On Tue, Dec 4, 2018 at 1:30 PM Alexey Proskuryakov <ap@webkit.org> wrote:

4 дек. 2018 г., в 11:21, Ryosuke Niwa <rniwa@webkit.org> написал(а):

e.g. https://bugs.webkit.org/show_bug.cgi?id=168774

Is there a way we can integrate CAPTCHA, etc... to prevent these spammers from getting Bugzilla account?

We can integrate CAPTCHA, but based on how the spammers operate, it seems unlikely that it would help much. As far as we could find, other Bugzilla instances haven't solved this either.

Many of the spam comments look like they were written by humans who skimmed the comments above, and there were a couple where the comments looked quite convincing at first glance. And the registration process includes sending a confirmation link to their e-mail account, which is Gmail most of the time. So it's already taking more dedication than passing a CAPTCHA would require.

What I would want to know is what lures spammers to bugzilla. Perhaps we can find a way to decrease bugs.webkit.org page rank or whatever makes it a valuable target.

I see. Alternatively, is there a way you can make more of us be able to moderate these spammers? I don't mind seeing them as much as if I could mark them as spammers myself right away and hide their comments. - R. Niwa

On Tue, Dec 4, 2018 at 7:47 PM, Alexey Proskuryakov <ap@webkit.org> wrote:

Anyone can tag comments to make them invisible

How?

On Wed, Dec 5, 2018 at 10:44 AM, Ross.Kirsling@sony.com wrote:

You can click Tag and enter "spam". (There's also the "obsolete" tag for hiding, say, outdated feedback from the EWS bots. Unfortunately tagging is purely by manual entry right now, but it works.)

Wow, I never noticed this. I thought Apple folks were using superpowers to obsolete comments! If we add rel="nofollow" then I think we should also respond with comments warning the spammers that we are using rel="nofollow" and their spam will not boost their SEO. Maybe that will convince individual spammers to give us a break. Michael

On Wed, Dec 5, 2018 at 11:30 AM, Michael Catanzaro <mcatanzaro@igalia.com> wrote:

Wow, I never noticed this. I thought Apple folks were using superpowers to obsolete comments!

Hi, Recently a spammer added me to his Bugzilla user watchlist (Preferences -> Email Preferences -> User Watching on the bottom left) to follow me across Bugzilla, and has been manually sending me spam emails. I suppose it's retaliation for my tagging several Bugzilla comments as Spam, now that I know how. (I've asked the WebKit admins to ban his account.) Hopefully I'm just unlucky, but you might want to check the list of accounts watching you for suspicious accounts! Michael