MyBB Community Forums
Spambots suddenly getting past security questions fairly easily - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: 1.8 Support (https://community.mybb.com/forum-175.html)
+--- Forum: Security Management and Support (https://community.mybb.com/forum-179.html)
+--- Thread: Spambots suddenly getting past security questions fairly easily (/thread-233706.html)



Spambots suddenly getting past security questions fairly easily - ClemFandango - 2021-09-25

I've changed my security questions around recently but in the past few days, I've been getting a big increase in spambot registration.

How random do i really have to make these questions ?

I've tried things like "Type the word 'green'" or "What is water? (Answer: wet)" which did seem to work but recently it doesn't seem to make a difference.


RE: Spambots suddenly getting past security questions fairly easily - Matt - 2021-09-25

Are you also using a captcha of some sort? More abstract questions may be required, these wouldn’t be challenging to program a bot to answer.


RE: Spambots suddenly getting past security questions fairly easily - HLFadmin - 2021-09-25

Bots haven't got past "what is the name of this forum?"
Yet. Although I don't use search engine optimizations and robots.txt deny spiders.


RE: Spambots suddenly getting past security questions fairly easily - ClemFandango - 2021-09-27

Thanks for the replies. I'll have to think of a few more "out there" questions, but I do like the "what is the name of this forum" question though.

I don't use captcha at the moment, but I'll certainly give it a try if more questions don't work.

If I do think of something quite "out there" is it worth putting the answer in the question or is that also something spambots can work out?


RE: Spambots suddenly getting past security questions fairly easily - Matt - 2021-09-27

I think a CAPTCHA will be significantly more effective. The problem is that if someone is coding a bot, if they see there's very limited questions being asked, they can just code in the answers.


RE: Spambots suddenly getting past security questions fairly easily - ClemFandango - 2021-09-28

Well interestingly, I've just checked the stats and the "What is the name of this forum" question has been shown 68 times since yesterday with 38 wrong answers and not a single correct one Smile