Re: [Mediawiki-l] spam attack avoids captcha

2011-03-19 Thread Steven Dick
On Wed, Mar 16, 2011 at 8:15 PM, Daniel Friesen wrote: [...] > Sure enough after a bit I started seeing the same spam, > Perhaps it is a bit draconian, but on my wiki, when I get spam, I use checkuser to get their ip. I block their whole /24 subnet. I then go look at the spam they left me, and

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-18 Thread Marcin Cieslak
>> Kay Diederichs wrote: > I found that > To:gmail.com REJECT > (with one or multiple tabs where the blank appears in the line above) > seems to work well when appended to /etc/mail/access which is used by > sendmail on my CentOS-5.5 machine. Nota bene: only wikis are on this > machine, so it's

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-18 Thread Kay Diederichs
Am 17.03.2011 22:06, schrieb Platonides: > Daniel Friesen wrote: >> The spammers haven't coded the bots to handle QuestyCaptcha yet, but if >> people start using it to stop them, then they will code it into the bot. > > Questy captcha is a free form question. You can't learn how to bypass > a

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-17 Thread Platonides
Daniel Friesen wrote: > The spammers haven't coded the bots to handle QuestyCaptcha yet, but if > people start using it to stop them, then they will code it into the bot. Questy captcha is a free form question. You can't learn how to bypass any instance of it. Not even a human would be able to b

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread Daniel Friesen
On 11-03-16 04:35 PM, Frederick Grose wrote: > On Wed, Mar 16, 2011 at 6:50 PM, Hiram Clawson wrote: > >> What prevents the black hat google spammers from creating OpenID accounts ? >> >> --Hiram >> >> Frederick Grose wrote: >>> Install >>> http://www.mediawiki.org/wiki/Extension:OpenID >>> and di

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread Frederick Grose
On Wed, Mar 16, 2011 at 6:50 PM, Hiram Clawson wrote: > What prevents the black hat google spammers from creating OpenID accounts ? > > --Hiram > > Frederick Grose wrote: > > Install > > http://www.mediawiki.org/wiki/Extension:OpenID > > and disable new account creation, instead, redirect users t

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread Hiram Clawson
What prevents the black hat google spammers from creating OpenID accounts ? --Hiram Frederick Grose wrote: > Install > http://www.mediawiki.org/wiki/Extension:OpenID > and disable new account creation, instead, redirect users to the OpenID > account page, > Special:OpenIDLogin. _

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread 2...@gmaskfx.com
wiki-l] spam attack avoids captcha > To: "MediaWiki announcements and site admin list" > > Date: Wednesday, March 16, 2011, 11:47 AM > Try QuestyCaptcha*. It has been > stopping spammers on my wiki that > reCaptcha failed to. > > * http://www.mediawiki.org/w

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread roger
Try QuestyCaptcha*. It has been stopping spammers on my wiki that reCaptcha failed to. * http://www.mediawiki.org/wiki/ConfirmEdit#QuestyCaptcha Roger TEFLChina.org, wiki for teachers of English as a foreign language in China ___ MediaWiki-l mailing li

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread Frederick Grose
On Wed, Mar 16, 2011 at 1:45 AM, Chris Lewis wrote: > Yes I have the same problem. So annoying. Are humans confirming the emails > as > well? > > I have captcha, email confirmation and the SpamBlacklist extension and i'm > still > getting spammed every day for the last week. They keep making new a

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-15 Thread Sarel Wessels (Agri Wiki)
At this stage I've blocked the function for users to create accounts themselves... They complete a form on the website, and I receive an email, then I create the account for them. Before I create the account, I normally contact them to determine if they are a genuine prospective users... It see

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-15 Thread Chris Lewis
Yes I have the same problem. So annoying. Are humans confirming the emails as well? I have captcha, email confirmation and the SpamBlacklist extension and i'm still getting spammed every day for the last week. They keep making new accounts every day. What can I do since they are bypassing all

Re: [Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Phil Howard
On Wed, Jul 28, 2010 at 14:15, Brion Vibber wrote: > There are service firms > that simply employ lots of people to type in captchas on your spambot's > behalf. A number of porn sites work this way. When someone tries to access the freebie section of a porn site, they see a captcha. It's copie

Re: [Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Brion Vibber
On Wed, Jul 28, 2010 at 9:11 AM, Hiram Clawson wrote: > Good Morning MediaWiki Fans: > > Our wiki site suffered a spam attack this weekend. (version 1.13.0) The > attack evidently > had some method to work-around the new account Captcha barrier, and the > authorized user email allowed to edit s

Re: [Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Benjamin Lees
On Wed, Jul 28, 2010 at 12:11 PM, Hiram Clawson wrote: > Our wiki site suffered a spam attack this weekend.  (version 1.13.0)  The > attack evidently > had some method to work-around the new account Captcha barrier, and the > authorized user email allowed to edit setting. Which CAPTCHA plugin ar

Re: [Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Frederick Grose
On Wed, Jul 28, 2010 at 12:11 PM, Hiram Clawson wrote: > Good Morning MediaWiki Fans: > Our wiki site suffered a spam attack this weekend. (version 1.13.0) The > attack evidently had some method to work-around the new account Captcha barrier, and the authorized user email allowed to edit se

[Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Hiram Clawson
Good Morning MediaWiki Fans: Our wiki site suffered a spam attack this weekend. (version 1.13.0) The attack evidently had some method to work-around the new account Captcha barrier, and the authorized user email allowed to edit setting. I'm curious if anyone else has encountered such attacks a