denise: Image: Me, facing away from camera, on top of the Castel Sant'Angelo in Rome (Default)
Denise ([staff profile] denise) wrote in [site community profile] dw_maintenance2023-09-28 11:16 pm

Continuing dispatches on the war against spam

A few days ago we let you know about spam prevention measures that we were taking to help stem some of the flood of garbage. One of those temporary measures included geoblocking all IPs from several of the countries that are our largest source of spam. This did (as we knew it inevitably would) have some collateral damage for real users, and we're very sorry!

We're continuing to experiment: this time we've slightly expanded the range of countries we're geoblocking to include the ones that we held off on geoblocking because it would affect too much legitimate use, but we've limited the geoblocking only to the account creation page. This should mean that if you were having trouble accessing the site because of geoblocks, you should be able to access 99% of the site without a problem, and the only page you won't be able to access is the account creation page. With luck, this should cut back heavily on our spam account creation without disrupting legitimate use of the site. The current list of countries that are geoblocked from account creation are Bangladesh, Cambodia, Egypt, India, Indonesia, Morocco, Pakistan, Singapore, Turkey, and Vietnam. (If you're an existing user from one of those countries and you'd like to make an additional account, email support@dreamwidth.org with the username you'd like to register and we can register it for you. If the number of requests gets to be enough that it's taking up too much of our time, we may have to pause this until we can build automated exceptions, but we'll start there.)

We will continue to monitor the results of these experiments and adjust as necessary: when we do one of these experiments, we always make sure to define in advance what "too much interference with legitimate use" will look like, and we try very hard to stick to it. I apologize to everyone who's been collateral damage in our efforts to filter out more of the goddamn spammers.
bluedreaming: digital art of a person overlaid with blue, with ace-aro-agender buttons (Default)

[personal profile] bluedreaming 2023-09-29 11:56 am (UTC)(link)
Sorry to poke in but 2) is super restrictive to people who don’t have mobile phones and I despise it.
Also big privacy issue.
frith: 3 pastel cartoon sheep, one dreams the word Dreamwidth (FiM Dreamwidth Ewes)

[personal profile] frith 2023-09-29 03:37 pm (UTC)(link)
Yup on all three points! Discord thirsts for "smartphone" phone numbers and as I have no smartphone and wouldn't share the number with Discord if I had one, I am no longer able to chat with fannish creative types there. There is 2 factor authentication but I have my doubts I'd be able bypass Discord's phone number desire should I figure out what 2FA entails. Email confirmation used to be sufficient for Discord.
lb_lee: a black and white animated gif of a pro wrestler flailing his arms above the words STILL THE BEST (VICTORY)

[personal profile] lb_lee 2023-09-29 04:08 pm (UTC)(link)
I don't have a smartphone and have found ways to work around with Discord, if you're interested! I use 2FA with a YubiKey, which admittedly I had to buy, but it has been a winner in that I don't need a smartphone (or any phone, I think!)
frith: 3 pastel cartoon sheep, one dreams the word Dreamwidth (FiM Dreamwidth Ewes)

[personal profile] frith 2023-09-29 05:19 pm (UTC)(link)
That's good to know. ^_^ I believe Discord sent me a link a while back to something that would accept 2FA instead of sending me into an 'enter your phone number' loop. Meanwhile, I would like to change my (outrageously expensive and sly) ISP and it looks like I am going to have to update my Firefox too.
havocthecat: the lady of shalott (Default)

[personal profile] havocthecat 2023-09-30 03:19 pm (UTC)(link)
Ooh, that's interesting - I need to look into that. I'm getting so tired of social media craving my phone number. I have some Discords off-limits now and I'm dreading Discord-as-a-whole requiring a phone number. Is a YubiKey pricey?
lb_lee: a black and white animated gif of a pro wrestler flailing his arms above the words STILL THE BEST (VICTORY)

[personal profile] lb_lee 2023-09-30 11:46 pm (UTC)(link)
I got two for about $20 USD apiece, I think? But that was quite a few years ago, and prices may have changed since then. There are definitely different options at different price levels; I think I got pretty barebones ones. They also work with modern Windows and Linux! (I presume Mac as well, but haven't tried.)

Yubikeys can also be used with an authentication app that can be used on non-phones, if you don't have a smartphone!
arethinn: glowing green spiral (Default)

[personal profile] arethinn 2023-09-29 08:35 pm (UTC)(link)
?? Are they imposing this globally on new accounts or something? I've never provided a phone number on any of my three Discord accounts, the newest of which was created this past March. The option is there to add one, but I just leave it blank ("You haven't added a phone number yet"). Hasn't stopped me from joining servers or anything.
frith: 3 pastel cartoon sheep, one dreams the word Dreamwidth (FiM Dreamwidth Ewes)

Discord

[personal profile] frith 2023-09-29 11:55 pm (UTC)(link)
My account was created around 2018. The problem is my ISP keeps switching from one hub to another making it appear that I'm logging on from a different town than last time. So every few months I'd have to prove that I'm me by using a code they'd send me by email. Until they decided that wasn't good enough and requested a phone number instead. That was two or three years ago. I gave up trying after about a year.
dennisgorelik: 2020-06-13 in my home office (Default)

SMS verification

[personal profile] dennisgorelik 2023-09-29 03:56 pm (UTC)(link)
> 2) is super restrictive to people who don’t have mobile phones

SMS verification does not have to be mandatory.
It should be OK to maintain an old Dreamwidth account without connection to any phone number.

Other alternatives could be invite-based registration and registration from an IP network that is not blacklisted.
Edited 2023-09-29 15:57 (UTC)