Forum Trolls

Jackburton

Gone Fish'n
I've run a number of large forums and in my experience it is virtually never trolls but rather one guy or occasionally a guy and his buddy.

Most forum troublemakers fall into one of a few categories.

First type is a low skill-level person who just spams forums with nonsense posts, floods forums with a large number of threads and/or registers several usernames. Typically an immature person, usually young.

Type two is not as obvious in trying to create problems. His posts will disturb a forum and rile people up without being obvious. This person is typically more intelligent than type one and often not as young.

Type three...this person straight up attacks a forum looking to exploit vulnerabilities, either by brute force attacks/dos/ddos, sql injection/cross site scripting to obtain control, assume established forum identities or cause destruction of database(s) or files.

All three types typically just do it for fun. Types 1 & 2 do it mostly for entertainment whereas type 3 typically sees it as a game/challenge or has a grudge against the site.

The problem is that you can't really stop them if the person knows what they're doing. If they connect via a proxy they can change their IP address at will and as such can just keep registering new user accounts. The only real way to stop it is to set registration to manual approval which for a larger forum is a real headache and if the person registers from a mainstream email domain and a believable screen name you can't tell real from fake. If you get to a point where you suspend all new registrations the person has essentially won because they've caused you to shut down registrations.

Cheryl has blocked most of the throw away mail domains, but if the person spends a few extra minutes to register a yahoo, gmail etc they can still register...and new throw away domains popup all the time.

My theory is that we have one tool registering all these usernames fitting the type 1/2 profiles suggesting the person isn't terribly intelligent or technically savvy, however the most recent throw away domain used was devnullmail.com. That in itself doesn't mean anything, however the use of that specific domain means that there is a chance the person has at least a basic programming or technical background as /dev/null symbolizes "nothing" in programming/systems administration. If you wanted the output of something to get trashed or go nowhere you would point it to /dev/null....
And people call us stupid truck drivers.
 

cheryl

I started this.
Staff member
I've run a number of large forums and in my experience it is virtually never trolls but rather one guy or occasionally a guy and his buddy.

Most forum troublemakers fall into one of a few categories.

First type is a low skill-level person who just spams forums with nonsense posts, floods forums with a large number of threads and/or registers several usernames. Typically an immature person, usually young.

Type two is not as obvious in trying to create problems. His posts will disturb a forum and rile people up without being obvious. This person is typically more intelligent than type one and often not as young.

Type three...this person straight up attacks a forum looking to exploit vulnerabilities, either by brute force attacks/dos/ddos, sql injection/cross site scripting to obtain control, assume established forum identities or cause destruction of database(s) or files.

All three types typically just do it for fun. Types 1 & 2 do it mostly for entertainment whereas type 3 typically sees it as a game/challenge or has a grudge against the site.

The problem is that you can't really stop them if the person knows what they're doing. If they connect via a proxy they can change their IP address at will and as such can just keep registering new user accounts. The only real way to stop it is to set registration to manual approval which for a larger forum is a real headache and if the person registers from a mainstream email domain and a believable screen name you can't tell real from fake. If you get to a point where you suspend all new registrations the person has essentially won because they've caused you to shut down registrations.

Cheryl has blocked most of the throw away mail domains, but if the person spends a few extra minutes to register a yahoo, gmail etc they can still register...and new throw away domains popup all the time.

My theory is that we have one tool registering all these usernames fitting the type 1/2 profiles suggesting the person isn't terribly intelligent or technically savvy, however the most recent throw away domain used was devnullmail.com. That in itself doesn't mean anything, however the use of that specific domain means that there is a chance the person has at least a basic programming or technical background as /dev/null symbolizes "nothing" in programming/systems administration. If you wanted the output of something to get trashed or go nowhere you would point it to /dev/null....
Nice post. Gives a good overview of the trolling situation.

In the 14 years this site has been around there has definitely been some grudge based forum trolling, and a few ham handed dos attacks on our server that took the site offline a few times.

It always amazes me how much time and energy a few people will waste just to generate a little meaningless internet drama.
 

you aint even know it

Well-Known Troll
Troll
I've run a number of large forums and in my experience it is virtually never trolls but rather one guy or occasionally a guy and his buddy.

Most forum troublemakers fall into one of a few categories.

First type is a low skill-level person who just spams forums with nonsense posts, floods forums with a large number of threads and/or registers several usernames. Typically an immature person, usually young.

Type two is not as obvious in trying to create problems. His posts will disturb a forum and rile people up without being obvious. This person is typically more intelligent than type one and often not as young.

Type three...this person straight up attacks a forum looking to exploit vulnerabilities, either by brute force attacks/dos/ddos, sql injection/cross site scripting to obtain control, assume established forum identities or cause destruction of database(s) or files.

All three types typically just do it for fun. Types 1 & 2 do it mostly for entertainment whereas type 3 typically sees it as a game/challenge or has a grudge against the site.

The problem is that you can't really stop them if the person knows what they're doing. If they connect via a proxy they can change their IP address at will and as such can just keep registering new user accounts. The only real way to stop it is to set registration to manual approval which for a larger forum is a real headache and if the person registers from a mainstream email domain and a believable screen name you can't tell real from fake. If you get to a point where you suspend all new registrations the person has essentially won because they've caused you to shut down registrations.

Cheryl has blocked most of the throw away mail domains, but if the person spends a few extra minutes to register a yahoo, gmail etc they can still register...and new throw away domains popup all the time.

My theory is that we have one tool registering all these usernames fitting the type 1/2 profiles suggesting the person isn't terribly intelligent or technically savvy, however the most recent throw away domain used was devnullmail.com. That in itself doesn't mean anything, however the use of that specific domain means that there is a chance the person has at least a basic programming or technical background as /dev/null symbolizes "nothing" in programming/systems administration. If you wanted the output of something to get trashed or go nowhere you would point it to /dev/null....

Looks like we are dealing with a tough guy here. Holy grail, let me sit back and enjoy my popcorn.
 

bbsam

Moderator
Staff member
Nice post. Gives a good overview of the trolling situation.

In the 14 years this site has been around there has definitely been some grudge based forum trolling, and a few ham handed dos attacks on our server that took the site offline a few times.

It always amazes me how much time and energy a few people will waste just to generate a little meaningless internet drama.

meaningless internet drama is one of my few thoroughly enjoyable vices!
 
meaningless internet drama is one of my few thoroughly enjoyable vices!

Have you tried porn?


I'm just disappointed that the thread was deleted. I really wanted to pursue the story of how Dave, Tos, Klein, and I were gay prostitutes....................for strictly entertainment purposes of course.
 

BSWALKS

Fugitive From Reality
Looks like it has become a full time job, just dealing with the trolls.
How bout the newest one, Juan Diego?

I've run a number of large forums and in my experience it is virtually never trolls but rather one guy or occasionally a guy and his buddy.

Most forum troublemakers fall into one of a few categories.

First type is a low skill-level person who just spams forums with nonsense posts, floods forums with a large number of threads and/or registers several usernames. Typically an immature person, usually young.

Type two is not as obvious in trying to create problems. His posts will disturb a forum and rile people up without being obvious. This person is typically more intelligent than type one and often not as young.

Type three...this person straight up attacks a forum looking to exploit vulnerabilities, either by brute force attacks/dos/ddos, sql injection/cross site scripting to obtain control, assume established forum identities or cause destruction of database(s) or files.

All three types typically just do it for fun. Types 1 & 2 do it mostly for entertainment whereas type 3 typically sees it as a game/challenge or has a grudge against the site.

The problem is that you can't really stop them if the person knows what they're doing. If they connect via a proxy they can change their IP address at will and as such can just keep registering new user accounts. The only real way to stop it is to set registration to manual approval which for a larger forum is a real headache and if the person registers from a mainstream email domain and a believable screen name you can't tell real from fake. If you get to a point where you suspend all new registrations the person has essentially won because they've caused you to shut down registrations.

Cheryl has blocked most of the throw away mail domains, but if the person spends a few extra minutes to register a yahoo, gmail etc they can still register...and new throw away domains popup all the time.

My theory is that we have one tool registering all these usernames fitting the type 1/2 profiles suggesting the person isn't terribly intelligent or technically savvy, however the most recent throw away domain used was devnullmail.com. That in itself doesn't mean anything, however the use of that specific domain means that there is a chance the person has at least a basic programming or technical background as /dev/null symbolizes "nothing" in programming/systems administration. If you wanted the output of something to get trashed or go nowhere you would point it to /dev/null....
Sorry, if you thought I came off disrespectful to Cheryl in any way.
My point in my post was that the troll was posting more garbage, around the same time she was posting on this thread.
 

cheryl

I started this.
Staff member
Sorry, if you thought I came off disrespectful to Cheryl in any way.
My point in my post was that the troll was posting more garbage, around the same time she was posting on this thread.
You post actually brought that account to my attention. Thank you.
 

Bagels

Family Leave Fridays!!!
Loyal Teamster,

I noticed you're trolling once again, creating & conversing with multiple accounts.

It's currently just past 3:30PM in San Diego. According to Accuweather, it's mostly sunny, 80 friend and low humidity. I live in the Midwest. The last two mornings, it dropped into the 40s here -- during what's traditionally the hottest & most humid month in my area. Just how bad was it? UPS had the heat turned on. You're young. You own a crappy Honda older than yourself. Get out and enjoy life!!!
 

cheryl

I started this.
Staff member
Could BC just lock the door for new users for a while?
I had every new registration queued for my approval for a couple of days this week but it is not always easy to determine which ones are going to turn into a problem. The other problem is that I'm not always in front of my computer so some new accounts wound up waiting several hours for approval.

Over the years it's all been done here before: trolling, denial of service attacks and co-ordinated porn bombing campaigns. Then there was the time a disgruntled user tracked me down and posted pics of my house as a threat.

Eventually this silliness will fade away too.
 
I had every new registration queued for my approval for a couple of days this week but it is not always easy to determine which ones are going to turn into a problem. The other problem is that I'm not always in front of my computer so some new accounts wound up waiting several hours for approval.

Over the years it's all been done here before: trolling, denial of service attacks and co-ordinated porn bombing campaigns. Then there was the time a disgruntled user tracked me down and posted pics of my house as a threat.

Eventually this silliness will fade away too.

​Then there was the time that guy posted boudoir pics. Anthony something or another. What ever became of him?
 
Top