spammer accounts still active
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 5
- Forks
- 3
- Avg merge
- 21h 30m
- Merged PRs (30d)
- 3
Description
The account captcha was broken for a week or two, allowing a bunch of spammers to create accounts.
FirstnameLastnameNumber
Eyeballing accounts it seems these accounts still exist. There are many which take the format FirstnameLastnameNumber, e.g. SalinaBardin1
root@ropewiki ~ $ rwusers | sort | grep -E '[A-Z][a-z]+[A-Z][a-z]+[0-9]+'
[...]
2025-04-09 19:37:27 SalinaBardin1 Salina Bardin gloriastingley@wuuvo.com
2025-04-09 19:52:00 LouisaCallanan7 Louisa Callanan jenica@c.seoneo.info
2025-04-09 20:03:33 TeriCurtis89 Teri Curtis domingamcloud6609@freundin.ru
2025-04-09 20:45:28 RaeStringer469 Rae Stringer rae_stringer_5789@stake-casinonova.lol
2025-04-09 21:32:54 JennyClaxton0 Jenny Claxton jenny.claxton-8533@korailmail.com
2025-04-09 21:41:14 KevinKraegen7 Kevin Kraegen kevinkraegen80@slave.ernsys.com
2025-04-09 23:06:28 RandiShackell9 Randi Shackell maudeblackham@mailmenot.io
2025-04-09 23:52:25 TamelaBobbitt22 Tamela Bobbitt nadiascarbrough3325@tempr.email
2025-04-10 00:08:50 LoreneMuskett4 Lorene Muskett lorene-muskett-141@pcpomail.com
2025-04-10 00:29:38 LydaChatham3 Lyda Chatham lydachatham.8810@stake-casinoprimetime.lol
2025-04-10 00:33:18 FatimaYke669 Fatima Coggins eulaliaborders2329@bheps.com
2025-04-10 01:45:52 MirandaMintz36 Miranda Mintz janabroadhurst@asia.dnsabr.com
2025-04-10 02:37:34 KrystleMassola0 Krystle Massola cissy@j.cosmicbridge.site
[...]
Note that this isn't universal: https://ropewiki.com/User:Saibraxia. We were likely hit but a whole bunch of different bots!
Note about account creation volume
Since maps have been limited to logged-in users only (starting 03-27), there have been lots of new accounts created. However @BenjaminPelletier fix to the captcha on 04-10 shows a steep drop off. So we can't just assume the overall rise is only spammer.
root@ropewiki ~ $ rwusers | sort | awk '{print $1}' | uniq -c
[...]
1 2025-03-14
1 2025-03-15
1 2025-03-16
2 2025-03-17
1 2025-03-19
1 2025-03-20
1 2025-03-21
2 2025-03-23
1 2025-03-24
1 2025-03-25
1 2025-03-27
13 2025-03-28
24 2025-03-29
42 2025-03-30
56 2025-03-31
85 2025-04-01
97 2025-04-02
78 2025-04-03
71 2025-04-04
71 2025-04-05
119 2025-04-06
125 2025-04-07
90 2025-04-08
112 2025-04-09
37 2025-04-10
21 2025-04-11
16 2025-04-12
16 2025-04-13
23 2025-04-14
27 2025-04-15
25 2025-04-16
1 2025-04-17
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the rwusers command and the listed account-name and email patterns to identify the affected accounts. Review the captcha-related account-creation behavior mentioned in the issue, then define completion as confirming which accounts are spam and determining how the remaining accounts should be handled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100