github: shadowy octopus with the head of a robot, emblazoned with the Dreamwidth swirl (Default)
github ([personal profile] github) wrote in [site community profile] changelog2022-10-08 04:13 pm
  • Add Memory
  • Share This Entry

[dreamwidth/dw-free] 7640c8: Add simple auto-blocking of fraudsters

Branch: refs/heads/master Home: https://github.com/dreamwidth/dw-free Commit: 7640c87d5354937648c820d11101847b43f9a6f4 https://github.com/dreamwidth/dw-free/commit/7640c87d5354937648c820d11101847b43f9a6f4 Author: Mark Smith mark@dreamwidth.org Date: 2022-10-08 (Sat, 08 Oct 2022)

Changed paths: M cgi-bin/Apache/LiveJournal.pm M cgi-bin/DW/Captcha.pm M cgi-bin/DW/Controller/Auth.pm M cgi-bin/DW/Controller/Journal/EmbeddedContent.pm M cgi-bin/LJ/Sysban.pm M etc/config-private.pl.example

Log Message:

Add simple auto-blocking of fraudsters

Bots and scrapers that just get captcha redirects over and over but never attempt to solve will get blocked. This should be fairly loose so as not to cause user impact, but will require tuning.

This also adds a simple memcache based tempban system which doesn't persist to the database.