I don't think those countermeasures are working because as of this moment, there's plenty of obvious naughty words being passed through in that chat window.
I added a real-time chat to my blog, people used it to attack me
51–60 of 110 posts
Re: I added a real-time chat to my blog, people used it to attack me
#52Re: I added a real-time chat to my blog, people used it to attack me
#53Earlier quoted context omitted.
Neuralink will hopefully filter that out client side /s If your audience is more than a handful of people, what's the purpose of chat?
To get the handful of people to collaborate and hopefully bring their friends. It's currently at 160 and climbing, no longer a handful, so it seems to be working.
Re: I added a real-time chat to my blog, people used it to attack me
#54Earlier quoted context omitted.
Neuralink will hopefully filter that out client side /s If your audience is more than a handful of people, what's the purpose of chat?
To get the handful of people to collaborate and hopefully bring their friends. It's currently at 160 and climbing, no longer a handful, so it seems to be working.
Re: I added a real-time chat to my blog, people used it to attack me
#55Earlier quoted context omitted.
But then one asshole can denial of service your chat very easily
Yeah, shutting down to that specific browser fingerprint would be the better way. Sometimes, being able to recognize a user has it's benefits for good /s
Refreshing pages to establish connection again is semi easy for someone who made a honest mistake (and Could make them more cautious), but if someone wants to trigger web-socket disconnect all the time, it would become cumbersome.
Add something like fail2ban, and you're set enough against passing trollers, but not interesting enough to draw attention from people that like the challenge.
Re: I added a real-time chat to my blog, people used it to attack me
#56Earlier quoted context omitted.
But then one asshole can denial of service your chat very easily
Yeah, shutting down to that specific browser fingerprint would be the better way. Sometimes, being able to recognize a user has it's benefits for good /s
Re: I added a real-time chat to my blog, people used it to attack me
#57The attempt to run Javascript as the author mentions is pathetic.
Re: I added a real-time chat to my blog, people used it to attack me
#58The social web has become the adversarial web, unfortunately. You have to have a huge squelch knob if you want any meaningful signal now.
Now my comments feed is my curated Mastodon account, very much a filter for nonsense. I wouldn't even think of putting a chat up on my site, it would almost entirely be bots, and then trolls. There's literally no point in trying to interact with people online anymore without some kind of curation or moderation, every possible interaction has to be treated as hostile.
Re: I added a real-time chat to my blog, people used it to attack me
#59The chat is still there in the corner of this post, with people typing nasty shit into it. Well have fun delving into programmatic censorship I guess. Or just take it out. If you take the former path and post about trying to fix it here then I'm sure you'll get a lot more free testing of your attempts to enforce civility through regex or whatever. Enjoy learning about the Scunthorpe problem.
Looking at the last few minutes of messages, I get the feeling that all it takes is a handful of motivated (i.e. jobless) malicious individuals to make an entire community or a corner of the Internet look like it has devolved into barbarism.
Re: I added a real-time chat to my blog, people used it to attack me
#60From the earliest days of websites allowing text input from users, this has been a thing. The same with any website that allows you to draw things, it will quickly show people drawing crude (in content not skill) objects. This is just human nature. Once people realized you could use these forms as attack vectors, we were off to the races. Now that bots can do it for you, I'd only imagine the time before first bot usi…