HelloZeroNet / HelloZeroNet/ZeroNet

Antibot/antispam system to help prevent spam and allow community moderated sites

オープン
#1,310 コメント 2 件 リアクション 1 件 担当者 0 名 GitHub で見る
主要言語
JavaScript
スター
18.8k
フォーク
2.3k
PR マージ指標
30日以内にマージされた PR はありません

説明

### Step 1: Please describe your environment

* ZeroNet version: 0.6.2

### Step 2: Describe the problem:

Zeronet may be missing some system which will prevent bots or malicious users to create many identities and use them to either SPAM or manipulate certain functions like voting system. Voting system can be used to allow users to moderate zites content (example vote to move some content to different category, vote to rank some content better or worse, vote to move some content into recycle bin or hide for moderation by reputable users). I think community driven sites is the future, not to rely on a single point of failure (a zite admin). But there is needed the system that will prevent abuse of the voting system by the bots and it will also prevent bulk spam.

### Step 2: Ideas on the antibot/antispam/anti-voting-abuse system:

1. ID authority like zeroid will require new user to solve antibot challenge (i would not be against temporarily using https://hcaptcha.com it is reasonable privacy), sort some elements)
2. Generating some identity key based on device hardware or software and allow developers to rate-limit one device regarding number of actions it can do on site (number of votes, number of topics created)
3. calculating user karma/reputation score based on account age, posting frequency, number of deleted posts by moderator, number of downvotes issued by reputable members
4. Work with user's IP and /26 or /24 subnet maybe transformed into some hash/key for privacy will be rate-limited on how many posts/votes it can do no matter number of IDs used - btw. another P2P tool is having SPAM problem too, [developer says](https://github.com/zlatinb/muwire/issues/63#issuecomment-892915912) that devoted SPAMmer can build custom version of the app for spamming, but how to prevent this?

コントリビューションガイド

このリポジトリのコントリビューションガイドは索引されていません

調査の方向性

No files, tests, or entry points are named. Start by tracing ZeroID identity creation and the voting and moderation flows described in the issue, then define a bounded anti-abuse design with explicit acceptance criteria before implementation.

索引モデルが issue の本文から書いたものです。

評価

領域
authentication, authorization, security
issue の種類
機能追加
難易度
5/5
見積もり時間
1週間以上
活発さ
停滞
明瞭さ
説明が足りない
初心者へのやさしさ
15/100

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。