Suspicious notes and users

Concerns? Let us know by posting here.

Moderators: Fons, avij, Phaseolus, dserrano5

User avatar
Phaseolus
Forum Moderator
Forum Moderator
Posts: 13442
Joined: Fri Feb 11, 2005 2:16 pm
Location: Quelque part ou même ailleurs !
Contact:

Post by Phaseolus »

It is quite obvious that mgvaLinden, zwartgeld john123, etc... tries to get a revenge.

The problem is that by getting these hits, it will confuse a lot people that do not join the forum : they will get email notification of hits that will get moderated/deleted soon.

On the other hand : it is very interesting to see how he acts : it will help fighting against fakers in the future

His reaction shows that he is guilty !
Asiamaniac
Euro-Master
Euro-Master
Posts: 2534
Joined: Sun May 26, 2002 12:06 pm
Location: Frankfurt / Main

Post by Asiamaniac »

Yes, and maybe something else: Poor little boy, nobody loves him, nobody has got time for him. All that brightens up his miserable life is making such a nonsense here.

Let's donate him a bit of pity....

But there is always hope, little boy: God loves you, too....
Meine Angst, dass die Autokorrektur einmal etwas Obszönes ausspuckt, wichst täglich.
User avatar
Nomen Nescio
Euro-Expert
Euro-Expert
Posts: 683
Joined: Sat Aug 27, 2005 9:20 pm

Post by Nomen Nescio »

I think Nerzhul should make one tweak to the system though, ie leaving only the form for single note entry available for some probationary time for those people who are caught faking.
User avatar
Nerzhul
Euro-Master
Euro-Master
Posts: 1417
Joined: Tue Apr 27, 2004 12:33 am
Location: Berlin

Post by Nerzhul »

Paulo70, 4065 notes
EBT Webmaster | Author of the EBT-Tool | Dothunter! | EBT News on Twitter
User avatar
alex77r
Euro-Master
Euro-Master
Posts: 2282
Joined: Mon Jul 05, 2004 5:24 pm
Location: London Heathrow (UK)
Contact:

Post by alex77r »

Nomen Nescio wrote:I think Nerzhul should make one tweak to the system though, ie leaving only the form for single note entry available for some probationary time for those people who are caught faking.
That is a good idea, but not easy to apply.

A better solution would be to simply lock the account when we observe hits in serials.
The Shortcodes List/Bilan des Codes-courts recensés - website on stand-by
User Control Panel>Board preferences>Edit global settings>(1) Sélectionnez le thème "Subsilver2" pour avoir une apparence ressemblant à l'ancien forum (2) Forum en français désormais possible!
User avatar
hailtotheking
Euro-Master
Euro-Master
Posts: 1295
Joined: Tue May 10, 2005 9:13 pm
Location: Naaldwijk, Zuid Holland
Contact:

Post by hailtotheking »

alex77r wrote:
Nomen Nescio wrote:I think Nerzhul should make one tweak to the system though, ie leaving only the form for single note entry available for some probationary time for those people who are caught faking.
That is a good idea, but not easy to apply.

A better solution would be to simply lock the account when we observe hits in serials.
Even better (if possible) block his IP-address.

8) HTTK 8)
http://game.desert-operations.nl/?recru ... d=d29ybGQx" onclick="window.open(this.href);return false; <== klik link en speel/Click and play
User avatar
angelita
Euro-Master
Euro-Master
Posts: 3382
Joined: Wed Jan 04, 2006 9:35 pm
Location: Zwaagdijk, The Netherlands

Post by angelita »

hailtotheking wrote:
alex77r wrote:
Nomen Nescio wrote:I think Nerzhul should make one tweak to the system though, ie leaving only the form for single note entry available for some probationary time for those people who are caught faking.
That is a good idea, but not easy to apply.

A better solution would be to simply lock the account when we observe hits in serials.
Even better (if possible) block his IP-address.

8) HTTK 8)
That is exactly what i wrote at the dutch forum! It must not be that hard to do that? I cannot imagine he uses different computers to create his accounts, so in that case the problem will be solved.
member since 2006-01-03
:flag-nl: rank 20
international rank 120
38.833 notes
436 hits (353 :flag-nl: (3 triple), 24 :flag-be:, 14 :flag-de:, 4 :flag-es:, 3 :flag-fi:, 1 :flag-it: 1 :flag-pt: (and 65 more, but moderated)
User avatar
vermeer
Euro-Master
Euro-Master
Posts: 13197
Joined: Tue Jan 11, 2005 2:36 am
Location: Groningen, The Netherlands

Post by vermeer »

So john123 has 2 hits with (the same) 5087 and :note-5: in the serialnumber.
User avatar
helloggs
Euro-Master
Euro-Master
Posts: 1340
Joined: Sat Oct 02, 2004 1:17 pm
Location: Berlin, Germany
Contact:

Post by helloggs »

It is not hard to block his current IP, but it will not have the desired effect. Most IP addresses are dynamic, if you interrupt your current connection and restore it shortly after, your Internet Service Provider will assign you a different address, so if you would want to block this guy forever, you have to block a whole set of addresses, including other people from the same provider/country. Even if he uses a static address, it is very easy to circumvent a block by using a proxy server.
User avatar
Gauss
Forum Moderator
Forum Moderator
Posts: 1685
Joined: Tue Feb 25, 2003 11:35 pm

Post by Gauss »

angelita wrote:
hailtotheking wrote:
alex77r wrote:A better solution would be to simply lock the account when we observe hits in serials.
Even better (if possible) block his IP-address.
That is exactly what i wrote at the dutch forum! It must not be that hard to do that? I cannot imagine he uses different computers to create his accounts, so in that case the problem will be solved.
That is not easy and, depending on the individual case, maybe impossible. I have written a post explaining the problems some time ago in this thread in the context of a different, particularly persistent faker:
Some time ago, Gauss wrote:
daniellez wrote:[My god! Is it not possible to simply block them as soon as they create a new account again?
No, that's not possible.

Lots of new accounts are being created every day. At first, all look the same. Hence &nbsp; (I'll keep that name for simplicity) has to do something before it can be realized that it's really him again.

He can use the same email address only once for a registration: No two accounts can have the same mail address. However, it is very easy to obtain new email addresses, e.g., from hotmail.com, yahoo.com, gmail.com, or a similar provider. We cannot guess in advance which mail address he's going to use next. Therefore he can't be blocked from creating an account based on the mail address.

What can be blocked, and is blocked as soon we get aware of it, is the IP address (something like 195.128.2.97, for example). Each computer that is connected to the internet has such an address, and (slightly simplifying) at any point of the time, each IP address belongs to only one computer. However, there are workarounds even for not very experienced abusers (and &nbsp; is everything but that). The easiest idea is to simply use a different computer; some are publicly available (internet cafes). The IPs are assigned by the internet provider; therefore switching to a different provider produces the same effect as using a different computer. Dial-in providers often assign the IP addresses randomly, so disconnecting and reconnecting may be another way to obtain a fresh, unblocked IP address.

All such blocking has to be done manually. Moreover, particularly dial-in IPs cannot be blocked indefinitely because legitimate users may be assigned right the blocked IP because they happen to use the same provider. The same holds for large domains that could be blocked, e.g., all computers at a certain university, or even from a certain country.

You see that blocking the account would be a rather stupid thing to do for us because
1) we know about the existing accounts (&nbsp;, _&nbsp;, centless_dreamer, clodhopper) that they are his. So all alarms will go off as soon as anyone logs on using one of these accounts.
2) we can't keep him from registering a new account.
Summarising, I would like to point out more clearly that it is impossible to block an individual computer - unless it uses always the same IP address, but this cannot be expected.
User avatar
Nomen Nescio
Euro-Expert
Euro-Expert
Posts: 683
Joined: Sat Aug 27, 2005 9:20 pm

Post by Nomen Nescio »

@Gauss & Co:

That's the very reasons why I did suggest the usage of a probation period with access only to the single note entry form for a faker after the removal of faked entries.

If the faker has learned from having all false entries removed and turns honest, good, but if the faker continues as this current sorry case does, he would have to use a lot of time entering codes one by one, only to have these deleted at a later time and thus having to comply with the fact that all the time spent entering codes one by one was spent in vain :twisted:

Since blocking a single IP-address ain't effective and as Gauss did point out, locking out an account is neither a good option, this would be a way to reduce the effects of faking. And the entries of a faker's account could be analyzed before restoring full access to see wether the user is a former-faker-turned-honest or still faking.
User avatar
helloggs
Euro-Master
Euro-Master
Posts: 1340
Joined: Sat Oct 02, 2004 1:17 pm
Location: Berlin, Germany
Contact:

Post by helloggs »

Get a new account, enter 50 notes in the simple form and one has the advanced form again.
User avatar
vermeer
Euro-Master
Euro-Master
Posts: 13197
Joined: Tue Jan 11, 2005 2:36 am
Location: Groningen, The Netherlands

Post by vermeer »

Fall into their old habit and get caught once again. Loss their banknotes and start all over again.
User avatar
Nerzhul
Euro-Master
Euro-Master
Posts: 1417
Joined: Tue Apr 27, 2004 12:33 am
Location: Berlin

Post by Nerzhul »

The only option we have when dealing with fakers is to be more efficient than them. This means that it should take us less time to clean up their mess than it takes them to enter faked data.

We are on a good way, but not quite there yet. We already have all kinds of scripts to easily delete notes, hits and users with a few mouseclicks. (This has not always been this way!)

The only thing that takes time at the moment are the investigations and the notification of the concerned user. Unfortunately especially the investigations sometimes take a long time ... and remember, avij and I are investing our spare time into EBT, so when chunks of this valuable time are consumed by fakers this feels bitter and "wasted".

Some of these steps can and will be further automated in the future, but I can't say when since my life is rather busy at the moment. In the long run our goal is to have an automatic crawler script (maybe even a neural network) checking the validity of the note data which will warn us about possible fakers and suggest and prepare a solution which can be handled with a single mouseclick.
EBT Webmaster | Author of the EBT-Tool | Dothunter! | EBT News on Twitter
User avatar
vermeer
Euro-Master
Euro-Master
Posts: 13197
Joined: Tue Jan 11, 2005 2:36 am
Location: Groningen, The Netherlands

Post by vermeer »

What i think of is this. Fakers are not members of our forum, but still can view our messages. But i like to hear their side of the story. Why do they do it (it is so easy to do?). Do they hate us and try to throw sand in our eyes. There is more to this than i mentioned, but i also have other thing to do than just EBT. Yes, i have also to work.
Post Reply

Return to “Feedback and Development”