Things you didn't notice were broken are fixed

Announcements that go here will appear on the front page.

Moderators: Bob the Hamster, marionline, SDHawk

Post Reply
User avatar
Mogri
Super Slime
Posts: 4668
Joined: Mon Oct 15, 2007 6:38 pm
Location: Austin, TX
Contact:

Things you didn't notice were broken are fixed

Post by Mogri »

If you're reading this, there's an excellent chance you weren't using this functionality, but it's good news all the same:
  • Forgot password form. If you forgot your password previously, you basically had to figure out my email address.
  • New user registration. Registration is admin-locked to limit spambottery; if you register, you need admin approval before you can post. I changed this setting in June and didn't notice that I broke user registration completely (because, guess what, I don't register for a new account very often).
Huge thanks to TMC for bringing these issues to my attention.
User avatar
Bob the Hamster
Lord of the Slimes
Posts: 7658
Joined: Tue Oct 16, 2007 2:34 pm
Location: Hamster Republic (Ontario Enclave)
Contact:

Post by Bob the Hamster »

Is there a specific way they are supposed to ask for activation? Most if the spambot names look like spambot names, but out of the flood of account mail this morning one or two of them looked somewhat plausible

Also, I accidentally activated user "Jessicagek" because I thought clicking the link would show me a profile, rather than just instantly activating
User avatar
Mogri
Super Slime
Posts: 4668
Joined: Mon Oct 15, 2007 6:38 pm
Location: Austin, TX
Contact:

Post by Mogri »

I've added a filter so that usernames matching [a-z]+[0-9]{4} don't make it to our inboxes.

There's no procedure for this, but I can add a field to the registration form asking the user to explain why they are creating an account (or something along those lines) and add it to the email. I think that would make things easier.

For now, I'll add the user's email address to the email. That will probably be useful in determining if an applicant is human.
User avatar
Spoonweaver
Liquid Metal King Slime
Posts: 6461
Joined: Mon Dec 08, 2008 7:07 am
Contact:

Post by Spoonweaver »

It's like Slimesalad is an exclusive club now.
User avatar
Bob the Hamster
Lord of the Slimes
Posts: 7658
Joined: Tue Oct 16, 2007 2:34 pm
Location: Hamster Republic (Ontario Enclave)
Contact:

Post by Bob the Hamster »

I like the idea if a text field where they can say something about why they are creating an account. Half the spammers will skip it, the other half will paste their spam links directly into it :)
TMC
Metal King Slime
Posts: 4308
Joined: Sun Apr 10, 2011 9:19 am

Post by TMC »

From my experience picking through spambot accounts registering on Castle Paradox, virtually always they're easily identified by looking at the account name and email address, and considering the other profile fields too lets you be sure. But there seem to be very few spammers who make it through the captcha, who then register lots of bots, so there's not that much variety, and I guess each website would see different patterns.
Often they would not put a spam link in their profile when they register, but come back and do it later.
Last edited by TMC on Tue Jan 01, 2019 9:17 pm, edited 1 time in total.
Post Reply