Live data from Hacker News

The Frustration Loop

herman.bearblog.dev

21–30 of 158 posts

Re: The Frustration Loop

#21
I think the key here is when you detect that someone is in a bad category, you shouldn't alert them to the fact you know that, because then it just becomes an arms race.

Another approach might be to make it look to them like they managed to create their blog, but just quarantine the content so no one else can ever see it.

Re: The Frustration Loop

#22
Akismet has no working appeal mechanism. What seems like 1000 years ago I got banned by it for posting comments on my own blog. (haha!) If I comment any place using it my comment are silently filtered out.

I got banned by disquss too! for posting many useful links in comments on blogs by people I know. They resolved the issue in 2 days and were wonderfully polite about it.

Akismet should at least clear wordpress users banned countless years ago and wp should replace it with something less well... insane.

I don't mind not being able to reply on my own wp blog. It is fairly amusing actually. Ill just use some other blog engine. Its easy for me.

but it seems bad for wp to refer to their users as uhh lets kill some spam??? Im not impressed.

Re: The Frustration Loop

#23
post #8

Spam teams at social networks typically shadow-ban spammers. The goal of this is to make it as difficult as possible for the spammer to determine that they've been caught (which is why I think the frustration techniques, or simply account suspension aren't widely used). The field of spam-prevention is fascinating because it's essentially an arms race between companies deploying tactics to detect spam and sophisticate…

The problem is real humans getting snared. My TikTok account is shadowbanned (anything I post now gets zero views, and my LIVE gets zero viewers).

And my Instagram account got permabanned because they said I was impersonating myself. This was worse because I lost the entire account. They even had me send a selfie of myself and the instant I submitted the image was when they did the permaban lol.

Re: The Frustration Loop

#24
post #8

Spam teams at social networks typically shadow-ban spammers. The goal of this is to make it as difficult as possible for the spammer to determine that they've been caught (which is why I think the frustration techniques, or simply account suspension aren't widely used). The field of spam-prevention is fascinating because it's essentially an arms race between companies deploying tactics to detect spam and sophisticate…

The problem is real humans getting snared. My TikTok account is shadowbanned (anything I post now gets zero views, and my LIVE gets zero viewers). And my Instagram account got permabanned because they said I was impersonating myself. This was worse because I lost the entire account. They even had me send a selfie of myself and the instant I submitted the image was when they did the permaban lol.

I don't mean to cause offense, but maybe you haven't built a following yet? I see plenty of Lives with 0 viewers.

Re: The Frustration Loop

#25
post #14
post #10

I'm missing the part on how op determines valid users for the frustration loop. > Enter Akismet... Blocking spam on signup worked somewhat, but was easily circumventable > some spammers found ways to parade as legitimate blogs... which I would have to manually sniff out and flag. > This lead me to an idea: The Frustration Loop... When spam is detected... Waste their time and make them give up. > "Now hold up there He…

Does Akismet detect spammers when they sign up? afaik its main feature is an API to detect whether a given comment is spam: https://akismet.com/developers/comment-check/

I assumed that the two paragraphs were connected

> Enter Akismet. This is a spam detection tool by the Wordpress people and is pretty accurate and easy to use.

> Blocking spam on signup worked somewhat, but was easily circumventable by spammers who are well versed in dealing with these kinds of barriers.

But now that I look at Akismet's description, it sounds like Akismet does a lot more than block on signup. Perhaps they use it after signups but apply the frustration loop instead of blocks because it's less accurate there.

Re: The Frustration Loop

#26
post #14
post #10

I'm missing the part on how op determines valid users for the frustration loop. > Enter Akismet... Blocking spam on signup worked somewhat, but was easily circumventable > some spammers found ways to parade as legitimate blogs... which I would have to manually sniff out and flag. > This lead me to an idea: The Frustration Loop... When spam is detected... Waste their time and make them give up. > "Now hold up there He…

Does Akismet detect spammers when they sign up? afaik its main feature is an API to detect whether a given comment is spam: https://akismet.com/developers/comment-check/

In the gif, the user already has a login and is attempting to make a post. I imagine either the user gets flagged as a spammer or each individual post might.

Re: The Frustration Loop

#27
Seems like this could be abused. A script wouldn't get frustrated, but it might have a handy way to test what content triggers Akismet. I presume I'm overlooking some mitigation strategy.

Re: The Frustration Loop

#28
The best spam protection I ever had, was a bunch of hidden text input fields on my mail contact form, with names like “blindcopy”, “bcc”, “cc”, “additional address”, etc.

They all had default values.

If the submitting handler detected any values in these fields that were different from the default, the submission was rejected.

I don’t think I ever got a single bogus email from that form.

Re: The Frustration Loop

#29
post #10

I'm missing the part on how op determines valid users for the frustration loop. > Enter Akismet... Blocking spam on signup worked somewhat, but was easily circumventable > some spammers found ways to parade as legitimate blogs... which I would have to manually sniff out and flag. > This lead me to an idea: The Frustration Loop... When spam is detected... Waste their time and make them give up. > "Now hold up there He…

They pay for Akismet and run the users signup info through it. You can see the kind of data they send to them in the GIF on the post. If Akismet says yes, this is spam, then engage the frustration loop. I thought it was clever.

Yep, but op also mentioned spammers that get through signup without being flagged and having to go and manually flag them.

My thoughts on the loop overall are:

- maybe users are false flagged but not complaining because the "bugs" are rare enough

- spammers with automation may brute force through the "bugs"

- handles manual spammers well because they will encounter the "bugs" more often and just leave; or they'll report it as an issue that you may have to look into.

To draw a comparison with my own experiences, I have to jump through hoops when I visit sites with bot detection or other related security measures. I am the normal user being flagged as a spammer being frustration looped in this case.

Re: The Frustration Loop

#30

The best spam protection I ever had, was a bunch of hidden text input fields on my mail contact form, with names like “blindcopy”, “bcc”, “cc”, “additional address”, etc. They all had default values. If the submitting handler detected any values in these fields that were different from the default, the submission was rejected. I don’t think I ever got a single bogus email from that form.

I've heard this concept described as a "honeypot field" before and it works pretty well as you've said. I'm curious how password managers/autofill avoid tripping up though; are they able to detect that the field is not visible?
Post reply on HN