯定还有其他更好的选择。不过现在听起来更像是插件的范畴了。

3 个赞

需要指出的是,一些合法用户也会使用 VPN(我不清楚确切比例,但我知道自己通常就是其中之一)。完全屏蔽这些 IP 会对他们产生副作用::confused:

4 个赞

我们之前用 PHP 做过一个小项目,出于市场调研的目的,判断逐字评论是“正面”还是“负面”。这对我们自定义的净推荐值(NPS)结果非常有效。

有没有可能根据新用户使用的语言来对其画像?例如……标记出那些与特定被禁言用户使用某种程度相同语言的用户。

我个人认为这是完全可行的,前提是 用户在合理的时间内输入了足够多的内容。如果他们只发布简短的句子,那就比较困难了。

(请注意,我具体指的是“根据用户使用的词汇、使用频率以及使用顺序,将某个未知用户与现有用户进行匹配”)

3 个赞

Perspective API 插件将自动分析并存储帖子的评分,通过数据探索器查询,您可以获取用户的平均评分,并仅筛选最近的数据。

如果有人尝试此方法并证明成功,我们可以考虑在插件中实现自动化。

6 个赞

正如 @Falco 所说,那是一个付费解决方案。相反,可以使用这些 IP 列表 来封禁 VPN 用户(或者我们可以将其添加到我们的核心中,以识别匿名 IP)。

6 个赞

今天,我登出了 Meta 账户,现在想重新登录(我最初把密码写在了一张纸上,现在把它收好了。我只是想通过复制粘贴登录测试来确认我是否正确输入了密码)。无论如何,我收到了一条消息:“您无法从该 IP 地址以 Mevo 身份登录”(这个 IP 地址我过去几周一直用来发帖,并且刚刚用该 IP 登出了;)。这是通过 VPN 连接的。那么,是否某些 VPN 地址现在被屏蔽了?是整个 Discourse 平台都这样,还是仅 Meta 社区如此?

您的 IP 因某种原因被封锁,可能是因为我们之前在该 IP 地址遇到过用户问题。

5 个赞

好的,但这是一款被大量用户使用的 VPN,因此你也会阻止所有希望通过该 VPN 连接的用户。通过这个简单的例子,可以很好地理解使用 VPN 时容易遇到的一些问题(例如:某个用户做了某些事,导致被众多用户共享的 IP 地址被服务封禁);)