http://forums.llamaslayers.net/tags/spam Just another awesome bbPress community en-US Sat, 31 Jul 2010 12:54:02 +0000 http://bbpress.org/?v=1.0.2 q http://forums.llamaslayers.net/search.php http://forums.llamaslayers.net/topic/the-worst-mistake-of-my-career#post-7985 Fri, 01 Jan 2010 17:24:01 +0000 Ben L. 7985@http://forums.llamaslayers.net/ <p>A few months ago, I released a plugin called Project Honey Pot for bbPress. It incorporated a project called <a href="http://www.projecthoneypot.org/?rf=59295">Project Honey Pot</a> into <a href="http://bbpress.org/">bbPress</a>, allowing data from millions - <a href="http://www.projecthoneypot.org/1_billionth_spam_message_stats.php">just recently, over a billion</a> - of spam messages caught by <a href="http://www.projecthoneypot.org/statistics.php">millions of spam traps</a> to be used against spammers trying to register on bbPress forums.</p> <p>The idea was simple - the IP address of a spammer is given to the Project Honey Pot servers, which then sends back an answer containing whether the IP belongs to a spammer, and if so, what kind of spammer, when the IP was last seen spamming, and how dangerous the spammer was.</p> <p>This was all made possible by a Project Honey Pot service called http:BL, a DNS blacklist. The plugin itself worked - I could force it to block me from a forum by changing a line of code - and the service worked.</p> <p>The problem went undiscovered for a few months, mainly because I had no reason to test the plugin, and also because there was no way to prove that it was working outside of testing the individual parts.</p> <p>Then, I finally found it when I added a new feature - a simple counter of the spammers that it had blocked.</p> <p>I tested the plugin on the LlamaSlayers forums for a while, but no spammers popped up. I thought that either the spammers had decided my forums were too dangerous because of the various spam traps, or that the plugin itself was broken. I couldn't take the risk that it would be the second one.</p> <p>So, I changed a single line of code on my local bbPress installation to make it think that I was a dangerous spammer, by telling it to check the spammer's IP for trouble instead of mine.</p> <p>I wasn't blocked.</p> <p>I thought it might be a problem with my settings being too lenient, so I raised the strictness.</p> <p>Nothing happened.</p> <p>I finally decided to debug the entire plugin, placing <code>echo</code> statements at every section of the code. The first one I tried was the problem.</p> <p>The plugin was sending the IP addresses to the http:BL correctly, but the server couldn't understand the query because it was missing two dots.</p> <p>Two dots.</p> <p><em>TL;DR version: A security risk in one of my plugins was not discovered for over 3 months.</em> </p> http://forums.llamaslayers.net/topic/noooooooooo/page/422#post-4266 Sat, 08 Nov 2008 17:15:51 +0000 B 4266@http://forums.llamaslayers.net/ <p>hcvghjkdxchvbjchmv yes. </p> http://forums.llamaslayers.net/topic/noooooooooo/page/383#post-3881 Wed, 05 Nov 2008 16:38:32 +0000 wiimania7007 3881@http://forums.llamaslayers.net/ <p>NOOOOOOOOOOOOOOOOOOOOOOOOOOO U TTTTTTTTTTTTTTTTTOOOOOOOOOOOOOOOOOOOOOLDDDDDDDDDDDDDDD THHHHHHHHHHHHHHHHEEEEEEEEEEEEEEEEEEEEEEMMMMMMMMMMMMMMMMMMMMMMMMMMM TTTTTTTTTTTTTTTTTTTTTTTTTTTTEEEEEEEEEEEEEEEEEEEEEEEEEE SSSSSSSSSSSSSSSSSSSSSSSSEEEEEEEEEEEEEEEEEEEEEEEEEEECCCCCCCCCCCCCCCCCCCCCCCRRRRRRRRRRRRRRRRRRRRRREEEEEEEEEEEETTTTTTTTTTTTT<br /> OOOOOOOOOOOOOOOOOOFFFFFFFFFFFFFFFFFFFFFF LLLLLLLLLLLLLLLIIIIIIIII FFFFFFFFFFFFFFFFFFFFEEEEEEEEEEEEEEEEEEEEEE!!!!!!!!!!!!!! </p> http://forums.llamaslayers.net/topic/noooooooooo/page/366#post-3712 Mon, 03 Nov 2008 18:39:06 +0000 B 3712@http://forums.llamaslayers.net/ <p>If you get rickrolled, press Ctrl-Alt-Del and use the task manager. </p> http://forums.llamaslayers.net/topic/noooooooooo/page/362#post-3672 Mon, 03 Nov 2008 16:37:14 +0000 Zoaster 3672@http://forums.llamaslayers.net/ <p>yeah he is </p> http://forums.llamaslayers.net/topic/noooooooooo/page/360#post-3652 Mon, 03 Nov 2008 09:17:48 +0000 wiimania7007 3652@http://forums.llamaslayers.net/ <p>ya and smache is on omg! </p> http://forums.llamaslayers.net/topic/noooooooooo/page/360#post-3645 Sun, 02 Nov 2008 20:49:16 +0000 Zoaster 3645@http://forums.llamaslayers.net/ <p>no kidding i hate it </p> http://forums.llamaslayers.net/topic/noooooooooo/page/342#post-3471 Sat, 01 Nov 2008 21:00:39 +0000 hvb13 3471@http://forums.llamaslayers.net/ <p>i clicked the i hate rickrolls topic and i got rickrolled. it was VERY annoying </p> http://forums.llamaslayers.net/topic/noooooooooo/page/336#post-3407 Sat, 01 Nov 2008 12:05:09 +0000 ssaamm 3407@http://forums.llamaslayers.net/ <p>1<br /> 2 2<br /> 3 3 3<br /> 4 4 4 4<br /> 5 5 5 5 5<br /> 6 6 6 6 6 6<br /> 7 7 7 7 7 7 7<br /> 8 8 8 8 8 8 8 8<br /> 9 9 9 9 9 9 9 9 9<br /> 10 10 10 10 10 10 10 10 10 10<br /> 11 11 11 11 11 11 11 11 11 11 11<br /> 12 12 12 12 12 12 12 12 12 12 12 12<br /> 13 13 13 13 13 13 13 13 13 13 13 13 13<br /> 14 14 14 14 14 14 14 14 14 14 14 14 14 14<br /> 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15<br /> 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16<br /> 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 100 </p> http://forums.llamaslayers.net/topic/noooooooooo/page/336#post-3404 Sat, 01 Nov 2008 11:51:04 +0000 Truth 3404@http://forums.llamaslayers.net/ <p>Thnx </p>