Beware: the anonym Internet is full of spam

image1651-348x194_thumb.png

 

Spam isn’t a new subject but I didn’t new till now that also very own created applications could be infected in no time.

In my free time I run the website KnowYourStack. The website was online for some time now and in the meantime I didn’t have the time for up keeping and further development since I’ve moved to another country.

Fail early – fail often

According to this slogan I’ve brought the page online in a case of youth foolishness. Also I’ve planned to test the anonym participation – Idea: No registration – no border to act on the site.

Result: Spam

It didn’t take long for the spam bots to invade the site with spam:

image1652

After the system is completely based on my own code I wondered about the enormous number of spam (4 to 5 entries every day).

Bruteforce FTW

I’m sure that these boots aren’t configured especially for my website so that’s what I assume:

Spam Boots are scrawling through the internet and as soon as they find a form they fill it and send it in. If you didn’t integrate some security mechanism like a little math task or a captcha you are going to be an advertisement target. It was interesting to recognize that the more spam I had the more I got. To be honest I have a little respect of these little devils that developed this.

Lesson learned: Self-made Apps could be a spam magnet too

Without a protection like Captcha and so on it is an easy task for spam bots.

Lesson learned: Anonym only with moderation

Anonym entries have their value but it is necessary to have some kind of moderation.

Lesson learned: Integrate some Mini-Administrations-Functions

I didn’t thought about this subject at all. At the beginning I had to remove the first spam entries via RavenDB Management Studio. It’s possible but laborious. My advice for you: It’s useful to integrate some administration functions from the beginning – even a not-anonym user could share some improper content.

P.S: I’ve pulled the emergency brake. KnowYourStack Reimagined Zwinkerndes Smiley

image

If you enjoyed this post, please consider leaving a comment or subscribing to the RSS feed to have future articles delivered to your feed reader.

About the author

Written by Code Inside Team

Learn more about our team.

Comment on this post

Recent Posts

  • Windows Phone Fonts & what if Visual Studio lies

    Today I was confronted with a little Problem: my Windows Phone App refused to show me the Font I choose – also other thinks didn’t work. Although the Visual Studio Designer did show the Fonts: Unfortunately there isn’t much left in the Emulator: Reason for this: Windows Phone doesn’t include all the typos Windows does ...

  • Json-Online-Tools: Viewer & Json2Csharp generator

      Wherever APIs are mentioned the JSON format I not far away. Since I’m using two tools regularly I would like to introduce you to them. JSON Viewer If you only see the JSON-Text you are usually not able to see the structure. With the help of JSON Viewer you can have an easy overview: ...

  • Windows Phone SDK & „System“-Icons

      Although the Metro Design focuses a lot on Typography Icons are still quite important. If you install Windows Phone SDK you will receive 36 Icons. You can find them here: C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.0\Icons Unfortunately many Icons you might know from the common applications are not integrated. Pedro Lamas extracted 99 additional Icons ...

  • image1830-570x194.png
    How can I figure out if my ADFS 2.0 works?

      I was working with ADFS 2.0 (“Active Directory Federation Services”) for a while when this simple question crossed my mind: How can I figure out if the connection between ADFS and AD “works”? Here is a simple test… What is ADFS? If you need some “position of trusts” beneath the AD-boarders you choose an ...

  • Subdomain vs. Subdirectory

      Better blog.mydomain.com or mydomain.com/blog? Good question! If got asked this question again via Twitter on the weekend so therefore I decide to share my experiences:   Choose a subdomain, if…. - You plan to offer “different services” which are “logical separated” on one domain - You are able to influence the subdomains without much ...

Support us