!!ATTENTION!! - Please Secure Your Passwords!

[Zhs2]

Why hasn't anybody dropped an IP range ban yet? Whomever is probably not going to get bored or move on until his ISP has a chance to cool off.

[wildweasel]

Why hasn't anybody dropped an IP range ban yet? Whomever is probably not going to get bored or move on until his ISP has a chance to cool off.

Because he posts from a wide variety of ranges. He either gets around the ones we set, or we wind up banning half the globe in the process.

[Zhs2]

Sounds like a game of fighting proxies with manual research, then. Either that, or convincing randi we need a better plugin, better blacklists, etc.

[Big C]

Is there anything on PHPBB's end that they can do to deal with this?

[Rachael]

Is there anything on PHPBB's end that they can do to deal with this?

What can they do?

All they do is write the software. It's up to us users to use the tools provided to us. They can't use the tools for us, it's up to us to learn how to use them effectively and/or write our own software to bulk up what's already there.

For us members who aren't moderators, that means utilizing the report feature and not responding to any troll posts.

For the moderators they get their own special set of tools.

If you're looking for a one solution fits all - there simply is none. You cannot create a tool that reads the minds of users and stops them from posting bad things. All you can try to do is stay one step ahead of them.

[randi]

convincing randi we need a better plugin, better blacklists, etc.

There's a difference between blocking random spammers and blocking somebody specifically targetting your board "for fun".

[enderkevin13]

Why are my replies disappearing?

[Gothic]

Why are my replies disappearing?

Because you're not supposed to reply to trolls.

[wildweasel]

Why are my replies disappearing?

Because your replies are to users who have been hijacked. It's easier to just grab the whole group of posts, with replies. Again: DO. NOT. ENGAGE.

[enderkevin13]

Why are my replies disappearing?

Because your replies are to users who have been hijacked. It's easier to just grab the whole group of posts, with replies. Again: DO. NOT. ENGAGE.

I don't know who's hijacked though.

[Rachael]

I don't know who's hijacked though.

Just adopt a general policy of "walk away."

If a post, or set of posts, seem to be trolling (or if something anyone says angers you, or seems to be an attempt at making other people angry), don't respond to them.

It's simple: "This mod sucks. You suck. Go die. <other random nonconstructive crap>" Your response? Report button. Nothing else. Don't respond. Don't even tell them you reported them. Same goes if they mention Brutal Doom, Coraline, or whatever else this guy has been using to get attention.

[Hellsmith1]

You know the one question that I would like to know is that who is doing the hijacking. I would love to find out who because it just now happened to me and I would love to run a security scan to find this creep. You just can't trust anybody in this world anymore.

It's not just your password that there trying to hack and I am not going to say anymore but be careful about what you post because once this hijacker or hacker sees what you post here it could be over with in a heart beat.

You see something suspicious say something to the administrator or moderators privately.

[Hege Cactus]

Is there a way to force a global password reset?
Like, the type that sends everyone the email for password reset and wont allow you to login before that

if so, and if the spammer goes changing the emails on multiple accounts due of that it could be easier to track too

[GFD]

This could potentially lock out many users who no longer have control of the email address they used when they initially created their account.

Relatedly, you should always ensure that the address listed in User Control Panel > Profile > Edit account settings > E-mail address is one that you presently have control over.

[Havoc]

Just changed my password. I even had to use the "I forgot my password" option, as I couldn't remember what password I used for this account