Date   

locked Re: Spammer attack

David P. Dillard
 

This is an excellent solution. Most moderators add people to their lists at a glacial rate and no spammer will have the patience to add only twenty new members each day, I suspect. One can cross that bridge when it comes if I am wrong about the second point.



Sincerely,
David Dillard
Temple University
(215) 204 - 4584
jwne@temple.edu

On Tue, 3 May 2016, Mark Fletcher wrote:

Hi All,
I wanted to follow up on this. To reiterate what happened: Sunday/early Monday, a spammer created
some groups and then used the invite function to send invites to about 600k people. He shouldn't have
been able to do that, but multiple bugs interacted to allow him to do that. (He didn't include a
custom message with the invites and no actual spam was sent to these people, but still).
I have re-enabled the Invite and Direct Add functions, with a change. Now, if you invite/direct add
more than 20 people in a 24 hour period, your invite/direct add will be moderated and subject to
being approved by me, which I will try to do quickly. On average, it appears that people only invite
1 or 2 people at a time, so I think this will be a low impact change. I'm open to upping the 20
number if it does affect a lot of groups.
Unfortunately, I was unable to salvage the corrupted mail queue. But I think I found and fixed the
reason it become corrupted in the first place. I don't believe that there were any messages in there
that we hadn't tried to send at least once, but I'm not positive.
I also spent considerable time reviewing various security measures used with the servers and
strengthened some things (note, the service was not hacked in any way, but it's a good reminder to
review these things on a regular basis).
This was a lot of work in a short amount of time; the support email queue has grown a bit as I've
concentrated on this. I hope to answer all the emails by tomorrow afternoon and get back to the
various projects I was working on, including the complete export of all aspects of a Yahoo Group. I
appreciate your patience.
Please let me know if you have any questions.
Thanks,
Mark


locked Re: Spammer attack

 

Hi All,

I wanted to follow up on this. To reiterate what happened: Sunday/early Monday, a spammer created some groups and then used the invite function to send invites to about 600k people. He shouldn't have been able to do that, but multiple bugs interacted to allow him to do that. (He didn't include a custom message with the invites and no actual spam was sent to these people, but still).

I have re-enabled the Invite and Direct Add functions, with a change. Now, if you invite/direct add more than 20 people in a 24 hour period, your invite/direct add will be moderated and subject to being approved by me, which I will try to do quickly. On average, it appears that people only invite 1 or 2 people at a time, so I think this will be a low impact change. I'm open to upping the 20 number if it does affect a lot of groups.

Unfortunately, I was unable to salvage the corrupted mail queue. But I think I found and fixed the reason it become corrupted in the first place. I don't believe that there were any messages in there that we hadn't tried to send at least once, but I'm not positive.

I also spent considerable time reviewing various security measures used with the servers and strengthened some things (note, the service was not hacked in any way, but it's a good reminder to review these things on a regular basis).

This was a lot of work in a short amount of time; the support email queue has grown a bit as I've concentrated on this. I hope to answer all the emails by tomorrow afternoon and get back to the various projects I was working on, including the complete export of all aspects of a Yahoo Group. I appreciate your patience.

Please let me know if you have any questions.

Thanks,
Mark



locked Re: Spammer attack

Frances
 

Thank you for being so clear and open about this.

Stuff happens! Sorry that it has to become a big job for you, though.

Frances_._,_._,_


locked Spammer attack

 

Hi All,

Yesterday afternoon, a spammer created a couple of groups and then used the invite feature to invite a few hundred thousand people to his spam lists. We had restrictions in place against inviting that many people, but there was a bug and it didn't work. I disabled the groups and re-did the restriction conditions for inviting. Early this morning, he struck again, and unfortunately was able to exploit a different hole in the invite process to send out a lot of invites to his spam groups. I have disabled those groups as well.

Until I can implement a better way of preventing invite abuse, I have had to disable the invite feature for all groups.

During my cleanup of his mess this morning, one of the mail queues got corrupted (I don't know how as of yet). That means some email sent in the last 3 hours or so may not have been delivered. I have the corrupt queue and will try to pull the messages out of it, but I'm not sure how successful I will be.

This incident may unfortunately cause some email providers to temporarily block or delay email from Groups.io. 

I have traded emails with this person. At one point yesterday he offered me $200/month to host his 6M person spam list. I told him to go away; he obviously didn't listen.

I sincerely apologize for all of this. Hardening the service (moreso) against these attacks is my number one priority. I'll keep you updated.

Thanks,
Mark


locked Re: signature lines appearing twice #bug

Sylvester 2007DC <sylvester2007dc@...>
 

I will definitely keep a watch out to see if it is something different………….

It is possible that it might be different than I think it is………….

Bach………oh yea, I teach piano for 4 years and up………….when you have 40 students………..well……….it is really important that the right keys are hit!!!!!


Diane
 
There's nothing remarkable about it. All one has to do is hit the right keys at the right time and the instrument plays itself.
-- Johann Sebastian Bach




On May 1, 2016, at 8:54 PM, J_catlady <j.olivia.catlady@...> wrote:

That's not what's happening in my case. When I post an original message, the double signature is there from the get-go. If I see one signature in my draft, there will be two in the eventual message. The only way to get rid of it is to remove the one in the draft.

Oddly, this is not happening in the groups where my signature consists of a single line.

(I do agree with Bach, though. :-)
--
J


It's dumb to buy smart water.



--
J

It's dumb to buy smart water.



locked Re: signature lines appearing twice #bug

 

That's not what's happening in my case. When I post an original message, the double signature is there from the get-go. If I see one signature in my draft, there will be two in the eventual message. The only way to get rid of it is to remove the one in the draft.

Oddly, this is not happening in the groups where my signature consists of a single line.

(I do agree with Bach, though. :-)
--
J

It's dumb to buy smart water.


--
J

It's dumb to buy smart water.


locked Re: signature lines appearing twice #bug

Sylvester 2007DC <sylvester2007dc@...>
 

I am noticing the S Ls are appearing 3 times, but I think it is when members are replying to the thread so each time they reply it will pop another S L at the bottom of the post.  Which is okay with me cuz it tells me how many times they are reply to the same thread and at least their S L is there, yeah!!!!


Diane
 
There's nothing remarkable about it. All one has to do is hit the right keys at the right time and the instrument plays itself.
-- Johann Sebastian Bach




On May 1, 2016, at 4:35 PM, J_catlady <j.olivia.catlady@...> wrote:

A workaround for now is to delete, by hand, the signature line in your draft. Then only one will appear in the final post. (This bug refers to behavior on the web post. I haven't yet checked what happens in email, either sending or receiving.)
--
J

It's dumb to buy smart water.


--
J

It's dumb to buy smart water.



locked Re: log "special notice" #suggestion

 

Hi Mark,

This did not seem to be working as of this morning, I sent two special notices and neither was logged as such, even though the Special Notice members received them.
--
J

It's dumb to buy smart water.


--
J

It's dumb to buy smart water.


locked Re: signature lines appearing twice #bug

 

A workaround for now is to delete, by hand, the signature line in your draft. Then only one will appear in the final post. (This bug refers to behavior on the web post. I haven't yet checked what happens in email, either sending or receiving.)
--
J

It's dumb to buy smart water.


--
J

It's dumb to buy smart water.


locked signature lines appearing twice #bug

 

Let's see if it happens here. As I type this, I see only one signature line. After I post, if this behaves according to what I've seen in my other posts (on other groups) this morning, there will be two. :-)
--
J

It's dumb to buy smart water.


--
J

It's dumb to buy smart water.


locked taking over a group

Marvin Hunkin <startrekcafe@...>
 

Hi. How do I take over a group, does the current group owner, give me the ability for him or her to transfer the ownership, and also I just ask friends, to be co-admins or co-moderators.

How do I go about this?

Thanks.


locked Add links functions

Benoît Dumeaux <dread_axefr@...>
 

Add functions



locked Re: Delete selection of messages

Benoît Dumeaux <dread_axefr@...>
 

On Tue, Jan 19, 2016 at 11:23 am, Benoît Dumeaux <dread_axefr@yahoo.fr> wrote:


Maybe it's possible to give the possibility to delete lot of messages by batch
Same thing for merge messages.


locked Re: Facebook pages and Groups.io

Benoît Dumeaux <dread_axefr@...>
 

Hashtag and moderating checkbox is good idea!

Dlvr.it could be use for all the messages or only thread because it's possible to don't post the message with some words ("re:" for example)

Facebook Group or Page same battle to my thing.

Flickr have a thing like this for post photos directly to Facebook.


locked Re: Facebook pages and Groups.io

 

Mark,

Currently the Facebook integration is one way, from Facebook into a
Groups.io group. How would you like the reverse integration to work? All
messages posted to your group get posted to Facebook? If not all, how
would you want to select which ones?
Use of a Hashtag to designate posts that go to Facebook sounds like it would make sense. Similar to having a Hashtag to mark posts that came from there.

That will work well with the "Moderated" and/or "Moderators Only" checkboxes - allowing the group management to control message content sent to Facebook.


On this topic, is integration only for Pages, or also for Facebook Groups?

-- Shal


locked Re: Ability to change file name in Emailed Photos File

Benoît Dumeaux <dread_axefr@...>
 

Agree too
👍


locked Re: Delete selection of messages

Benoît Dumeaux <dread_axefr@...>
 

Up


locked Re: Photos Wishlist Thread #suggestion

Benoît Dumeaux <dread_axefr@...>
 
Edited

* Add People can view to the group photos section option or give the to members the public option.
* Send Facebook notification when new photo is send to the photos section.
* If comments, send notification or the message to messages section


locked Re: Forum view

Benoît Dumeaux <dread_axefr@...>
 


locked Re: Forum view

Benoît Dumeaux <dread_axefr@...>
 

Up.