Some new spam bots appeared, which are intelligent enough to optimise for Discourse’s built-in spam filters. They first make a comment without any links, and later on they’ll edit and add the link. Discourse doesn’t catch them this way. For example the following revision: [Developer%20API%20docs%2…

[画像] codinghorror: These are not bots, they are humans. That’s been my impression too. It’s borne out in a variant of the technique described in the OP that we’ve seen. In this case the spammer “replies” to a comment and uses the Discourse quote feature to copy some of the other person’s text…

I’ve just noticed that spammers have been posting legitimate looking posts and then going back a few weeks later to insert links to things like [free netflix] and [tech news]. Is there any way to prevent the insertion of links on all edits by something like below TL3? Even blocking the insertion of…

[画像] j127: spammers have been posting legitimate looking posts and then going back a few weeks later to insert links to things like [free netflix] and [tech news]. The first step is to tighten up your allowed editing interval in post edit time limit from the default to something like one day.…

I’m changing the setting tonight, but I’m hoping that there is another way, since that would probably annoy some users. People tend to be more cautious about speaking freely if they know they they can’t go back and edit things later. (I don’t post as often in forums that lock the editing and am gene…

[画像] j127: Ideally, I like unlimited editing windows, and every edit bumps the topic. This is tricky, cause post #12 could be edited in a 40 post topic, if we bump the topic for that it would be incredibly surprising to see it. You would have to scroll through every post. I think one alterna…

[画像] j127: Ideally, I like unlimited editing windows, and every edit bumps the topic. Why? Coming back “weeks later” to edit something is highly anomalous. And you can make things wiki if you want to signal that they are especially editable. There’s a nice middle ground of “a few days” you ca…

[画像] sam: Another alternative might be to give TL2 and up longer edit time limits. That might be useful. For the moment, I’ve changed the trust levels required to add links and edit posts and made it a little harder to reach TL1. The last spam post I saw wasn’t the usual obvious spammer — i…

I just remembered that there is a post webhook for “when there is a new reply, edit, deleted or recovered.” I didn’t check yet, but if I can get the action (“edited”) out of the header, then I can write a script to post those into an external dashboard for manual review. That would solve it on my si…

[画像] j127: Sometimes people feel like they might have said something that they didn’t want to say, and they want to remove it. If it’s over the 30 day (or 1 day, whatever you have it set to) limit, they could flag it for removal.

[画像] j127: Edit: I’m looking at one spammer’s post, and it looks completely legitimate and on-topic. There is no clue that it’s a spammer, except for the injected links. You may find the sibling topic Human-driven copy-paste spam informative if you’re not following it yet. This form of spam o…

スパムボットによる編集でDiscourseフィルターを騙す手口

サポート

rimian (Rimian Perkins) 2019 年 9 月 9 日午後 10:30 27

はい、昨日その修正を行いました。ご迷惑をおかけして申し訳ありません！次回からはより良くなります

こちらが修正内容です：

トピック		返信	表示
Human-driven copy-paste spam Community Building	54	9316	2025 年 7 月 24 日
Users editing spam links into their posts after a delay Community Building	15	2031	2019 年 11 月 26 日
People editing posts into spam Support	13	1464	2019 年 11 月 20 日
Editing Old Posts and Adding Links Doesn't Alert Anybody Feature	23	7813	2014 年 10 月 7 日
Free to edit post at any time Feature	33	15634	2023 年 5 月 22 日

スパムボットによる編集でDiscourseフィルターを騙す手口

関連トピック