Menu Close
Avatar
Log In
Please consider registering
Guest
Forum Scope






Start typing a member's name above and it will auto-complete

Match



Forum Options



Min search length: 3 characters / Max search length: 84 characters
Register Lost password?
sp_TopicIcon
Sophisticated SPAM
SPAM
Avatar
John S
PDX OR
3023 Posts
(Offline)
1
July 2, 2024 - 3:59 pm

We have been getting some SPAM that is hard to tell if it is or not.  Some of you have been really helpful in discerning this. Thank you for your efforts. I'm pretty good at growing fruit but I don't really know a lot about computers. Some of you are adding specific details that makes it clear that they are SPAM.  I don't know how to do that, but if you explain it to me, I can get rid of it.   Awesome work!

John S
PDX OR

Avatar
JeanW
59 Posts
(Offline)
2
July 3, 2024 - 1:41 am

John,

The two posts from “mariahcarey” are more than likely spam.  I know on the surface they sound almost legit, but I doubt it.  In the July 1 “Thinning 2024” post at 11:40 pm, the poster stated they were in SE Georgia.  In the July 1 “When to open your grafts?” post at 11:49 pm, they stated they were in northern Idaho.  Kind of hard to be in two places at once, right?  Also, if you highlight the “Thinning” post, there is another word at the end-- “wordle”.  If you highlight the “When to open” post, the word “mapquest” appears at the end.  Suspicious.  The sentence construction of the two posts from “amorapotter” that just popped up while I was writing this is odd.  Again, there are hidden words at the ends of the posts that appear if you highlight the posts.

JeanW

Avatar
jafar
884 Posts
(Offline)
3
July 3, 2024 - 10:17 am

John, thanks for addressing these directly.  

If I'm only 80% sure a new poster is fake, I'll delete to post but not bad the user.  Perhaps we should edit the post with a blanket message like, "post deleted" author please follow up with clearly human generated relevant posts.

Sometimes I wonder if we're just helping train the spam AI to get smarter.

Avatar
Larry_G
226 Posts
(Offline)
4
July 3, 2024 - 10:42 am

Good eye, JeanW.

This "hidden word" technique is created via hacking of the HTML code, that is beyond just AI text generation.

First, the background color of the text must be mined, then the text color is made equal to the background color.

In this case:  "<span style="color: #f5f5f5">wordle</span>"

#f5... being light gray.

Avatar
John S
PDX OR
3023 Posts
(Offline)
5
July 7, 2024 - 6:21 pm

Thanks for your help.

John S

Avatar
Larry_G
226 Posts
(Offline)
6
July 8, 2024 - 11:13 am

All dubious posts should be text-highlighted via mouseover-select to reveal a random and otherwise invisible keyword.

This is an old trick to associate the keyword with a website and improve its ranking by search engines.

So it doesn't even matter if no one sees and clicks on the keyword, there is still a benefit to the spammer.

Avatar
jafar
884 Posts
(Offline)
7
July 8, 2024 - 12:21 pm

Larry, thanks for explaining this.  I'll start screening for that.  I'd wondered what the point of posts without a url link.  

I've also read that sometimes they come back and edit their post to include such links, after its been accepted by moderators.

Avatar
Larry_G
226 Posts
(Offline)
8
July 8, 2024 - 2:58 pm

This hidden link trick is so old-hat that it makes me wonder if there is something else more modern at play;

I thought that search engine SEO algorithms had long ago ignored or penalized this ploy.

Avatar
Larry_G
226 Posts
(Offline)
9
July 8, 2024 - 3:30 pm

These hidden link posts should be deleted as soon as practical as the Google (and other search engines) algorithm can easily detect them and penalize the HOS website.

https://loganix.com/hidden-links/

^ all the hidden link basics, a wordy article several minutes to browse, but it is relatively recent.

Apparently hidden links are still a thing.

Avatar
John S
PDX OR
3023 Posts
(Offline)
10
July 17, 2024 - 2:34 pm

Thanks for the help, people.  I deleted the two from Mariah Carey. Thanks for the tip, @JeanW.  She didn't respond to my question. You'd think with a voice like that, she'd be able to speak up.  If you don't respond to a simple question, you're probably going to get deleted if it's suspicious, or suss as the kids would say these days.

John S
PDX OR

Avatar
Larry_G
226 Posts
(Offline)
11
July 24, 2024 - 11:19 am

Both recent untidybalk posts are spam (February blossoms, Olive tree...).

Note that the hidden link text is now being placed near the right margin or some blank lines down, requiring a mouseover

of the entire webpage area to reveal the spam link text.

Such crude efforts will remain easy to detect and remove regardless of improvements in AI text portion.

Avatar
jafar
884 Posts
(Offline)
12
July 24, 2024 - 11:22 am

Thanks Larry.  If you flag the post we'll get an email with a direct link for easy banning and deletion.

Avatar
John S
PDX OR
3023 Posts
(Offline)
13
September 20, 2024 - 9:05 am

A spammer threw in 5 SPAM messages last night in a row, capped off by a message in this forum, pretending to complain about SPAM.

John S
PDX OR

Avatar
Chris M
Philomath, OR
185 Posts
(Offline)
14
September 20, 2024 - 1:14 pm

I have found if you hit quote it will show anything hidden. You can then cancel and report.

Avatar
Rooney
Vancouver SW Washington
865 Posts
(Offline)
15
September 20, 2024 - 10:05 pm

I have not seen these latest. Actors posts usually contain outbound links to gaming sites and if using a PC the easiest way to see them (for me at least) is using the (a) mouse and invoking the posters image/icon of a slanted 8 (the servers permalink). Then all links in the users post hidden or not get found by invoking the (b) keyboard tab key. 

Avatar
John S
PDX OR
3023 Posts
(Offline)
16
September 21, 2024 - 9:48 am

At the risk of being insulted, I'm going to ask what this means, because I don't understand:

invoking the posters image/icon of a slanted 8 (the servers permalink).

 

If I can understand it, I might be able to prevent more SPAM.

John S
PDX OR

Avatar
Rooney
Vancouver SW Washington
865 Posts
(Offline)
17
September 21, 2024 - 6:36 pm

I found out you would not have never understood my way that I use to see the links in actors posts that I described to you previously unless you're logged out. Sorry about that John. If your logged out many of the markups for jumping around that are there when logged in go away when logged out. So log out and you can go to Larry's post #9 for a practice, and mouse click the figure 8 icon next to his numeral 9 and start pressing the keyboards tab key. If it takes you twice to get to an object in the next post (ie. #10) then it's because an object is in there via Larry's post #9 that contains a hyperlink from the object. Then practice comparing any of the other trusted sources such as yourself as long as you know you never published a link the way Larry did and count again. So compared to his you while playing on yours should have one tab key less, and that's how you might best know how to quickly spot hidden objects (that are advertised hyperlinks) from new registered members.

Avatar
Chris M
Philomath, OR
185 Posts
(Offline)
18
September 21, 2024 - 7:06 pm

I don't understand what Rooney is describing either. I still think just hitting quote to see links is easier.

Avatar
Larry_G
226 Posts
(Offline)
19
September 22, 2024 - 12:34 pm

The Rooney method described above does use the least number of keystrokes and mouse actions to locate links, hidden or not.

Plus not having to be logged in. But perhaps a moderator then has to log in to take action.

The tab key in this context will also pause on any posted images, and it also pauses on the "Visit my website" link below a member's profile area to the left of the main post.

So far I don't think any spams have included on-topic images, so this should not confuse the tab process.

The tab pause sequence on a forum page can be reversed using Shift+Tab, so you can work starting at the newest (last) post.

Avatar
John S
PDX OR
3023 Posts
(Offline)
20
September 22, 2024 - 2:58 pm

Thanks Rooney,

That makes more sense now. I will try to do that sometime.

John S
PDX OR

Avatar
John S
PDX OR
3023 Posts
(Offline)
21
November 13, 2024 - 7:21 am

You all have been doing a fantastic job of letting us know about SPAM.  Some of the SPAM is obvious, like buy these things! I have just been banning them by myself without help.   Others have stuff hidden. You have trained me how to see some of it, which I appreciate. For example, quote or reply and it becomes visible.  On others, I still can't see it, but you explain why it's SPAM.  Great work! There are some uninteresting posts that seem banal and inane, but I don't necessarily feel empowered to ban them until you explain why.  Keep up the great work.

John S
PDX OR

Avatar
Larry_G
226 Posts
(Offline)
22
November 16, 2024 - 12:22 pm

Recent first-timer posts of mid-Nov2024 do not have any hidden keyword links;

they are simply non-sequiturs or offer outdated advice that could waste the time of other readers.

If they do not clarify their postings within a couple of days after established member's rebuttals,

then deletion would not be a big loss to the Forum.

Avatar
John S
PDX OR
3023 Posts
(Offline)
23
November 16, 2024 - 2:26 pm

That's a fine line. I want people who are interested in growing fruit to have a place where they can learn more.  I don't want the HOS forum to be an expert's only forum.  "Go away kid, you don't know enough!" is not a motto I want to use.  At the same time, if someone is suspected of SPAMMING the group, I wouldn't mind banning them.  I'm trying to be careful about it, and I appreciate you all letting me know what they're doing. I 'm  learning about it, but I'm sure I don't know as much as a lot of you.

John S
PDX OR

Avatar
Larry_G
226 Posts
(Offline)
24
November 30, 2024 - 2:27 pm

John, I am assuming your recent comment on your thinning pawpaws topic was the result of

a first-timer posting who commented on the time-consumption of hand-pollinating.

There were none of the typical spam markers in the post, but the first-timer, the brevity of the comment, the odd user name,

and the lack of any positive forum contribution of the text led me to do a Web search of the posters' forum name.

(Perhaps Jafar saw something I didn't.)

They appeared on quite a few websites, usually just one posting and all quite recent, and in an odd variety of topics unlikely for one person.

On one site their account had already been banned. I would be curious to know if the quoting function

of this forum can be automated, because that is what that poster did. So it could be someone just playing around.

Still, it adds nothing to the forum. I would not expect any moderator to take the time and search around as I occasionally do

just as a matter of curiosity. It might be quicker to just post a follow-up question to those posters, and if no response for days, delete them.

Avatar
John S
PDX OR
3023 Posts
(Offline)
25
December 2, 2024 - 7:12 pm

Great info.
Thanks Larry G.

Avatar
Larry_G
226 Posts
(Offline)
26
December 20, 2024 - 12:07 pm

Topic: Fruitscape Designers, recent posting dated 20dec2024.

The keyword in this posting is the non-sequitur "Tucson".

username legacylandscaper can be traced to the website of the same name.

They specialize in landscaping and only mention use of "toolbox plants"

No mention of fruit or fruiting plants.

This is a Tucson landscaper/hardscaper.

First posting for the username and 9 years after the fact.

Avatar
jafar
884 Posts
(Offline)
27
December 20, 2024 - 2:29 pm

Okay.  Banned and deleted.  

What do you mean by 9 years after the fact?

Avatar
Larry_G
226 Posts
(Offline)
28
December 21, 2024 - 11:51 am

All postings except the last one were from 2015.

Avatar
John S
PDX OR
3023 Posts
(Offline)
29
April 17, 2025 - 9:12 am

You all have done a great job of showing me how to detect some of the SPAM.  I deleted more today.  The quoting strategy is excellent.  However, there are a few more where I can't tell if they are SPAM or not, so keep letting me know, with your more sophisticated eyes, if you suspect that something is SPAM.  It's helping.

On some of them, they are the last post, and I can question them. No response, deletion. But on others, I can't tell.

Thanks,

John S
PDX OR

Avatar
Rooney
Vancouver SW Washington
865 Posts
(Offline)
30
April 18, 2025 - 1:40 am

They try to find hiding places. There are three more from this month you had missed. You can get them shown by placing and activating the following line in the forums search:

color: #ffffff

That line is part of the code that makes links not show but I think I can get you to see them through viewing the post through the print activation screen. Each of those three will display viewable texts in the quotes section for each. The added text is there to see if or when your printer options are configured to include toggling 'background colors' one way or the other.

I will email you a screenshot to clarify what I expect your screen to see if it makes it any easier?

Avatar
jafar
884 Posts
(Offline)
31
April 18, 2025 - 9:10 am

Neat trick Rooney, thanks.  I'd already pulled up several of those to review.

Avatar
jafar
884 Posts
(Offline)
32
April 18, 2025 - 9:12 am

What do you think of this post?

 

https://forums.homeorchardsoci.....-1/#p40089

Avatar
Larry_G
226 Posts
(Offline)
33
April 18, 2025 - 3:05 pm

I get 783 results when entering color: #ffffff in the search box.

color: #ffffff equal to color: "white")

And that still shows against the pale green background.

So I am missing something about this new reveal process.

Those posts with spam links can be a penalty to the Forum.

I think those posts with a generic and perhaps AI-generated content, that are echoic or agreeable to previous posts, may be harmless unless they induce boredom by sheer numbers.

They often do not offer or solicit anecdotal or academic input to further the topic, but may ironically be beneficial to the Forum metrics, showing more traffic to the Forum website.

Avatar
jafar
884 Posts
(Offline)
34
April 18, 2025 - 3:45 pm

Strange, I only get 6 and 2 of them are in this thread.

Avatar
John S
PDX OR
3023 Posts
(Offline)
35
April 18, 2025 - 8:34 pm

jafar said
What do you think of this post?

 

https://forums.homeorchardsoci.....-1/#p40089

  

I get the red squiggles on anything the computer doesn't understand, including many varieties in my posts, and your name, Jafar.

John S
PDX OR

Avatar
Rooney
Vancouver SW Washington
865 Posts
(Offline)
36
April 18, 2025 - 8:40 pm

jafar said
Neat trick Rooney, thanks.  I'd already pulled up several of those to review.

  

You're welcome.

@ Larry, stay on your way of blocking in text to reveal the tricks misquoted text if that's working for you.

My explanation is, as explained before, opening the post in a print mode and then in the options you can toggle background colors on and off and the translucency blinks the word on and off. Which is hard to miss and that's my point. That somebody missed it before.

Avatar
Larry_G
226 Posts
(Offline)
37
April 19, 2025 - 3:14 pm

Jafar:

You get two in this thread now because I literally typed #ffffff twice, above.

I now get 785 results for color: (783+2 because of my recent entries).

** The trick is just to search for #ffffff, that gets 7 results. Do not use Color:

Then, in the search results, when topic link is opened, on my FF browser, after a brief pause, the page will auto-scroll the offending posting to the top of the page.  There, with a mild squint, the white-text link can be seen, or moused over for better viewing.

A couple of these are currently legit, but a handful of spam links are still present.

So Rooney: yes, good trick; simple #ffffff search will include manageable results that will auto-scroll to page top, saving moderator's time.

Can use mouse-over or squint in lieu of print mode.

...but many AI postings do not employ hidden links.

Avatar
jafar
884 Posts
(Offline)
38
April 19, 2025 - 5:39 pm

As a moderator I can edit the post and then the link shows.

Avatar
Rooney
Vancouver SW Washington
865 Posts
(Offline)
39
April 22, 2025 - 9:59 am

A month ago I had started tracking forum statistics at the bottom for the number of new registries and there has been a five fold increase. The last 24 hours alone exceeded 10 for the first time.

As moderators who delete registries (AI) over the last month, are your deletions about in line with this five fold increase?

Assuming the answer is yes then about 90% of spam content could be getting screened out by the math, so maybe that's a pretty good screen to be left in place against AI. This five fold increase is impossible to explain by a sudden rush of human interest in gardening alone unless young school age individuals are currently on spring break. 

I surveyed a few comments via topics of spam/forums etc; including trends, and various administrators are using various tactics that they claim can work for a while. The best bet is to be 'unique', or in other words be clever enough to invent a new way to counter circumvent spam that's unique enough to last as a wall long time.

So here's one thought that I think could last and it comes from myself as a regular user of this form (not moderator) who's seen in the last changes in PHP syntax (scripting) that somebody created an UNANSWERED TOPICS function at the top. 

Okay then, whoever scripted that in PHP which amounted to knowing a first post should also be the coder to monitor first time posters which as we know AI/bots usually are. These first time posters when they make these posts should temporarily be brought through to a separate forum topic page. Like I said just temporarily. Maybe 2 weeks.

In that category regulars such as myself can still short notice flag them based on our general understanding of gardening etc; including coding.

Avatar
ET
Junction City, Oregon
23 Posts
(Offline)
40
April 22, 2025 - 1:06 pm

I noticed that by toggling reader mode (that is, clicking the tiny document icon right next to the space for URL) in Firefox browser it's easy to reveal the white hidden link of (some) spam posts.

Avatar
Rooney
Vancouver SW Washington
865 Posts
(Offline)
41
April 22, 2025 - 2:43 pm

ET said
I noticed that by toggling reader mode (that is, clicking the tiny document icon right next to the space for URL) in Firefox browser it's easy to reveal the white hidden link of (some) spam posts.

  

If my suggestion of committing to put newest posters comments in a viewable public access then that folder can have different styled rules applied to it so that the background changes the kind of contrast your talking about automatically. When one of us sees nothing fishy about the post then the idea is to click a link that lets it pass into the intended forum as desired by the new member. When-or-If we get ranking permissions to act as 'approving people' as such then we must keep out virus definitions current so as to never unintentionally release our forum passwords or the added expense of hiring out these coding changes would be a lost expense.

Avatar
John S
PDX OR
3023 Posts
(Offline)
42
April 23, 2025 - 12:56 pm

ET said
I noticed that by toggling reader mode (that is, clicking the tiny document icon right next to the space for URL) in Firefox browser it's easy to reveal the white hidden link of (some) spam posts.

  

Fantastic idea, ET! I used that and was able to decipher a couple of the SPAMs that I couldn't tell before. Thanks,

John S
PDX OR

Avatar
Larry_G
226 Posts
(Offline)
43
April 23, 2025 - 4:00 pm

The current list of spam link locations is:

avocado-tree-indoor-plant #6 (after the quoted text)
topworking-without-a-nurse-branch #6 (after the quoted text)
medlar-time #25 (nice avatar to boot)

Avatar
John S
PDX OR
3023 Posts
(Offline)
44
April 24, 2025 - 9:26 am

Thanks Larry,

Great work.

John S
PDX OR

Avatar
John S
PDX OR
3023 Posts
(Offline)
45
April 24, 2025 - 9:32 am

The one right after that on avocados was SPAM too.  Easy to see with ET's new technique.

John S
PDX OR

Forum Timezone: America/Los_Angeles
All RSSShow Stats
Administrators:
Idyllwild
simplepress
Moderators:
jafar
Marsha H
Viron
Top Posters:
John S: 3023
Rooney: 865
DanielW: 519
PlumFun: 495
Reinettes: 429
jafarj: 422
davem: 394
sweepbjames: 263
Dubyadee: 248
jadeforrest: 237
Newest Members:
gloriawhitelegge
clarkfolk920678
Mountains4trees
justbart
nathanielgary44
susannahstockton
madelinedelamoth
soonbechtel839
ijrangie8144201
carmelomedlin
Forum Stats:
Groups: 1
Forums: 4
Topics: 2978
Posts: 17373

 

Member Stats:
Guest Posters: 0
Members: 3287
Moderators: 3
Admins: 2
Most Users Ever Online: 445
Currently Online:
Guest(s) 37
Currently Browsing this Page:
1 Guest(s)