Raid Protection

[thebeanogamer]

Is your feature request related to a problem? Please describe.
Gaius has repeatedly failed to detect and block raids, we need to redo this.

Describe the solution you'd like
Detect high rates of joins? This needs suggestions so it doesn't overreact to things like the flood of users we get when Assess opens.

[ZomBMage]

Should be easy enough, autotrigger on a certain number of joins in 30 seconds, then do some funky stuff

[thebeanogamer]

Year 2 particularly, we exceeded that for legit users though. I suppose that's a boundary test...

[thebeanogamer]

I suppose if it was high enough that could work though.

[ZomBMage]

Just make the command enable/disable-able? So if we can preempt lots of users joining at once, like Elite camps, we can just disable it for a time

[thebeanogamer]

:lockdown could also be an option, kill all invites and the permission to generate invites? Then :reopen to generate a new invite and hit the Cloudflare API to update the short URL?

[Bottersnike]

I think bulk invite killing would probably be better on a differently named command. :lockdown would suggest more that new users are locked out of all channels and have no read/write perms anywhere until the server is unlocked again.

[thebeanogamer]

Multiple staff member turnkey perhaps?

[thebeanogamer]

I think bulk invite killing would probably be better on a differently named command. :lockdown would suggest more that new users are locked out of all channels and have no read/write perms anywhere until the server is unlocked again.

Yeah, this is a good point

[Sh3llcod3]

So with some discussion with Picapi he proposes a system that hits these points:

• Some sort of analysis system where new members can be assigned a score and based on that redirected to some captcha, some system to slow them down and verify that they're a legitimate user

• Some sort of system where in case of mass joins, which is detected as suspicious, the system turns off the Dyno join/leave messages

• Some way for Sudos to revoke invites/re enable them

• Auto slowmode/auto kick if high volume of joins detected with DMed message

[JamesVStone]

I have seen some bots that generate a captcha and DM it to the user. You could add a system which you can control :captcha on/off to help prevent raids.

[Sh3llcod3]

This sounds interesting 👀

[github-actions]

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days