freenode / Sigyn

A Limnoria plugin to fight abuse on IRC networks
Other
46 stars 31 forks source link

"suspicious joins of..." notes should ignore cloaking fake-joins #16

Closed fndax closed 6 years ago

fndax commented 6 years ago

Sigyn sends a message when she detects a suspiciously-large number of joins from one person:

19:49 <+Sigyn> NOTE: [#freenode] suspicious joins of someuser alts (gecos)

This detection does not currently take into consideration whether the JOIN is immediately after a "Changing host" fakequit, and thus triggers incorrectly more often than not. It would probably be worth coding it to do so, or perhaps changing the default threshold to consider this case.

ncoevoet commented 6 years ago

we have reviewed a bit the mass join detection in lastest commit, after fine tunning we may suggest some per channel ban/quiet or others modes, stay tunned