- Registrado
- 14 de Nov, 2012
I have just deployed an experimental new system for email verification. Ordinarily, in every email system I have ever seen, when you register you receive an email and you have to click the link. With this system, you have to send an email to us first, and then receive a verification email.
A gay pedophile spammer named David Hoffman and other pedophiles working with him are trying to keep our registrations closed. On the last week of December, I tried to open registrations again, and had a lot of success preventing automated registrations. So much so, that they could not get in, and resorted to just spamming accounts.
Since they have a system where they pay pajeets to answer CAPTCHA solvers automatically for a penny each, CAPTCHA is not effective. This meant it was actually cost effective for them to simply register accounts with email addresses pointing at real email servers with thousands of random, fake email accounts to the point where our email provider became concerned were were compromised or spamming. This prevents ordinary registration emails from going out, because allowing the spam ends up costing the mail service reputation.
This new system should prevent that. If they continue to register accounts, no emails get sent out and I will simply delete user accounts which are unverified periodically, and this will cost them money to do. If they register accounts with real email addresses and automate the verification process, I will just continue to ban those accounts by the thousands and they will have to burn real email accounts to continue doing it.
So TL;DR: do not use an email service that cannot send mail.
P.S. If you'd like to donate a little bit each month to USIPS to afford us enterprise-grade security features (that I want to share with other websites like Soyjak and 4chan eventually) please chip in on Github.
A gay pedophile spammer named David Hoffman and other pedophiles working with him are trying to keep our registrations closed. On the last week of December, I tried to open registrations again, and had a lot of success preventing automated registrations. So much so, that they could not get in, and resorted to just spamming accounts.
Since they have a system where they pay pajeets to answer CAPTCHA solvers automatically for a penny each, CAPTCHA is not effective. This meant it was actually cost effective for them to simply register accounts with email addresses pointing at real email servers with thousands of random, fake email accounts to the point where our email provider became concerned were were compromised or spamming. This prevents ordinary registration emails from going out, because allowing the spam ends up costing the mail service reputation.
This new system should prevent that. If they continue to register accounts, no emails get sent out and I will simply delete user accounts which are unverified periodically, and this will cost them money to do. If they register accounts with real email addresses and automate the verification process, I will just continue to ban those accounts by the thousands and they will have to burn real email accounts to continue doing it.
So TL;DR: do not use an email service that cannot send mail.
P.S. If you'd like to donate a little bit each month to USIPS to afford us enterprise-grade security features (that I want to share with other websites like Soyjak and 4chan eventually) please chip in on Github.
Última edición:
