Re: Bot creating issues

[Johannes Pfau via Digitalmars-d]

Am Fri, 25 Nov 2016 11:43:07 -0800
schrieb "H. S. Teoh via Digitalmars-d" :

> > I hope that the bot don't use a real address because you've forget
> > to uncheck "CC add me to the list"...which means that your address
> > is possibly added to a database.  
> 
> Oops! :-(
> 

If bots really want to collect email addresses from bugzilla there are
other ways to do that: The 'bug report changed' email sent by bugzilla
contains email addresses anyway:

hsteoh@... changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 CC||hsteoh@...
 Resolution|--- |INVALID

Also all these messages get posted to d.D.bugs including full email
addresses. This archive can be indexed by crawlers:
https://www.google.de/search?q=site%3Ahttp%3A%2F%2Fforum.dlang.org%2Fgroup%2Fissues=utf-8=utf-8=firefox-b_rd=cr=V1I5WM3QI8Kv8wfJsrKwAw#q=site:http:%2F%2Fforum.dlang.org%2Fgroup%2Fissues+hsteoh

Additionally every logged in bugzilla user can see the email address of
any other bugzilla user when reading a bug report.


TLDR; better use a good spam filter :-(

Re: Bot creating issues

[H. S. Teoh via Digitalmars-d]

On Fri, Nov 25, 2016 at 07:17:20PM +, WM.H via Digitalmars-d wrote:
> On Friday, 25 November 2016 at 17:37:13 UTC, H. S. Teoh wrote:
> > On Fri, Nov 25, 2016 at 05:34:53PM +, Dominikus Dittes Scherkl via
> > Digitalmars-d wrote:
> > > On Friday, 25 November 2016 at 17:27:07 UTC, Dominikus Dittes
> > > Scherkl wrote:
> > > > Hm.
> > > > > There seem to be some bot generating a lot of new Issues in
> > > > > the D bugzilla. Or is that intentional?!?
> > > 
> > > It started 3 days ago, but becomming increasingly frequent - at
> > > the moment every twenty minutes a new one appears!
> > 
> > I just went and closed a bunch of them that I could find.  [...]
> > T
> 
> I hope that the bot don't use a real address because you've forget to
> uncheck "CC add me to the list"...which means that your address is
> possibly added to a database.

Oops! :-(


T

-- 
Truth, Sir, is a cow which will give [skeptics] no more milk, and so they are 
gone to milk the bull. -- Sam. Johnson

Re: Bot creating issues

[WM.H via Digitalmars-d]

On Friday, 25 November 2016 at 17:37:13 UTC, H. S. Teoh wrote:
On Fri, Nov 25, 2016 at 05:34:53PM +, Dominikus Dittes 
Scherkl via Digitalmars-d wrote:
On Friday, 25 November 2016 at 17:27:07 UTC, Dominikus Dittes 
Scherkl wrote:

> Hm.
> 
> There seem to be some bot generating a lot of new Issues in 
> the D bugzilla. Or is that intentional?!?


It started 3 days ago, but becomming increasingly frequent - 
at the moment every twenty minutes a new one appears!


I just went and closed a bunch of them that I could find.  [...]
T


I hope that the bot don't use a real address because you've 
forget to uncheck "CC add me to the list"...which means that your 
address is possibly added to a database.

Re: Bot creating issues

[H. S. Teoh via Digitalmars-d]

On Fri, Nov 25, 2016 at 05:34:53PM +, Dominikus Dittes Scherkl via 
Digitalmars-d wrote:
> On Friday, 25 November 2016 at 17:27:07 UTC, Dominikus Dittes Scherkl wrote:
> > Hm.
> > 
> > There seem to be some bot generating a lot of new Issues in the D
> > bugzilla. Or is that intentional?!?
> 
> It started 3 days ago, but becomming increasingly frequent - at the
> moment every twenty minutes a new one appears!

I just went and closed a bunch of them that I could find.  They all
appear to come from the same account, so perhaps a temporary stop-gap is
to disable the account in question?

Though, I suspect it's not so simple, as it's probably a spam bot that's
signing up new accounts to post spam every so often.

I wonder if the solution might be as simple as slightly massaging the
signup page so that it's not as recognizable to the spambot as the
standard bugzilla signup page.  This should at least defeat the dumbest
of the spambots. Though I suspect nowadays smarter spambots are readily
available to spammers that can easily bypass such measures.  But unless
we're being targeted specifically, simple measures ought to be able to
stem the tide of spam.

It's a whole 'nother can o' worms if we're being targeted specifically,
though.


T

-- 
"No, John.  I want formats that are actually useful, rather than over-featured 
megaliths that address all questions by piling on ridiculous internal links in 
forms which are hideously over-complex." -- Simon St. Laurent on xml-dev

Re: Bot creating issues

[Dominikus Dittes Scherkl via Digitalmars-d]

On Friday, 25 November 2016 at 17:27:07 UTC, Dominikus Dittes 
Scherkl wrote:

Hm.

There seem to be some bot generating a lot of new Issues in the 
D bugzilla. Or is that intentional?!?


It started 3 days ago, but becomming increasingly frequent - at 
the moment every twenty minutes a new one appears!

Re: Bot creating issues

[Jonathan M Davis via Digitalmars-d]

On Friday, November 25, 2016 17:27:07 Dominikus Dittes Scherkl via 
Digitalmars-d wrote:
> Hm.
>
> There seem to be some bot generating a lot of new Issues in the D
> bugzilla. Or is that intentional?!?

Of course, it isn't. It's spam. And Brad is looking into how to deal with
it.

- Jonathan M Davis

Bot creating issues

[Dominikus Dittes Scherkl via Digitalmars-d]

Hm.

There seem to be some bot generating a lot of new Issues in the D 
bugzilla. Or is that intentional?!?