I have the application process enabled for people to join my instance, and I’ve gotten about 20 bots trying to join today when I had nobody trying to join for 5 days. I can tell because they are generic messages and I put a question in asking what 2+3 is and none of them have answered it at all, they just have a generic message.

Be careful out there, for all you small instance admins.

  • @IAccidentallyCame@lemmy.dbzer0.com
    link
    fedilink
    English
    11 year ago

    Are Email addresses kept and logged anywhere, or are they discarded after registration?

    For privacy reasons, it’d be nice if we could somehow have a reliable bot blocking/spam blocking method that doesn’t require Email.

    While Email adds a good layer of spam blocking just from the spam blocking the email providers are doing themselves, having an option to verify with Email OR jump through multiple hoops instead would be cool. Hoops that are difficult for a bot to be programmed to defeat all of them. Such as captcha, with a simple math equation, and something else all combined.

    Just tossing ideas around, because this is all still being built out.

    • Demigodrick
      link
      fedilink
      English
      21 year ago

      Yeah they’re kept in the database.

      A sufficiently complex captcha might do it. I’ve seen something else that verifies you’re not a bot based on PoW calculation, although I don’t know how reliable that would be personally.

      A split verification method might be a good way forwards for the privacy conscious instances.