remove spammy user profiles
Opened this issue · 4 comments
It seems some users have created accounts on MIT Open solely to populate the user bio with spam.
IS&T shared this google search query to find advertisements for online gambling, which we can use to detect who is spamming us:
Acceptance Criteria:
- retire the accounts of any users found by this search
Related issues
- To get out ahead of this problem, we're going to stop allowing new registration unless the user is already in an MIT community: #3781
Not great. how does IS&T comes up with this search term(s)?
using a search string handed to me by an outside security researcher, who compiled a list of Turkish and Indonesian phrases that seem to crop up often in spammed sites. It's a bit of a game of whack-a-mole taking down compromised or spammed things.
The original query they sent me was for all of .mit.edu which included profiles on other sites that we don't control.
@rhysyngsun do you think we can close this?
I'm reopening this because we've had many more spammy profiles created in the time since February.