FundersClub/fire

Spam/possible virus through fire-bot

Opened this issue · 10 comments

scop commented

Spam/possible virus (reportedly; haven't tried to verify myself) posted by fire-bot: scop/bash-completion#346

marchputt commented

I also got a similar thing here. xjtu-wiki/xjtu-wiki.github.io#5
Are there any good ways to prevent this?

eranrund commented

Sorry, I don't think we have a good solution for it. Fire bot is open source so if you have any ideas please feel free to create PR to help.

  • 👍1
austinhuang0131 commented

Maybe...

  • use a list like this?
  • validate MX records? (There are DNS lookup APIs so you don't have to DiG stuff)
eranrund commented

I just pushed a change that bans all the disposable email addresses in the list provided.
Additionally, since we use SendGrid, I experimented with looking at the spam score (https://sendgrid.com/blog/check-spam-using-parse-webhook/) however so far it seems like it is also flagging non-spam emails so I think more data is needed (I looked for emails with score >=6).

I am not sure what you mean by validating MX records - I can validate an MX record for a given domain exists but I am not sure this would prevent any amount of substantial spam...

Please let me know if you have any other ideas and feel free to submit PRs.

austinhuang0131 commented

I guess it can't stop gmail spam...

  • austinhuang0131/instagrabber#103
  • austinhuang0131/instagrabber#135

Keywords?

  • 👍1
sffc commented

I stopped using fire-bot because of this issue. The spam was getting to be too much to handle.

unixfox commented

Would it be possible to only create github issues if for example a sentence is included in the email?

I mean if for example please create a github issue is included into the body of the email then firebot create the issue. If not the email is kept in the inbox without any issue created on github.

This sentence would be "advertised" along the email address.