Comment on Spam protection measures

  1. EchoEkhi Fri 26 Apr 2024 11:52PM UTC

    As someone who runs a comment bot and on behalf of people who rely on accessibility features to use the site, thank you so much for making the decision to only enable CAPTCHAs for guests, and not for logged-in users, so my bot can remain operational. Kudos to the sysadmins who probably had to wrangle Cloudflare WAF rules to implement that!

    Can I please ask if AD&T is actively considering the removal of the ability to embed images in comments?

    Last Edited Fri 26 Apr 2024 11:53PM UTC

    Comment Actions

    1. Eli0t Sat 27 Apr 2024 12:55AM UTC

      Magnus Bane and Alec Lightwood from the TV show Shadowhunters pressing their foreheads together

      Seconding this question. Ill be very upset if logged in users lose the ability to embed images in comments

      Comment Actions

    2. Lady_Ganesh Sat 27 Apr 2024 01:09AM UTC

      Gat from Saiyuki, looking to the right

      As one of the people who was unpleasantly surprised with an image in comments, I would like to at least be able to automatically screen images in comments. The image I received wasn't disturbing (aside from 'wow, I wasn't expecting that') but if someone's spamming they could easily choose something really upsetting.

      EDIT: I should second the thank you for using CATPCHA for guests only too!

      Last Edited Sat 27 Apr 2024 01:09AM UTC

      Comment Actions

    3. Brian Austin (AO3_ADT) (Official) Sat 27 Apr 2024 01:12AM UTC

      Hi, EchoEkhi!

      Thanks for asking about removing embedded images in comments. We already do that on news posts, but we don't currently intend to do it for work comments. However, because this is an evolving situation, it's difficult to make any guarantees about measures we may need to take in the future.

      Brian
      Archive development team

      Comment Actions

      1. InsanityPrelude Sat 27 Apr 2024 07:50PM UTC

        My main worry wrt embedded images is that since we know site staff and volunteers have been attacked with CSAM before, it's not a stretch to imagine it happening to users too. I really hope there's at least some kind of filter in place for that (I know Cloudflare has one, for example: https://developers.cloudflare.com/cache/reference/csam-scanning/)

        Last Edited Sat 27 Apr 2024 07:51PM UTC

        Comment Actions

        1. Account Deleted Thu 09 May 2024 11:56PM UTC

          I agree. It probably would be much safer to block images, I saw someone on Reddit who had been attacked in the comments with CP put there which has understandably traumatised them, especially as they wrote their fics to process their childhood trauma. If they don’t have the filter engaged, it’s probably be a good idea to.

          Comment Actions