Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Suggestion: Anti-scam system #16

Open
VForiel opened this issue May 24, 2022 · 4 comments
Open

Suggestion: Anti-scam system #16

VForiel opened this issue May 24, 2022 · 4 comments

Comments

@VForiel
Copy link

VForiel commented May 24, 2022

Verify if the links sent by the users are safe or not and delete or reply to the message to alert the other users and tell them to be careful.

@ZRunner
Copy link
Collaborator

ZRunner commented May 24, 2022

I couldn’t find any reliable API providing the dangerousness of a given website. If you find any, feel free to put it here.

For Discord/Nitro-related scams, there’s already an AI-driven scam detection, which uses words recognition to find and delete scam messages. You can test and enable it with the !antiscam command. Check the documentation by using !help antiscam

@VForiel
Copy link
Author

VForiel commented May 24, 2022

A free APi will be hard to find...

Another way to make this system is to keep a list of "trusted" URLs, and when there is an unknown URL, the bot send a message to alert the users and ask them to check the URL using a website such as https://www.urlvoid.com/

Below the message, the bot display 3 buttons : "it's safe" and "report". If a link have more than a certain ratio of positive feedback, then the URL is added to the trusted list.

To prevent a URL that is no longer safe, we can imagine the following command :
reportlink <link>

@ZRunner
Copy link
Collaborator

ZRunner commented May 24, 2022

Would the URLs list be managed per server or globally? Also wouldn't that just spam the channel whenever a link is posted, as it would be hard to manually whitelist each and every safe-ish website?

@VForiel
Copy link
Author

VForiel commented May 25, 2022

Hmmm, we can immagine the following command:

/link alerts <enable/disable>

to manage if the bot send an alert message or not.

Also, the global list can be powerfull to avoid the spam for most of shared links (that usually redirect to popular websites).

However, this global list need to not be easily manipulated by malicious people that artificially give a good ratio for a malicious link. In order to avoid that, the number of positive feedback must be big (in addition to the ratio).

It imply a new issue, for servers that want to trust a link. Thus, this system may need a second list, managed per server, where the links are marked as trusted by moderators or by a smaller amount of positive feebacks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants