I think if you blocked all postings in one particular language, you would get rid of most of the casino spam.

Bagaimana caranya memakai ini

Good question 

Is the hackaday.io Add Project function down?  I get a partial page drawn but no way to upload a file and then it just times out.

Check now

Yup!  Works.  Thank you.

My global feed is overloaded with Chinese fake certificate contents again. Many duplicated postings.  I see others here have posted before about it..

I reported the account "a48"

I also often experience a lot of 500 response gateway timeout errors when I attempt to view anything on the site.

It's becoming so bad for me, that the site is becoming near unusable for me.  ☹️

What's happening?  What measures are being undertaken to filter and block such spamming?

Hello??

Is it just me? - the site was offline for more than 24hours yesterday.  I only have a bit of time over the weekend to update my project's progress - so when its completely offline - Well as I mentioned above, this site is becoming unworkable for me.  Dont want to post links to my project on other social media --- if the site is 'mostly' offline.

I really don't want to move my project to another site - but if its always overloaded with spam and generating 500 errors for extended days - I literally have no choice.

Please don't let the bad operators win!

Dean.

I see the spam account "a48" is still in the global feed!  And the account is followed by "Hackaday the machine Official Hackaday Projects Robot"

Charming....

I am experiencing the same.  Seems the site is online now, but for how long?  It worries me!  This is an important community.

Yep.  Will miss this community.  I have started to explore setting up a project site on GitHub Pages.  But won't be the same.  

And also noticed that the latest posting in the "stack" section has a cross site injection script.  Not sure what it achieve, but it certainly not safe.  This site might be a serious vector for malware and such.

I think I shall be moving away.

It's important, and we're working on the recent stability issues.

I see the response from Richard Hogben, but not able to directly reply.

Thanks for the response Richard.  I guess you are part of a small team - and I do understand the stress and challenging task of working through something like this - been there myself.  

But I would expect a more expansive response.  I have raisd a number of issues, the site is mostly offline -- I think your team needs a more professional communication process, to explain what it understand is happening, and what you are, at a high level , doing to address the immediate issues and the fixes required to prevent it on going.

I mentioned in a previous post you have what appears to be cross-site vulnerability that is being actively exploited.  That can be quite serious and perhaps a potential way for people to take over other accounts - and maybe access linked Tindie accounts!

Perhaps i am wrong but why did the stack entry contain html code and when viewing, appear to be a google search page?

I do hope you sort it out.  I truely do..  But I have made the decision to move my content and leave hackaday.io.  I am only a very small contributor, joined during the pandemic.  I found this place help me a lot through that time.  I have no wish to leave.  But what else can I do? the site seems to be severely compromised.

As I said, I hope it all gets sorted and I wish you the best of luck

It seems the views counter on the project pages has been reset. Now showing numbers *way* small....

I noticed the same. Seems something has gone wrong.

+1.

My low-view projects show view counts that look plausible; others show no view count at all.

It doesn't seem to affect all projects.@Paul McClay 

Checking into this...

Should be back on track again!

I reckon that if your site devs implemented countermeasures against automated pasting of pages you would be able to throttle a lot of the casino and SEO spam. For sure they are not typing their stuff in by hand but pasting with a script. Bona fide users generally do type pages in by hand. And what about rate limiting on posting? Surely no genuine user needs to post more that once per hour on average.

"notifications" has disappeared from my hamburger menu lately. is that a bug or new normal?

Same here, but still in mobile site menu

For me it's gone from mobile also

Making some behind the scenes updates to notifications, they'll be back soon.

Still waiting patiently :) 

Please do not advertise "popular bits" when the project has nothing in it. I received a link to https://hackaday.io/project/195912-custom-car-display and the project Details says "[Details writeup in progress]". 

C'mon guys, what sort of flimsy website have you that lets a spammer post 6998 copies of the same page? Where's the post rate limiting? Where are the countermeasures against a bot automatically filling in fields and submitting?

Examples?

Can't you see the thousands of posts in Chinese on the Global Feed?

They're doing it again

As of now...

Bah can't post pictures in comments? But yeah for me the first few pages of the global feed are all passport adds in Chinese (I assume, based on one image).

I see nothing alarming in the global feed as of 08:20 PDT 2024-May-08. I saw the reports you submitted (thank you) on sites hawking Chinese passports, but I deleted both accounts as soon as I saw their posts. I've never seen thousands of copies of the same page though. Maybe you can get some screenshots of what you're seeing?

Look at the info of one of the bot created accounts and you will see they have posted thousands of pages, by bot software. Maybe they are somehow hiding them from you.

OK, I see a fresh batch of Chinese-language projects this morning, again hawking passports. When I click through to the account that created them, I see 2000+ pages owned by the user, which should get deleted when I delete the account. Unfortunately, I don't see them in the global feed, and they don't show up in the user reports either.

This might be what's behind the outage yesterday -- I'll send it up the chain and see what the devs can do. Thanks for the diligence.

What's worrying is they seem to be able to hide the posts from you which means the site has JavaScript vulnerabilities.

Probably they've managed to create a page with an inline link to an external page that is selective about who can view it, hiding it from site admins.

Looks like the bot spammer is still rampaging on the Global Feed.

Maybe at this point need to auto-ban any user that signs up with a "letter + 2 digits" username... 

@trialexhill I guess they heard you and now it's 2 letters + digit. Better to fix the flaws in this website that allow the spam bot to rampage.

The new fun is a spam bot that created 1000s of accounts overnight. They're all in Chinese and appear identical at first glance, but each is different enough that it's hard to do a mass search and destroy. The good news is that they don't seem to be creating pages or projects, just created a new user and smearing spam all over the front page.

I know this is frustrating, but we are working on it. Thanks for your patience and diligence in reporting problems.

Is there a “quarantine” period for new users/projects until they are publicly accessible? I started documenting a project two days ago. I can see my account and the project when I log in, but I cannot find either my username or my project through the hackaday.io search.

Yes, new users have their posts put into moderation. Your project seems to be visible now.

Thanks!

nice

Solved...

I'm looking for someone who can unblock the no fly zone of my drone project

Is it a policy decision that views per project are no longer updated?

Views should be back on track.

Have views been updated anytime in the past couple of weeks?

What about a home digital  thermostat that displays in 1/2 Fahrenheight degrees, that you can uses 2 batteries or 24 volts to power up?

Hello, I haven't been surfing on hackaday.io for a while, and when this time I login, the contents are displayed by a mixed of language, which are English and Traditional Chinese, which looks really weird. I didn't find a place to switch my display language, and your guess that I read traditional Chinese is also wrong. Maybe you can tell me where I can modify the language option, or you are planning to implement?

Okay, it seems to be a preference in Chrome, that simplified Chinese is prefered than English. But anyway it looks confusing when the conents are not fully translated to a specified language. Thanks

We have most UI translations in place, but user created content is not automatically translated.

Hello, I understand that one of my recent projects posted yesterday, March 4 was removed for containing sponsored content. If I may, I would love to have my project republished without the advertorial sections, as I initially was not aware of the rule.

@Sean Francis Natividad -  I have sent you a private message.

All images from my recent project log (ivee calculator) show up broken today. This isn't the first time when I have problems with pictures in the logs. If uploading photos does not work, please disable it for good and tell us which methods for adding pictures to the logs you approve of.

The images appear to be loading correctly now.

I re-uploaded them a while ago, maybe that's why. Thanks anyway!

Ah ok, may have also been a temporary CDN issue, or when the images are lazy loaded, a javascript issue can prevent them from displaying. In both cases we usually get it resolved because the site would be pretty terrible without working images :(

C'mon guys, you have to make the website harder to spam. You're getting overwhelmed by posting bots. HaD is an attractive target for spammers to spruik their deals.