From: <[email protected]<mailto:[email protected]>> on behalf of Denis Roy <[email protected]<mailto:[email protected]>> Reply-To: Cross project issues <[email protected]<mailto:[email protected]>> Date: Monday, November 14, 2016 at 11:22 AM To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: Re: [cross-project-issues-dev] Are restrictions on Bugzilla worse thanspam?
+1 We're using re-captcha on the sign-up page, but since Bugzilla doesn't have a moderation system it makes it an easy target. Since Bugzilla doesn't have a clean bug deletion process either it makes a messy cleanup. Question that comes to mind, what criteria does the moderation system have at rejecting sign-ups? How do you know the person is about to post spam versus raise a real bug? Wiki and Forums have a crowd-sourced First Post moderation system which is quite effective and unintrusive. I've attempted to contact the Bugzilla developers to throw resources at the issue but I'm getting little traction. With all due respect (and you know I do :) ), I have counter examples on how effective it is, at least lately, where a CDT committer still had to wait too long to get his Wiki access granted as we were putting things together for the Neon.2 release. I have no good answers but this really is a no win for anyone. Denis On 13/11/16 10:28 AM, Daniel Megert wrote: > Wasn't there is a captcha mechanism in place which prevents robots from > registering accounts? The webmaster said that the spam was not created by robots but real humans. Dani From: Gunnar Wagenknecht <[email protected]><mailto:[email protected]> To: Cross project issues <[email protected]><mailto:[email protected]> Date: 12.11.2016 19:03 Subject: Re: [cross-project-issues-dev] Are restrictions on Bugzilla worse thanspam? Sent by: [email protected]<mailto:[email protected]> ________________________________ I agree with Mickael that the situation is not good for an open community. Manual moderation does not scale and it is an extra wall for contributing. Wasn't there is a captcha mechanism in place which prevents robots from registering accounts? Can we please prioritize the work to get the account sign-up fixed so that only humans can sign up? -Gunnar -- Gunnar Wagenknecht [email protected]<mailto:[email protected]>, http://guw.io/ On 12 Nov 2016, at 17:49, Daniel Megert <[email protected]<mailto:[email protected]>> wrote: The spam wasted at least half an hour of my time every day, so "NO", the spam must not come back. NO WAY! If you feel good about the spam I suggest you sign up as moderator for the new accounts. Dani From: Mickael Istria <[email protected]<mailto:[email protected]>> To: Cross project issues <[email protected]<mailto:[email protected]>> Date: 12.11.2016 17:07 Subject: [cross-project-issues-dev] Are restrictions on Bugzilla worse than spam? Sent by: [email protected]<mailto:[email protected]> ________________________________ TL;DR: Bugzilla restrictions block new contributors - that's worse than spam. Hi all, A few weeks ago, because of a spam attack, access to bugzilla and ability to report bugs and comment on bugs for new members was restricted. New members now have to ask webmasters to be whilelisted and allowed to interact with the community. I've got some colleague who just registered and tried to contribute and totally failed at it. The message about asking webmasters for whilelist wasn't visible enough apparently so they didn't realize it was necessary and just ended up with an account which seem unusable to them. So I had to forward messages in their name: https://bugs.eclipse.org/bugs/show_bug.cgi?id=506244#c19 Moreover, in that case, we're speaking about someone working on week-ends and is ready to contribute on week-ends, and I don't expect webmasters to promptly react to whilelisting request on week-ends. So even if the user would have sent a mail, it could have requested days to be processed. If I had not been there to assist my colleague in contributing, he'd just had given up. And I'm pretty sure that several other people have given up contributing since the introduction of this "ask for permission" rule. So IMO, the current state is by far worse than having spam. It makes the community more difficult to join for new subscribers and appear more closed than it is. A lot of effort were done in the past to "reduce barriers" from users to contributors, and this Bugzilla thing goes to the opposite direction. Can we please have spam and new contributors again? And then consider approaches that have worked for other tools to avoid spam? I don't get why bugs.eclipse.org<http://bugs.eclipse.org/>would be the only service for which reCaptcha wouldn't work...
_______________________________________________ cross-project-issues-dev mailing list [email protected] To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev
