|
#1
|
||||
|
||||
MASSIVE VANDAL ATTACK Tues Evening May 10
Bunni needs to just undo all the vandalism that is going to take place tonight when everyone is asleep. It's a massive vandalism attack that a bunch of us have been fighting off.
Bunni:We need to protect ALL PAGES against unregistered users period. This is ridiculous. I shudder to think how much damage has been done when I wake up in the morning. |
#2
|
||||
|
||||
Well, some of us are still awake and ready to fight the alien foe.
This seems to be the same bot we see here on the forums a lot, set up to agree with itself after posting (the "thanks" message is supposed to make a spam post look legitimate). Couldn't really say why they're putting it on the main wiki, but then most bot pilots aren't native English speakers anyway so they probably have no idea what it's actually saying. Last edited by Evil Tim; 05-11-2011 at 08:37 AM. |
#3
|
||||
|
||||
and I thought I had fun dealing with it last night. I'll try to check back as often as I can, I'm sure others will too.
__________________
A man's got to know his limitations. |
#4
|
||||
|
||||
I posted some of this to Ben41, but I'll repeat it here:
It's obviously someone who knows what they're doing (IP address changing every time (and the range includes Austria, Canada, France, Finland, Greece, Germany, Hong Kong, Japan, Saudi Arabia (!), South Korea, UK, and US so far, suggesting it's a botnet or someone with a big box of proxies), vandalising random pages, edit reasons made using a password generator to stop us blocking based on those) but it seems to just be posting random thankyous to the previous poster, which suggests it's designed to be used on a forum. So it's someone technically competent but totally stupid. :s Blocking IPs and protecting pages isn't really going to do a lot since I haven't seen it use the same IP twice and it seems to just be using the random page function to choose targets. Well, at least until it starts running into IPs it's already used and pages it's already tried to edit. Not sure how it's picking names for new pages. Also, first port of call should be to protect everything in Category: Templates and all help articles, since they're likely targets if you want to affect a lot of pages; the Bot's already tried it on the incomplete template. Last edited by Evil Tim; 05-11-2011 at 01:56 PM. |
#5
|
||||
|
||||
They're all dead links; usually actors with no page or pages that have been deleted, but are still linked to elsewhere.
|
#6
|
||||
|
||||
Oh, I see, so it's using random links from Special:WantedPages?
Anons really have no business being allowed to make new pages; we should stop them doing that as well. Last edited by Evil Tim; 05-11-2011 at 06:04 PM. |
#7
|
|||
|
|||
Quote:
Evil Tim is right though, it's impossible to block that many IP ranges...
__________________
Quote:
Quote:
|
|
|