TheRoaring20s
Newbie
- Aug 11, 2024
- 1
- 2
(please take it easy on me, I'm not a mathatician all of my knowledge came from the internet)
I think It would be useful if I could theorise how reddit finds ban evading accounts. A solution should be both cost efficient and effective. In depth AI assisted analysis performed on every single reddit account would be both computationally and economically infeasible. To save on computational/monetary resources accounts are detected as suspicious through simple means and then filtered into a pool where AI assisted automated analysis is performed on these accounts to find if they are likely related to a banned account. If the AI analysis determines the account is related to a banned account the information is then sent to an admin automatically. The Admin can then verify the information and then either ban the user or dismiss it as a false positive.
So how is this done?
From all known reddit accounts we use the following things listed below to calculate a risk score:
a)Browser Cookies (can they be collected and what information do they contain)
b)Fingerprinting [WebGL, Canvas browser version, fonts, extensions, computer info (cpu/gpu/ram/storage ete from Javascript]
c)Ip address and known geographic area compared with date and time information from pc
d)names of email address and usernames are compared to those on the known banned account list
e)browser version [chrome or Firefox or something weird]
f)Whether an ip address comes from a known VPN or proxy server
g)whether a fingerprint can be ascertained or not
A risk score is calculated (using either a simple regression analysis on an individual set of data to calculate a score and individual things that are yes/no values are assigned a score if true)
The values are then compiled into a combined/total score if this combined/total score exceeds a predetermined value then we deem the account to have a high risk of being suspicious. Suspicious accounts and then automatically sent to a smaller suspect pool where further AI assisted automated analysis can take place
[for example cookies = 0.1, geographic location =0.1, webgl =0.1, canvas =0.5ete]
high risk = 0.5
if total score => high risk then flag account is flagged as suspicious
Suspect Pool:
A)AI analysis of known normal account activity vs suspected account activity
B)AI analysis of post and comments writing pattern’s (Grammer, word choice, sentence structure) compared to banned accounts
C)AI analysis of known banned accounts subreddit activity (in post/comment activity) to the suspect account
After data collection and analysis is complete, a Pearson correlation coefficient is performed on each individual data set and then compared across the list of known banned accounts
if enough significant P values (A =0.75 + B=0.75+ C=0.75) match a particular account then it is flagged then passed onto a human admin for further analysis. The admin then verifies if the information is correct or and then gives a ban or dismisses the data as a false positive
Ways to avoid detection.
It's best if our accounts aren't flagged in the first place. This can be done by using a convincingly fake fingerprint, making sure your ip location matches your date and time, not using ip addresses that can be traced to a known VPN ete. But we can't always avoid being flagged as suspicious so subreddit post/reply activity, writing style/word choice must be changed along with changing what subreddits you often use. When in doubt use occam's razor when changing things and go from there
-from a new and disgruntled recently banned reddit user who wants to make the lives of the reddit admin team harder.
I think It would be useful if I could theorise how reddit finds ban evading accounts. A solution should be both cost efficient and effective. In depth AI assisted analysis performed on every single reddit account would be both computationally and economically infeasible. To save on computational/monetary resources accounts are detected as suspicious through simple means and then filtered into a pool where AI assisted automated analysis is performed on these accounts to find if they are likely related to a banned account. If the AI analysis determines the account is related to a banned account the information is then sent to an admin automatically. The Admin can then verify the information and then either ban the user or dismiss it as a false positive.
So how is this done?
From all known reddit accounts we use the following things listed below to calculate a risk score:
a)Browser Cookies (can they be collected and what information do they contain)
b)Fingerprinting [WebGL, Canvas browser version, fonts, extensions, computer info (cpu/gpu/ram/storage ete from Javascript]
c)Ip address and known geographic area compared with date and time information from pc
d)names of email address and usernames are compared to those on the known banned account list
e)browser version [chrome or Firefox or something weird]
f)Whether an ip address comes from a known VPN or proxy server
g)whether a fingerprint can be ascertained or not
A risk score is calculated (using either a simple regression analysis on an individual set of data to calculate a score and individual things that are yes/no values are assigned a score if true)
The values are then compiled into a combined/total score if this combined/total score exceeds a predetermined value then we deem the account to have a high risk of being suspicious. Suspicious accounts and then automatically sent to a smaller suspect pool where further AI assisted automated analysis can take place
[for example cookies = 0.1, geographic location =0.1, webgl =0.1, canvas =0.5ete]
high risk = 0.5
if total score => high risk then flag account is flagged as suspicious
Suspect Pool:
A)AI analysis of known normal account activity vs suspected account activity
B)AI analysis of post and comments writing pattern’s (Grammer, word choice, sentence structure) compared to banned accounts
C)AI analysis of known banned accounts subreddit activity (in post/comment activity) to the suspect account
After data collection and analysis is complete, a Pearson correlation coefficient is performed on each individual data set and then compared across the list of known banned accounts
if enough significant P values (A =0.75 + B=0.75+ C=0.75) match a particular account then it is flagged then passed onto a human admin for further analysis. The admin then verifies if the information is correct or and then gives a ban or dismisses the data as a false positive
Ways to avoid detection.
It's best if our accounts aren't flagged in the first place. This can be done by using a convincingly fake fingerprint, making sure your ip location matches your date and time, not using ip addresses that can be traced to a known VPN ete. But we can't always avoid being flagged as suspicious so subreddit post/reply activity, writing style/word choice must be changed along with changing what subreddits you often use. When in doubt use occam's razor when changing things and go from there
-from a new and disgruntled recently banned reddit user who wants to make the lives of the reddit admin team harder.
Last edited: