Uncovering a network of “adult dating” spam accounts on Twitter

https://labsblog.f-secure.com/2018/03/16/marketing-dirty-tinder-on-twitter/

by etiam • 8 years ago

120 31 8 years ago

johnhenry• 8 years ago

Unfortunately, the title of this post doesn't convey the content very well. I don't really have a better suggestion... Maybe something along the lines of "Finding botnets within twitter", or something.

dang• 8 years ago

We've taken a crack at it. If someone can suggest a better title—i.e. more accurate and neutral, preferably using representative language from the article—we can change it again.

Bud• 8 years ago

New title seems quite descriptive to me.

mirimir• 8 years ago

My initial reaction to your post was "Wait, these are networks of bots, not botnets." But now I'm wondering. Do botnet slaves typically run Twitter accounts?

devindotcom• 8 years ago

It's amazing to me how researchers spend a day or two looking into something and come away with tens of thousands of bots, in this case some that are nearly a decade old. Seems like Twitter can't be looking that hard, though it's far from a simple task and it's probably all they can do to stem the tide of new bots day by day.

dawnerd• 8 years ago

Twitter has a hard time dealing with the fake Elon Musk bots that post ethereum scams. I've reported way more than I can count and so far only a fraction have been banned. It's amazing how bad twitter is at filtering very obvious spam.

B1FF_PSUVM• 8 years ago

mumble ... (Twitter's) "salary depends on not understanding it" ... smh

acdha• 8 years ago

It's really hard to escape the cynical conclusion that for years they've been trying to ignore anything which would lower engagement metrics.

rhema• 8 years ago

Even with a 95% accuracy of detection, a good algorithm can point the "is a bot" finger wrongly at many people. If 10,000 bots are detected and banned, it could upset 500 real people. So, Twitter has to ask if its easier to put up with 9,500 not-so-active bots, or to potentially make 500 people very upset.

aylmao• 8 years ago

As far as I like to believe this is the reason behind this, I can't but assume this is a very simplistic view of the situation. I'm sure if they wanted they could do a better job verifying against bots; they don't have to instantly ban. They could instead require users to solve some captchas, submit some form of official verification, etc.

TehCorwiz• 8 years ago

It feels like the solution is some version of person-hood verification.

Back in that day my brother and I both played on various MUDs (multi-user-dungeon/dimension). At the time most people had dial-up, due to my father's business we had an ISDN line and multiple computers, to prevent bots they made the assumption that multiple logins from the same IP were bots. So to combat this without blanket bans, the mods would warp us into a private area and have us type a different list of things simultaneously to satisfy themselves that we were actual people. It was a low-tech solution to a low-volume problem in a low-user-count game.

However, something similar like making the user do a captcha on each login or post if they're suspected of being a bot would be a low bar for a human to cross, but someone running a bot network would probably have to invest some time or resources into overcoming the captcha. (Mechanical Turk, machine learning, captcha farm, etc.)

hyperpape• 8 years ago

They apparently delete hundreds of thousands of accounts every day: https://news.ycombinator.com/item?id=16248845.

notahacker• 8 years ago

And academic and journalistic investigations into political bots have often subsequently discovered that a non-trivial proportion of apparent bot accounts are actually manned by ordinary people who genuinely feel retweeting certain influencers for hours on end and indiscriminately replying to other political figures with memes and slogans was a good use of their time in election cycles. It's Human Turing Test Failure central.

mschuster91• 8 years ago

So, Twitter has to ask if its easier to put up with 9,500 not-so-active bots, or to potentially make 500 people very upset.

The latter wouldn't be such a problem if they had an established, WORKING process for appeals. Or to get in contact with a human at all.

As for the spambots: ignore them, they don't do much besides luring morons to porn sites. The Nazis and other similar trolls are vastly more dangerous for Twitter and for societies.

jellicle• 8 years ago

Hard to get a man to find a bot when his job depends on his not finding it.

everdev• 8 years ago

If you get paid to drive user growth are you really going to stiffle it?

Those accounts and their interactions get wrapped up into overall stats presented to investors. They're not going to clamp down too hard on bot traffic as it's inflating their actual user base and interactions.

As a content company blinded by growth stats, I'd want bots craving out content on my platform too as long as it was legible.

As someone trying to build a quality platform, I wouldn't want them on there or would at least want them marked with a robot icon.

Which side do you think Twitter is on?

wpietri• 8 years ago

I think the thing they care about is not total number of bot accounts, but total amount users are bothered by bots. I agree that they could do a lot better, but there's something to be said for letting sleeping bots lie.

In particular, it's important not to feed an adversary's OODA loop. If you kill bot accounts immediately upon detection, you give them information about what you can detect. That encourages them to create things you can't detect. Better to wait until the network becomes a problem and then roll up the whole thing at once. That tells them a lot less about how they got caught, and burns more of their work for the information you do give up.

johnny99• 8 years ago

It would be great if Twitter had a way of accepting community contributions to addressing their bot/troll/spam problem.

I see a lot more efforts like this coming from outside of Twitter than inside, and these kinds problems are rampant.

Bedon292• 8 years ago

I was thinking the same sort of thing. I was also trying to see what sort of limits are on https://developer.twitter.com/en/docs/accounts-and-users/mut... in order to automate reporting them. But at what point would they flag that account as a bot and block it?

angelguerrero• 8 years ago

I have a hunch that this is how the Russians are using Twitter and Facebook to mess with the American people

rdtsc2• 8 years ago

Good news! You don't need a hunch, since Twitter directly approached RT (which is effectively a government control media apparatus) and pitched them access and discounts to "US voters" ahead of the 2016 election:

https://www.buzzfeed.com/alexkantrowitz/twitter-offered-rt-1...

Their response after that reveal was "We do not have any comment on our private conversations with any advertiser". Which, mostly confirms it. If it was a made up story, they would have quickly refuted it as such ("RT made this stuff up like they always do etc").

Not only did they not care about American voters, they were an active part in allowing an external entity to manipulate them. But of course we all believe they changed now and their hearts and minds are one with the American voters. Phew, I can finally sleep better at night.

John_KZ• 8 years ago

Is this really any better than "internal" entities trying to actively brain-wash the electorate right before the elections with personalized propaganda and a fake impression of consensus?

The problem is personalized ads. We need to get rid of them, regardless of who does it.

lmeyerov• 8 years ago

If anyone is into this kind of analysis and likes jupyter notebooks, we've got a bunch of users having fun with it on Graphistry.com using our GPU viz tech. We support OSINT, so feel free to request an API key!

Uncovering a network of “adult dating” spam accounts on Twitter

Related Stories