Spam intruder?

Come here to read our policies, ask questions, make suggestions, or find out the latest news about the B-Greek forum.
Post Reply
Eeli Kaikkonen
Posts: 412
Joined: June 2nd, 2011, 7:49 am
Location: Finland
Contact:

Spam intruder?

Post by Eeli Kaikkonen » October 23rd, 2018, 12:31 pm

I use Feedly feed reading service for this forum. I just got this:
Screenshot_20181023_192242.png
Screenshot_20181023_192242.png (45.13 KiB) Viewed 491 times
Notice the spam. It's not seen when I open the forum. But someone may have intruded into the system somehow, maybe there's some weakness is some forum software update?
0 x



Jonathan Robie
Posts: 3492
Joined: May 5th, 2011, 5:34 pm
Location: Durham, NC
Contact:

Re: Spam intruder?

Post by Jonathan Robie » October 23rd, 2018, 1:53 pm

Bother.

Someone has managed to insert text into the Atom feed (see http://ibiblio.org/bgreek/forum/app.php/feed). You won't see it on the forum itself, only in an RSS/Atom feed. If you are just reading B-Greek in a browser, this problem probably won't affect you at all.

I just raised this issue on the phpBB forum (https://www.phpbb.com/community/viewtop ... #p15117141), they are usually fairly responsive. Thanks for catching this!
0 x
ἐξίσταντο δὲ πάντες καὶ διηποροῦντο, ἄλλος πρὸς ἄλλον λέγοντες, τί θέλει τοῦτο εἶναι;
http://jonathanrobie.biblicalhumanities.org/

Jonathan Robie
Posts: 3492
Joined: May 5th, 2011, 5:34 pm
Location: Durham, NC
Contact:

Re: Spam intruder?

Post by Jonathan Robie » October 23rd, 2018, 2:11 pm

Someone pointed out that the text is in the original post, just very, very small.

It's gone now, I edited it out. I'm trying to figure out how the text got there in the first place.
0 x
ἐξίσταντο δὲ πάντες καὶ διηποροῦντο, ἄλλος πρὸς ἄλλον λέγοντες, τί θέλει τοῦτο εἶναι;
http://jonathanrobie.biblicalhumanities.org/

Jonathan Robie
Posts: 3492
Joined: May 5th, 2011, 5:34 pm
Location: Durham, NC
Contact:

Re: Spam intruder?

Post by Jonathan Robie » October 23rd, 2018, 2:16 pm

OK, it should have been obvious.

Mark Miller seems to be a spam account. He simply typed the text into his post, using a very small font that cannot be seen normally. His account has now been banned.

Thanks, Eeli!
0 x
ἐξίσταντο δὲ πάντες καὶ διηποροῦντο, ἄλλος πρὸς ἄλλον λέγοντες, τί θέλει τοῦτο εἶναι;
http://jonathanrobie.biblicalhumanities.org/

Barry Hofstetter
Posts: 1337
Joined: May 6th, 2011, 1:48 pm

Re: Spam intruder?

Post by Barry Hofstetter » October 24th, 2018, 11:40 am

This was my fault. I approved the person, and never saw that. The funny thing was that it activated my "this could be a spammer instinct" but because he gave a real sounding name, I thought I would give him the benefit of the doubt. I shall never ignore my spidey-sense again.
0 x
N.E. Barry Hofstetter
Instructor of Latin
Jack M. Barrack Hebrew Academy
Χαίρετε ἐν κυρίῳ πάντοτε· πάλιν ἐρῶ, χαίρετε

Jonathan Robie
Posts: 3492
Joined: May 5th, 2011, 5:34 pm
Location: Durham, NC
Contact:

Re: Spam intruder?

Post by Jonathan Robie » October 24th, 2018, 12:05 pm

Barry Hofstetter wrote:
October 24th, 2018, 11:40 am
This was my fault. I approved the person, and never saw that.I don't think it's really your fault. This kind of thing can happen easily. The funny thing was that it activated my "this could be a spammer instinct" but because he gave a real sounding name, I thought I would give him the benefit of the doubt. I shall never ignore my spidey-sense again.
It's actually easy to see when someone does this if you are suspicious. Moderators can simply open the post up in an editing window, or anybody can reply to the post to see it in plain text.

You can practice with this post - I hid some text in it.
0 x
ἐξίσταντο δὲ πάντες καὶ διηποροῦντο, ἄλλος πρὸς ἄλλον λέγοντες, τί θέλει τοῦτο εἶναι;
http://jonathanrobie.biblicalhumanities.org/

Barry Hofstetter
Posts: 1337
Joined: May 6th, 2011, 1:48 pm

Re: Spam intruder?

Post by Barry Hofstetter » October 24th, 2018, 2:50 pm

Jonathan Robie wrote:
October 24th, 2018, 12:05 pm
Barry Hofstetter wrote:
October 24th, 2018, 11:40 am
This was my fault. I approved the person, and never saw that.I don't think it's really your fault. This kind of thing can happen easily. The funny thing was that it activated my "this could be a spammer instinct" but because he gave a real sounding name, I thought I would give him the benefit of the doubt. I shall never ignore my spidey-sense again.
It's actually easy to see when someone does this if you are suspicious. Moderators can simply open the post up in an editing window, or anybody can reply to the post to see it in plain text.

You can practice with this post - I hid some text in it.
Hmmm... very clever of the little orcs to be able to do that. They won't slip it past me again. Grrr.
0 x
N.E. Barry Hofstetter
Instructor of Latin
Jack M. Barrack Hebrew Academy
Χαίρετε ἐν κυρίῳ πάντοτε· πάλιν ἐρῶ, χαίρετε

Jacob Rhoden
Posts: 145
Joined: February 15th, 2013, 8:16 am
Location: Greenville, South Carolina
Contact:

Re: Spam intruder?

Post by Jacob Rhoden » October 24th, 2018, 8:14 pm

Jonathan Robie wrote:
October 24th, 2018, 12:05 pm
It's actually easy to see when someone does this if you are suspicious. Moderators can simply open the post up in an editing window, or anybody can reply to the post to see it in plain text.

You can practice with this post - I hid some text in it.
The silliest part of this, is that Google crawlers actually detect when text is not visible (hidden, too small, moved off the side of the page, etc....) and ignore (and possibly penalise) such behaviour. Ignorance on the part of spammers is clear.

That said, it is worth being aware that spammers could hack an existing account and insert hidden advertisements into legitimate accounts.
0 x

Jonathan Robie
Posts: 3492
Joined: May 5th, 2011, 5:34 pm
Location: Durham, NC
Contact:

Re: Spam intruder?

Post by Jonathan Robie » October 25th, 2018, 5:54 am

Jacob Rhoden wrote:
October 24th, 2018, 8:14 pm
That said, it is worth being aware that spammers could hack an existing account and insert hidden advertisements into legitimate accounts.
I don't know that they can. That's not what happened here.

I think the more common pattern is to come in, establish an account, then quote someone and insert invisible text with links into that quote. People have seen that on other forums. That's what just happened here.
Jacob Rhoden wrote:
October 24th, 2018, 8:14 pm
The silliest part of this, is that Google crawlers actually detect when text is not visible (hidden, too small, moved off the side of the page, etc....) and ignore (and possibly penalise) such behaviour. Ignorance on the part of spammers is clear.
I imagine someone, perhaps in some third world country, is getting paid for every link they create to a product they want to promote. These links can't be clicked on, and Google may not index them, but as long as someone is paying, that may not matter to the spammer.

I don't there was anything dangerous about this spam. I have looked in the feeds briefly and didn't see other examples, but I will look more deeply to see if this has happened in the past.
0 x
ἐξίσταντο δὲ πάντες καὶ διηποροῦντο, ἄλλος πρὸς ἄλλον λέγοντες, τί θέλει τοῦτο εἶναι;
http://jonathanrobie.biblicalhumanities.org/

Post Reply