robbat2: (Default)

I apologize for doing this, but recent onslaught of spammers (~35 in the last 5 days) have left me with no choice: I've changed comments from non-friends to be screened by default AND require a captcha.

robbat2: (Default)

Since I posted 15 hours ago, I've gotten another 6 spam comments from the same algorithm.

[livejournal.com profile] rachelutejy
[livejournal.com profile] wendyfidaz
[livejournal.com profile] victoriahuder
[livejournal.com profile] kellyqubym
[livejournal.com profile] devenydylom
[livejournal.com profile] hannahowyve
An interesting further trend I noticed on them: Given the same comment input body, they post the identical text, further lending credence to the concept that it's an automatic system.
Original:
Seems like I'm out of luck? This will greatly hamper anything which I want to do with the data.
Spammer:
If I wanted to store my data on the user's drive or on a server, though, I'm pretty-much out of luck.
The spammer's source for the sentence was:
http://www.gamedev.net/features/reviews/productreview.asp?productid=613
robbat2: (Default)

I'm not sure what's with the sudden wave of spammers hitting livejournal. However they are using some smarted behavior now.

They came to my attension as their spam engines are taking some comments or posts, using them as input data for google, and then using the google results for posting their comment. it's statistical noise, but it's exactly similar to the input noise, so it's beating Bayesian analysis as well.

Real:
There is, really, no difference between people stuck in poverty, unless it's a matter of degrees.
Spammer:
It's a matter of degrees, and while I think those degrees matter let's not pretend lawful companies are much better.
From a discussion about LDAP lookup failures:
Real:
There is actually a user and group for trousers. Also gentoo tends to like certain id/groups as certain UID/GID. If that group is used it will then user the next available GID/UID. Sometimes through later upgrades this becomes an issue. Usually badly written ebuilds. That is why I let the script make it.
Spammer:
Of course, not all, but many ebuilds are plainly badly written or gives bad implementations. One example, I update my OpenLDAP setup.

Yesterday:
[livejournal.com profile] gemmawasyl
[livejournal.com profile] dorottyaniqof

In a wave, over the last 3 hours:
[livejournal.com profile] amandafedij
[livejournal.com profile] bridgetuhimo
[livejournal.com profile] kaileymuseq
[livejournal.com profile] katyajuxek
[livejournal.com profile] annabellehusiq

Patterns:

They have a single post, with a large block of filler text from somewhere totally random. Followed by a bunch of links with pornish titles, and matching the following pattern:
RANDOM = appears to be foreign dictionary words
CC = belgique, espana, france, quebec, suissse
TLD = .com, except for espana, which is under .es
WORDS = title words for porn stuff, no spaces
http://${RANDOM}.i${CC}.${TLD}/${WORDS}.html

robbat2: (Default)
I filed a support request here
http://www.livejournal.com/support/see_request.bml?id=667981

However I'm interested to hear if anybody else has seen the same issue.

In short, are you reciving email for comments on posts in your livejournal?
I'm recieving all the email EXCEPT for comments on my posts :-(.

May 2017

S M T W T F S
 123456
78910111213
141516171819 20
21222324252627
28293031   

Syndicate

RSS Atom

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags