Issues with top sites again.

Over last couple of weeks the great abusers (Turkish spammers a.k.a sohbet) are not only submitting spam links (and waste 80% of traffic - up to 1 million hits a day) but they learned how to hijack user accounts as well. Which is not cool at all.

I'm turning the top sites offline till first week of a new year as I'm concerned about site integrity and most of all member's privacy.

Please follow the news in this blog. And I hope Drupal Top Sites will be shining again soon allowing to showcase our lovely Drupal at it's best.

And if you have some ideas how the reorganize the Drupal Top Sites please DO leave a comment to this.

Happy Holidays!

Anonymous (not verified) | Mon, 2008-04-28 14:48

Try mollum, Dries's new anti-spam company.

Anonymous (not verified) | Thu, 2007-05-03 13:39

All spammer must be killed...

tiviti | Wed, 2007-05-23 11:17

Yes, Im from İstanbul and im a Turk but i hate these kind of spammers.

oRi0n | Thu, 2007-04-12 22:37

Any news of Top Drupal Sites?

Michael (not verified) | Thu, 2007-02-01 14:54

"Temporarily closed! The site will be back online in January 2007."

Is there an update to the status of http://top.drupalsites.net ?

robo | Thu, 2007-02-01 22:44

Thanks for reminder... but the developer for a new top sites module is disappeared at some 75% of job done. Feel terribly bad not to be a good programmer myself. But I'm looking for a new developer who could finish the job asap.

And really sorry for this delay guys/girls. top.drupalsites.net page is "updated" accordingly.

danno | Fri, 2006-12-29 01:12

What I mean by that is... how did they hijack accounts, and did that security problem get fixed? I ask because we all use Drupal here, and if you got hit, we could all get hit.

I had problems previously where I allowed for unmoderated and unregistered commenting... boy was that a mistake. 30k bogus spam messages later, I almost canned my site.

Now that I'm back on track, I require registration to leave comments, but now you're saying that the registration can be hijacked... so how?

I appreciate any feedback, really.

http://danno.appliedi.net/drupal/

Peter Manser (not verified) | Wed, 2007-05-23 06:22

Well, now it is May and the site says it will be back online in March. It obviously looks like a permanent problem.

It looks to me as though the best option might be to re-load the material on another platform -- one more secure against user account hijacking -- preferably including SSL for secure logins.

robo | Thu, 2007-05-24 09:37

Guys, I'm very sorry about the delay with it. There are currently 2 alternative versions of new top sites module (Drupal based) in alfa testing. Hope to make public beta late May or early June.

Client module (to install at your site) will be available for Drupal 5.x, 4.7.x. for sure. But I'm not sure if it still makes sense to port it to 4.6.x branch as well.

No worries. It was not Drupal powered. And that was another issue.

But for spam comments on Drupal: spam.module makes miracles slashing bad guys even with allowed anonymous commenting.

drupalsites.net is good exapmle itself of spam.module great work (along with capcha).

... Is that it just catches and marks stuff as spam - it doesn't "nip it in the bud". Captcha DOES tend to nip it. My site got thousands of spam a day and simply enabling Captcha has reduced this to 1 spam in 1 month. Nice module!

dentist (not verified) | Mon, 2008-02-04 16:57

I agree this has helped tremendously and keeps the "bots" out!

Chris

Funny Guy (not verified) | Wed, 2007-05-30 17:10

I've always used the spam module and never knew that it was making a difference until I checked the SPAM folder in gmail and saw skillions of flagged post alerts. Google saw the message body and also tagged them as spam so I never got them in my inbox. it really does work well.

Funny Guy

Gurpartap Singh (not verified) | Sun, 2006-12-31 10:09

Try the akismet module, it's being officially maintained by eaton on drupal.org

irakli (not verified) | Wed, 2007-02-07 15:01

Your textual "captcha" is too easy to crack.

If you install textimage and integrate it with captcha, it will be MUCH stronger protections and turkish hackers will have to entertain themselves with something else