Now, all of the moderators/admins on my team can ban (by IP, and username, for any length of time), mute, delete messages, and force users to change their username.
They have been informed that abuse of these privileges is strictly disallowed and that all of their actions are recorded.
Note that we only store IP's in a heavily encrypted form, and they cannot be accessed by anyone besides the person who is banned (so that their local browser can tell they are banned) and the admins (to remove and add bans as necessary)
We also have spam protection, and it's pretty strong. I produced about 40 bots that should represent a bunch of different spamming methods. Each is slightly different, and the service both identifies them and mutes them for a short amount of time. The amount of time increases exponentially each time spam is detected, until they are muted for a day. Once they are muted for a day, they are put on a list for admin checking, and bans will be issued.
Messages are collapsed so that messages that are the same are not sent, but the timestamp changes on the original message to the most recent time and a tag appears that indicates the number of times the message was sent. (e.x. [6x] for a message that was sent six times consecutively).
Messages now have a minimum character limit of 2 characters. (Increased from 1, this shouldn't affect most users too much, the objective is to increase the amount of effort required to spam.)
If you send 8 messages in 15 seconds, then a 15-second cooldown is applied to you. A quick search of the DB showed that this is matched almost all of what I'd consider spam, but only applied once to non-spam messages, and it was because I am a failure at typing and had to correct myself a bunch of times.
We will not release this update until it has been tested under large quantities of strain that it should hopefully never go through under abusive users.
Now, a quick survey. There are other options besides IP tracking, and they are outlined in the form below. Please tell me what you prefer, as we are split.
(Responses are anonymous, it makes you sign in to Google to limit responses-per-user to one)
Thanks!
Survey here