[webkit-dev] SPAM on trac.webkit.org

Lucas Forschler lforschler at apple.com
Sun Apr 17 06:44:34 PDT 2016


I believe the spam is coming only from users who are not identified as developers (committers). Therefore, I’ve re-enabled WIKI_CREATE and WIKI_MODIFY permissions to the trac ‘developer’ group. 
This will keep the wiki locked down to those with committer access, and not be as open as we would prefer. Moving forward, we should decide which mechanism we’d like to use to help prevent spam.

Lucas

> On Apr 17, 2016, at 6:14 AM, Lucas Forschler <lforschler at apple.com> wrote:
> 
> I’ve removed WIKI_CREATE and WIKI_MODIFY permissions from the ‘authenticated' and ‘developer' groups. Removing from the authenticated group may have been enough, but I wanted to be certain to stop spam and get it under control before loosening permissions.
> 
> I’ve also attempted to delete all the spam posts, and revert any modifications to other pages.
> 
> Looks like the following email addresses were used:
> tom24by7 at gmail.com <mailto:tom24by7 at gmail.com>
> anna.rascal15 at gmail.com <mailto:anna.rascal15 at gmail.com>
> emaxico9 at gmail.com <mailto:emaxico9 at gmail.com>
> mailme.john5 at rediffmail.com <mailto:mailme.john5 at rediffmail.com>
> 
> I believe we can turn on the Captcha mechanism, which may help alleviate some spam. I’ll continue to investigate.
> Lucas
> 
>> On Apr 17, 2016, at 5:27 AM, Lucas Forschler <lforschler at apple.com <mailto:lforschler at apple.com>> wrote:
>> 
>> I’m investigating now.
>> It looks like trac also has some spam filter ability: https://trac.edgewall.org/wiki/SpamFilter <https://trac.edgewall.org/wiki/SpamFilter>
>> 
>> Lucas
>> 
>>> On Apr 16, 2016, at 7:07 PM, Darin Adler <darin at apple.com <mailto:darin at apple.com>> wrote:
>>> 
>>> We are definitely going to have to change the policy on the wiki. The spam is being posted from multiple different email addresses, so banning accounts is not going to be sufficient.
>>> 
>>> Who knows how to turn off modification to the Wiki while we decide how to lock it down?
>>> 
>>> — Darin
>>> _______________________________________________
>>> webkit-dev mailing list
>>> webkit-dev at lists.webkit.org <mailto:webkit-dev at lists.webkit.org>
>>> https://lists.webkit.org/mailman/listinfo/webkit-dev <https://lists.webkit.org/mailman/listinfo/webkit-dev>
>> 
>> _______________________________________________
>> webkit-dev mailing list
>> webkit-dev at lists.webkit.org <mailto:webkit-dev at lists.webkit.org>
>> https://lists.webkit.org/mailman/listinfo/webkit-dev
> 
> _______________________________________________
> webkit-dev mailing list
> webkit-dev at lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-dev/attachments/20160417/949a2c2e/attachment.html>


More information about the webkit-dev mailing list