Re: [libreoffice-website] Etherpad and Antispam
Hello, Robinson Tryon wrote on 2013-07-12 16:55: I just did some testing the /qa and the /test pads, and edited, changed styles and colors, and even deleted the /test pad (oops!) without any type of authentication (at least as far as I could tell... :-) It does appear that I'm unable to create new pads, or to recreate the /test pad. Is it possible that you enabled option #1 (all edit, disable new pad creation) instead of #2 (authenticated edit)? I did enable #2 (existing pads can be edited by anyone, new pads cannot be created w/o admin rights) - however, I still had the push2delete plugin enabled, which allows deletion by anyone. Fixed that now. :-) Thanks for spotting that! Florian -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
[libreoffice-website] Etherpad and Antispam
Hello, now that Etherpad is running per se (I just need to migrate the DB to MySQL when we go productive), I am thinking about antispeam measures. I know at least of one well-known Etherpad that was subject to spammers, pasting abusive links. In theory, this can also happen with the wiki, but we have a couple of antispam measures here, including user registration - whereas Etherpad doesn't support that at all, it's simply open for everyone, and I found no antispam plugin. In addition, there is no easy way of seeing new pads or checking the logs, like Volker and others do for us in the wiki. Actually, there are two ways around this from what I see: 1. We create a couple of predefined pads people regularly use, and have editing open for everyone, but disable creation of new pads. By that, we see in time when someone does something harmful. 2. We leave editing and creation of pads open, but only to users who authenticate themselves. #2 is more intrusive, and creates some pain with managing users, while #1 sounds like a sensible compromise to me. I'm not sure if I'm exaggerating - I simply lack hands-on experience, but the amount of spam we have to cope with in the wiki rang my alarm bells. ;-) For testing, #2 is what I have just enabled in Etherpad, and populated a couple of predefined pads at the same time, to see if we can work with it. Anyone has some more insight into that topic, and maybe some hands-on experience? Thanks, Florian -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Etherpad and Antispam
On Fri, Jul 12, 2013 at 6:42 AM, Florian Effenberger flo...@documentfoundation.org wrote: 2. We leave editing and creation of pads open, but only to users who authenticate themselves. #2 is more intrusive, and creates some pain with managing users, while #1 sounds like a sensible compromise to me. I'm not sure if I'm exaggerating - I simply lack hands-on experience, but the amount of spam we have to cope with in the wiki rang my alarm bells. ;-) Fair enough -- if there is a legitimate concern of spam, best to address the problem as early as possible. For testing, #2 is what I have just enabled in Etherpad, and populated a couple of predefined pads at the same time, to see if we can work with it. Anyone has some more insight into that topic, and maybe some hands-on experience? I don't have experience with spam on Etherpad, but we have been using Etherpad for minutes of the QA Team meetings. It's handy for people to be able to see the minutes as I type them out and for them to make small corrections when the audio on the call is garbled, I misspell a name, etc. As long as all of the people who want to join-in on the QA call can use the pad, then #2 is fine with me. --R -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Etherpad and Antispam
On Fri, Jul 12, 2013 at 10:43 AM, Robinson Tryon bishop.robin...@gmail.com wrote: On Fri, Jul 12, 2013 at 6:42 AM, Florian Effenberger flo...@documentfoundation.org wrote: 2. We leave editing and creation of pads open, but only to users who authenticate themselves. ... For testing, #2 is what I have just enabled in Etherpad, and populated a couple of predefined pads at the same time, to see if we can work with it. I just did some testing the /qa and the /test pads, and edited, changed styles and colors, and even deleted the /test pad (oops!) without any type of authentication (at least as far as I could tell... :-) It does appear that I'm unable to create new pads, or to recreate the /test pad. Is it possible that you enabled option #1 (all edit, disable new pad creation) instead of #2 (authenticated edit)? In any case, I'd like to find a solution where our pads won't be intentionally/accidentally deleted out from underneath us. IIRC that might be a plugin that we can disable? Cheers, --R -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
