Forum posting update

Hey all,

As some of you know, we’ve been under a spam barrage for about 10 or 11 days now. We were also all-out attacked mid-week last week, but before and since then, we see spammers creating accounts in real-time and posting bogus forum posts with malicious links. This is taking up hours of my time each day. Brad has helped out as well, and I can’t even count now how many we’ve deleted. Hundreds of accounts and posts, easily.

To combat this in a more permanent way, we’ve temporarily turned off the ability to post to the forums. So these spammers will continue to create accounts and post to the forums, but those posts will never display. The obvious side-effect to this, of course, is that no one else can create a new forum post right now either. Sorry about that, but we should be back on Monday. And sometime Monday, we’ll implement a system whereby first-time posters are moderated so their posts don’t appear before being approved (by me, I guess). All other forum posts will appear normally, so if you already have an account and have been posting, you’ll be good to go.

Sorry for the inconvenience.

And, please. If you’re having some other technical problem or see a bug you want to be fixed or whatever, please do not leave that feedback here or in any other forum post. Please email [email protected] so a support ticket is created and the right people can take care of it.

Thanks,

 

Paul

Conversation 15 comments

  • bkkcanuck

    13 June, 2021 - 9:21 pm

    <p>Sorry that the spammers are causing issues for you, but thanks for the update and the work you are putting in to mitigate the situation. </p>

  • locust_infested_orchard_inc.

    13 June, 2021 - 9:49 pm

    <p>Surely it would be far more lucrative for these spammers to engage in ransomware attacks than to persist with wasting your time Paul, in deleting their posts. So obviously these spammers are low-tech criminals with seemingly unlimited free time.</p><p><br></p><p>Have you considered implementing CAPTCHA for new members, as well as those with less than a certain number of posts, in order for them to comment ? That would surely frustrate the spammers and slow them immensely ? (that said the spammers may well employ bots or cheap human labour to correctly respond to the CAPTCHA challenge).</p><p><br></p><p><br></p>

    • wright_is

      Premium Member
      14 June, 2021 - 3:49 am

      <p>They have to get the ransomware (or other malware) on users’ machines somehow. Malware infested links from known-good forums is one way of doing that.</p>

      • Paul Thurrott

        Premium Member
        14 June, 2021 - 8:45 am

        Yep.

    • wright_is

      Premium Member
      14 June, 2021 - 3:50 am

      <p>Also, I’ve been having to go through a Cloudflare CAPTCHA system to view the site over the weekend, I think once on my PC and twice on my smartphone.</p>

    • lvthunder

      Premium Member
      14 June, 2021 - 10:40 am

      <p>You are assuming it is actual people making these posts. It’s more likely that it’s completely automated.</p>

  • Truffles

    14 June, 2021 - 3:19 am

    <p>I’ve noticed those posts. I assume by your solution that it isn’t possible to disable account creation for the duration (however long that might be)?</p>

    • Truffles

      14 June, 2021 - 3:22 am

      <p>oh wait, I seem to be able to post about Paul’s post about posts being disabled.</p>

  • wright_is

    Premium Member
    14 June, 2021 - 3:48 am

    <p>I’m guessing the attack was also the reason why Cloudflare keeps asking me, if I am a human, before letting me onto the site.</p>

    • Paul Thurrott

      Premium Member
      14 June, 2021 - 7:36 am

      <p>Yes. Sorry. </p>

      • wright_is

        Premium Member
        14 June, 2021 - 8:37 am

        <p>No problem. It is a little annoying, but understandable, given the current situation.</p><p><br></p><p>It wasn’t thurrott.com that caused Cloudflare to go down on Friday was it? :-D</p>

  • dmclaurin

    14 June, 2021 - 11:02 am

    <p>I suffered the same issue on my forum, and I resorted to the same strategy. It worked, so it will also work here :)</p>

  • bob_shutts

    14 June, 2021 - 12:37 pm

    <p>Sorry this is happening to the site! It seems that what you’re doing is the only course of action.</p>

  • harmjr

    Premium Member
    15 June, 2021 - 2:19 pm

    <p>Maybe you can do something like joining a facebook group having the person answer some questions that are unique to Thurrott.com etc. </p><p><br></p><p><br></p>

    • samp

      15 June, 2021 - 5:29 pm

      <p>Not everyone has a Facebook account.</p>

Windows Intelligence In Your Inbox

Sign up for our new free newsletter to get three time-saving tips each Friday

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

Thurrott © 2024 Thurrott LLC