denise: Image: Me, facing away from camera, on top of the Castel Sant'Angelo in Rome (Default)
Denise ([staff profile] denise) wrote in [site community profile] dw_maintenance2023-09-28 11:16 pm

Continuing dispatches on the war against spam

A few days ago we let you know about spam prevention measures that we were taking to help stem some of the flood of garbage. One of those temporary measures included geoblocking all IPs from several of the countries that are our largest source of spam. This did (as we knew it inevitably would) have some collateral damage for real users, and we're very sorry!

We're continuing to experiment: this time we've slightly expanded the range of countries we're geoblocking to include the ones that we held off on geoblocking because it would affect too much legitimate use, but we've limited the geoblocking only to the account creation page. This should mean that if you were having trouble accessing the site because of geoblocks, you should be able to access 99% of the site without a problem, and the only page you won't be able to access is the account creation page. With luck, this should cut back heavily on our spam account creation without disrupting legitimate use of the site. The current list of countries that are geoblocked from account creation are Bangladesh, Cambodia, Egypt, India, Indonesia, Morocco, Pakistan, Singapore, Turkey, and Vietnam. (If you're an existing user from one of those countries and you'd like to make an additional account, email support@dreamwidth.org with the username you'd like to register and we can register it for you. If the number of requests gets to be enough that it's taking up too much of our time, we may have to pause this until we can build automated exceptions, but we'll start there.)

We will continue to monitor the results of these experiments and adjust as necessary: when we do one of these experiments, we always make sure to define in advance what "too much interference with legitimate use" will look like, and we try very hard to stick to it. I apologize to everyone who's been collateral damage in our efforts to filter out more of the goddamn spammers.
havocthecat: the lady of shalott (Default)

[personal profile] havocthecat 2023-09-30 03:19 pm (UTC)(link)
Ooh, that's interesting - I need to look into that. I'm getting so tired of social media craving my phone number. I have some Discords off-limits now and I'm dreading Discord-as-a-whole requiring a phone number. Is a YubiKey pricey?
lb_lee: a black and white animated gif of a pro wrestler flailing his arms above the words STILL THE BEST (VICTORY)

[personal profile] lb_lee 2023-09-30 11:46 pm (UTC)(link)
I got two for about $20 USD apiece, I think? But that was quite a few years ago, and prices may have changed since then. There are definitely different options at different price levels; I think I got pretty barebones ones. They also work with modern Windows and Linux! (I presume Mac as well, but haven't tried.)

Yubikeys can also be used with an authentication app that can be used on non-phones, if you don't have a smartphone!