Bots phishing in phabricator

[real_tabasco_sauce]

There are a lot of bots recently making comments copied from other comments adding a link at the end. See below for an example. A lot of them are very similar.

Don't click the link. Hopefully all these accounts can be removed and their comments too.

Edited September 28, 2023 by real_tabasco_sauce

[Norse_Harold]

A lot of this has already been reported by Elexis and me to the only two people who can remove the spam: Stan and Itms. Both are on something like extended unannounced hiatus right now. More people need to ask them when they plan to resume activity or delegate authority to people who are active, I suppose.

Edited September 28, 2023 by Norse_Harold

[BreakfastBurrito_007]

maybe change the name to "fabricator" and they will go back to normal fishing 

[real_tabasco_sauce]

yeah this was meant as a psa.

3 hours ago, Norse_Harold said:

Both are on something like extended unannounced hiatus right now.

I haven't heard from @wraitii either, hopefully nothing has gone wrong.

[chrstgtr]

15 hours ago, Norse_Harold said:

A lot of this has already been reported by Elexis and me to the only two people who can remove the spam

Elexis is back?

[Norse_Harold]

On 29/09/2023 at 2:57 AM, chrstgtr said:

Elexis is back?

He messages me from time to time with a reaction to something I've written on the forum or IRC, or to inform me of spam on the forum or Phabricator. Sometimes he will tell a story about the history of conflict in the WFG dev team or provide feedback on some source code that I've written. He isn't "back". He has told me that he will never do work for WFG again. Apparently he considers the information he sends me to not be defined as "work" for WFG, which is good because I consider the information that he sends to be defined as helpful. He's probably reading this right now, so hi Elexis.  :-)

I imagine that he would respond to this similarly to the most recent conversation with him, where he said, "ignorance is bliss"...

Edited October 2, 2023 by Norse_Harold

[wowgetoffyourcellphone]

Elexis is a ghost among us. Gone, but here. 

[vladislavbelov]

On 28/09/2023 at 4:33 AM, real_tabasco_sauce said:

Don't click the link. Hopefully all these accounts can be removed and their comments too.

I'll remove such users.

[chrstgtr]

5 hours ago, wowgetoffyourcellphone said:

Elexis is a ghost among us. Gone, but here. 

The past is never dead. It is not even the past

[rossenburg]

Similar to the main forums, why don’t we use captcha in the login form? There’s at least 5-10 spam bots every single day.

[chrstgtr]

8 hours ago, Norse_Harold said:

He messages me from time to time with a reaction to something I've written on the forum or IRC, or to inform me of spam on the forum or Phabricator. Sometimes he will tell a story about the history of conflict in the WFG dev team or provide feedback on some source code that I've written. He isn't "back". He has told me that he will never do work for WFG again. Apparently he considers the information he sends me to not be defined as "work" for WFG, which is good because I consider the information that he sends to be defined as helpful. He's probably reading this right now, so hi Elexis.  :-)

I imagine that he would respond to this similarly to the most recent conversation with him, where he said, "ignorance is bliss"...

I used to complain about how Elexis handled things from time to time. Looking back in it, Elexis did a great job and was under appreciated 

Edited October 2, 2023 by chrstgtr

[wowgetoffyourcellphone]

1 hour ago, kozarets said:

I think bots phishing in phabricator is a serious problem that needs to be addressed as soon as possible. Phishing bots are malicious users who create fake accounts and post comments with links to scam websites or malware. They can harm the reputation of the project, the security of the users, and the quality of the feedback. To protect against bots phishing in phabricator, I suggest the following measures: - Require email verification for new accounts - Implement a captcha or other anti-spam mechanism for posting comments - Monitor and report suspicious activity and accounts - Educate users about how to identify and avoid phishing links

Ironically, this reads like ChatGPT 

[Lion.Kanzen]

1 hour ago, kozarets said:

I think bots phishing in phabricator is a serious problem that needs to be addressed as soon as possible. Phishing bots are malicious users who create fake accounts and post comments with links to scam websites or malware. They can harm the reputation of the project, the security of the users, and the quality of the feedback. To protect against bots phishing in phabricator, I suggest the following measures: - Require email verification for new accounts - Implement a captcha or other anti-spam mechanism for posting comments - Monitor and report suspicious activity and accounts - Educate users about how to identify and avoid phishing links

Did you use chatgpt?

[Norse_Harold]

1 hour ago, wowgetoffyourcellphone said:

Ironically, this reads like ChatGPT 

It probably was made by ChatGPT. Also, kozarets modified the quoted text and added an advertisement and link to a third party commercial website. I've banned kozarets as a spammer.

[real_tabasco_sauce]

They are evolving.

[Lion.Kanzen]

7 minutes ago, real_tabasco_sauce said:

They are evolving.

It's the same thing they do in the forums.

Use ai or a convenient scripts.