-
-
Notifications
You must be signed in to change notification settings - Fork 93
Description
Is your feature request related to a problem? Please describe.
TJBot has many features to detect scams, either by finding suspicious patterns in message or via the ignore-me channels, but they both have problems:
- Patterns
-
- It appears that stacktraces are often falsely flaged, which is a problem, and while there are effort to make the pattern more and more complex, there are still many false positives.
- Ignore-me
-
- Regular users tend to put messages in ignore-me, usually because they are curious, and usually after a scam or other user put a message here, which made the channel white, leading other users here.
-
- Ignore-me also tend to have very little true positives, here are the stats
-
-
- 25% true positives, so 75% are false positives
-
-
-
- Each user who see this channel has 8% chance to post a message in it
-
The advantage of this new feature is that it should have little to no false positive and also take the same niche as the ignore-me channel in the way that it won't flag the bot at the first time, but if the bot put enough messages, in ignore-me case, the bot will reach this channel, and in this new feature, after enough messages, the bot will be flaged automatically.
This is useful since ignore-me is the biggest problem currently because it causes a lot more work for the mods while not doing much, and it would also allow the pattern feature to be less strict, falsely flaging less.
Describe the solution you'd like
- First of, storage, either a DB or a local cache can be used, and while the following mention a DB, it's probably better to just use a cache.
- Each time a user post a message in a channel, an entry(userId, channelId, messagehHash, timestamp) is saved in the db (and override previous entry if needed), key is underlined.
- If after saving into the db, TJBot notices that there are at least 3 entries with same userId, and messageHash, but different channelId, the user gets quarantined.
- Every hour, every entry that are older than an hour gets deleted.
Describe alternatives you've considered
- Don't do anything and assume that the currently situation is fine.
- Continue to improve the patterns.
- Continue to improve the patterns and archive ignore-me.
- Add a feature so it's easier to unquarantine (currently WIP by Alathreon, no Issue currently, and only for ignore-me currently), this one can be made in combination with all other choices.
Additional context
This feature is mostly here because of the mods and the users being both annoyed for handling the false flaging and being false flaged respectively.