Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

blocked ip addresses + block user tool #8341

Merged
merged 1 commit into from
Feb 3, 2021
Merged

Conversation

owocki
Copy link
Contributor

@owocki owocki commented Feb 2, 2021

Description

in between phone calls, i play a game of whack a mole with scammers who keep opening up gitcoin grants with falsified information. they are trying to leverage our platform and brand to raise money, and falsifying grants information in order to do so.

some of the fake grants
https://gitcoin.co/grants/1962/filecoin-is-an-open-source-cloud-storage-marketpl
https://gitcoin.co/grants/1944/consensus-of-the-ethereum-20-protocol
https://gitcoin.co/grants/1941/gitcoin-grants-multisig-donate-round-9
https://gitcoin.co/grants/1940/gitcoin-grants-official-matching-pool-fund

#8305 will help a lot too (thanks graham!), but this PR will reduce the cycle time for blocking these users via whack a mole by

  1. one click block user button
  2. invalidating all sessions when a user is blocked
  3. allowing us to block users by ip address (maybe other browser options down the line, depending on how the hackers evolve we may have to use our anti sybil tech in the future)
Refers/Fixes

https://gitcoin.co/_administrationgrants/grant/ <=== fake grants

Testing

tested locally (both ip blocking + blocking user)

@thelostone-mc thelostone-mc merged commit 186e49a into master Feb 3, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants