Re: [libreoffice-website] Re: wiki spam
Hi, so, a quick update: It seems that at the moment the amount of new, spamming accounts is back to normal. It's not the AbuseFilter I've installed, since it was triggered only two times or so, according to its own statistics, but maybe one of the other mechanisms I've implemented. Sophie Gautier wrote on 2013-06-11 17:47: [OpenID] Well, I not for that one (I don't like to be forced to something ;-) It would probably be very effective, but then, it's at least political complicated, so I don't want to go that way right now. [Limiting external URLs] +1 for this one from my side. I don't think it will touch new 'real' contributors so much. Most of the time they come to add or translate content, not to put a link to another place. The concrete extension I've found seems to have some serious drawbacks, like (just read today) his filter also attempts to deceive spammers into believing their edits have succeeded. This does mean that anonymous users who make legitimate edits containing non-spammy URLs get blocked without any feedback that they are getting blocked - doesn't sound too intuitive. My proposal is to wait how the situation develops. If the new filters and mechanisms installed can cope with the current spammers, then let's leave it as if. It the situation gets worse, we need to enforce more limits, like the external URL throttling. Florian -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
[libreoffice-website] Re: wiki spam
Hi, 2013/6/11 Florian Effenberger flo...@documentfoundation.org: so, since I made the switch back to ReCaptcha, we had a few new wiki users, all using it in the very same way - adding their profile to their user talk page. Volker, from your gut feeling, is that amount of spam comparable to the last days, or is it a direct result of the captcha change? Four new suspects since yesterday, two of them put in their spam some seconds after creating the account. That it is not much, but can increase if more of them are getting aware of the changed login. I have blocked very few people between last September and May. In that time we had absolutely no problems. That was the time with the questy capture, right? Look at the log: https://wiki.documentfoundation.org/index.php?title=Special%3ALogtype=blockuser=page=year=month=-1 I won't judge after that short time. Let's wait a while and see... Bye Volker -- Volker Merschmann Member of The Document Foundation http://www.documentfoundation.org -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam
Hi, Volker Merschmann wrote on 2013-06-11 10:14: I have blocked very few people between last September and May. In that time we had absolutely no problems. That was the time with the questy capture, right? Look at the log: https://wiki.documentfoundation.org/index.php?title=Special%3ALogtype=blockuser=page=year=month=-1 indeed, the QuestyCaptcha helped a lot, all the other captchas were not as effective when we tried last September. However, it might be hard to compare, as the QuestyCaptcha didn't prevent spammers starting a few days ago, so it seems it isn't enough anymore. I won't judge after that short time. Let's wait a while and see... Thanks a lot! I'll also try to keep an eye, but please poke me when you see some negative changes. I just had a look, no new spammer so far, but even the few ones that slip through are not really desirable. I'll further investigate antispeam measures, but from what I can judge at the moment, we're basically doing what's considered best practice, don't see much room for improvement at the moment. Florian -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam
Hello, so I spent the afternoon doing further research. Basically, we're up to date with our plugins and the way we fight spam. Besides locking down the full wiki (i.e. manual account approval), there are some more options: (1) Switching to OpenID New wiki users would be forced to use an OpenID provider, like Yahoo or Google, to connect to the wiki. We use this at AskBot (for different reasons), but every once in a while we receive complaints that people cannot just create a local account. I think this is a valid concern, having to use an account at some other site first doesn't sound overly inviting. Plus we then would end up with a mixture of local accounts and OpenID-based ones, as existing wiki users would not be affected. (2) Restricting external URLs to approved users As most of the spam we see is targetted at adding links to external sites, we could limit external links to a group of users, e.g. the ones who have been autoconfirmed (i.e. active for a certain amount of days and having made several edits already). I've found one extension to do so on http://www.mediawiki.org/wiki/Extension:NotEvil I am not sure how much enforcing #2 would limit legitimate users. Basically, only new users would be affected (the spam seems to happen as fire and forget), and it would take only a certain amount of days and edits to be autoconfirmed. Thoughts? Florian -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam
On 11/06/2013 17:35, Florian Effenberger wrote: Hello, so I spent the afternoon doing further research. Basically, we're up to date with our plugins and the way we fight spam. Great! Besides locking down the full wiki (i.e. manual account approval), there are some more options: (1) Switching to OpenID New wiki users would be forced to use an OpenID provider, like Yahoo or Google, to connect to the wiki. We use this at AskBot (for different reasons), but every once in a while we receive complaints that people cannot just create a local account. I think this is a valid concern, having to use an account at some other site first doesn't sound overly inviting. Plus we then would end up with a mixture of local accounts and OpenID-based ones, as existing wiki users would not be affected. Well, I not for that one (I don't like to be forced to something ;-) (2) Restricting external URLs to approved users As most of the spam we see is targetted at adding links to external sites, we could limit external links to a group of users, e.g. the ones who have been autoconfirmed (i.e. active for a certain amount of days and having made several edits already). I've found one extension to do so on http://www.mediawiki.org/wiki/Extension:NotEvil I am not sure how much enforcing #2 would limit legitimate users. Basically, only new users would be affected (the spam seems to happen as fire and forget), and it would take only a certain amount of days and edits to be autoconfirmed. +1 for this one from my side. I don't think it will touch new 'real' contributors so much. Most of the time they come to add or translate content, not to put a link to another place. Kind regards Sophie -- Sophie Gautier sophie.gaut...@documentfoundation.org Tel:+33683901545 Membership Certification Committee Member - Co-founder The Document Foundation -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted
[libreoffice-website] Re: wiki spam filter
Le 28/04/11 02:59 AM, Florian Effenberger a écrit : Hi, Sophie Gautier wrote on 2011-04-28 06.34: Just for information, zero spam as of now. sometimes it's good when nobody can login. :-) Let's see how the next days will be, if there comes in spam. Florian If these problems persist, I, for one, would be agreeable to going back to closing down the wiki self account creation and having those interested in contributing to the wiki having to request an account from some of our admin members. I had the same problem on two of my sites, I closed down the self account creation and have had no problems in 3-4 months. It is such a relief not having to waste my time chasing spam accounts. The time I wasted was vastly greater than the time I now use to help create accounts for real users. Imagine, the time you could save by doing this could be used to fix the problems with the wiki Rich text editor. (*grin*) (I just thought I would throw that in here. :-)) Cheers Marc -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
Hi, On Thursday 28 April 2011 15:43, Marc Paré wrote: If these problems persist, I, for one, would be agreeable to going back to closing down the wiki self account creation and having those interested in contributing to the wiki having to request an account from some of our admin members. If it is possible to grant account creation right seprately, this task could even be delegated to many non-admin helpers. (We/you have to think of delegation of simple tasks wherever possible.) Nino -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
[libreoffice-website] Re: wiki spam filter
Le 28/04/11 09:55 AM, Nino Novak a écrit : Hi, On Thursday 28 April 2011 15:43, Marc Paré wrote: If these problems persist, I, for one, would be agreeable to going back to closing down the wiki self account creation and having those interested in contributing to the wiki having to request an account from some of our admin members. If it is possible to grant account creation right seprately, this task could even be delegated to many non-admin helpers. (We/you have to think of delegation of simple tasks wherever possible.) Nino +1 -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
Hi Marc, :-) Would it help if I gave you admin rights on the wiki? David Nelson -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
[libreoffice-website] Re: wiki spam filter
Le 28/04/11 11:05 AM, Marc Paré a écrit : Le 28/04/11 11:01 AM, David Nelson a écrit : Hi Marc, :-) Would it help if I gave you admin rights on the wiki? David Nelson I think I still have them. I would prefer to have some comments on the blurb. Are others agreeable to the text? Cheers Marc Oops! Sorry, I was answering too many emails. I don't have admin rights. I don't think I need them unless we close the account creation and start vetting members looking to get accounts to the wiki. I could help out with this if there is a need. Cheers Marc -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
Hi Marc, :-) OK, well just give a heads-up if you need them. Not sure what blurb you're talking about... David Nelson -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
Hi Marc, On 28/04/2011 16:43, Marc Paré wrote: Le 28/04/11 02:59 AM, Florian Effenberger a écrit : Hi, Sophie Gautier wrote on 2011-04-28 06.34: Just for information, zero spam as of now. sometimes it's good when nobody can login. :-) Let's see how the next days will be, if there comes in spam. Florian If these problems persist, I, for one, would be agreeable to going back to closing down the wiki self account creation and having those interested in contributing to the wiki having to request an account from some of our admin members. I prefer spending 15mn every day deleting the spam and blocking the accounts than closing the wiki for registration. Wiki, in my eyes,should remains a very easy tool to access and work with. Even registration is bothering me already. So really my preference would be that we go on as today and I'll go on to take of the spam. Kind regards Sophie -- Founding member of The Document Foundation -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
[libreoffice-website] Re: wiki spam filter
Le 28/04/11 11:13 AM, David Nelson a écrit : Hi Marc, :-) OK, well just give a heads-up if you need them. Not sure what blurb you're talking about... David Nelson LOL, thanks. You may be interested in this thread on the discussion mailist. It may involve your participation. http://permalink.gmane.org/gmane.comp.documentfoundation.discuss/5230 Cheers Marc -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
Hi Marc, :-) On Thu, Apr 28, 2011 at 23:18, Marc Paré m...@marcpare.com wrote: LOL, thanks. You may be interested in this thread on the discussion mailist. It may involve your participation. http://permalink.gmane.org/gmane.comp.documentfoundation.discuss/5230 Ah, OK, seen. Well I'll watch the thread and post the snippet into the page when the discussion reaches a conclusion, if no one else does it first. David Nelson -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
Hi, 2011/4/28 Sophie Gautier gautier.sop...@gmail.com: I prefer spending 15mn every day deleting the spam and blocking the accounts than closing the wiki for registration. Wiki, in my eyes,should remains a very easy tool to access and work with. Even registration is bothering me already. So really my preference would be that we go on as today and I'll go on to take of the spam. I agree with you. Maybe it looked for others reading this mailthread as we were loaded with work by this spam. But it was more a heads up for the others working on that. Bye Volker -- ++ Volker Merschmann - Member of The Document Foundation - http://documentfoundation.org -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
Hi, :-) 2011/4/28 Sophie Gautier gautier.sop...@gmail.com: I prefer spending 15mn every day deleting the spam and blocking the accounts than closing the wiki for registration. Wiki, in my eyes,should remains a very easy tool to access and work with. Even registration is bothering me already. So really my preference would be that we go on as today and I'll go on to take of the spam. @Sophie: Could you maybe briefly explain your workflow for spam filtering, so that other wiki admins could maybe help out? David Nelson -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
[libreoffice-website] Re: wiki spam filter
Le 28/04/11 12:00 PM, Volker Merschmann a écrit : Hi, 2011/4/28 Sophie Gautiergautier.sop...@gmail.com: I prefer spending 15mn every day deleting the spam and blocking the accounts than closing the wiki for registration. Wiki, in my eyes,should remains a very easy tool to access and work with. Even registration is bothering me already. So really my preference would be that we go on as today and I'll go on to take of the spam. I agree with you. Maybe it looked for others reading this mailthread as we were loaded with work by this spam. But it was more a heads up for the others working on that. Bye Volker Yes, the impression that I am getting is that people who are more of value to the project (Sophie, we need you elsewhere rather than just policing the wiki and the same for all of the other experienced leads and especially SC members doing the spam policing) are, sadly, using their valuable time on these issues. Maybe we should have a sub-group with proper wiki permissions taking up the spam deletions? Unless the spam issues require special consideration from the more experienced membership, maybe we should consider delegating to other members? Cheers Marc -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
Hi *, On Thu, Apr 28, 2011 at 11:16 PM, Friedrich Strohmaier damokles4-lis...@bits-fritz.de wrote: Marc Paré schrieb: Le 28/04/11 02:59 AM, Florian Effenberger a écrit : [.. spam ..] If these problems persist, I, for one, would be agreeable to going back to closing down the wiki self account creation and having those interested in contributing to the wiki having to request an account from some of our admin members. +1 But my understanding is that now spam is under control - you will never be 100% free of spam with self-registration, because there are also humans that create accounts that are then later used by bots. [closing self-registration and manually create accounts] +1 This would also help to get rid of the captcha plague. Ah, come on - having to solve a captcha /once/ when registering is not a plague. If you had to enter it for each and every change, then I would fully agree, but if it is just when registering... ciao Christian -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [libreoffice-website] Re: wiki spam filter
On 28/04/2011 19:56, Marc Paré wrote: Le 28/04/11 12:00 PM, Volker Merschmann a écrit : Hi, 2011/4/28 Sophie Gautiergautier.sop...@gmail.com: I prefer spending 15mn every day deleting the spam and blocking the accounts than closing the wiki for registration. Wiki, in my eyes,should remains a very easy tool to access and work with. Even registration is bothering me already. So really my preference would be that we go on as today and I'll go on to take of the spam. I agree with you. Maybe it looked for others reading this mailthread as we were loaded with work by this spam. But it was more a heads up for the others working on that. Bye Volker Yes, the impression that I am getting is that people who are more of value to the project (Sophie, we need you elsewhere rather than just policing the wiki and the same for all of the other experienced leads and especially SC members doing the spam policing) are, sadly, using their valuable time on these issues. Thanks for the kind words Marc, but as I said, it's very little time to give to it, so really not a big burden. I said 15mn, but I'm sure it's more between 5 and 10 mn. And zero now that there is no more. Maybe we should have a sub-group with proper wiki permissions taking up the spam deletions? Unless the spam issues require special consideration from the more experienced membership, maybe we should consider delegating to other members? any admin member can delete a page and we have several admins on the wiki yet. Kind regards Sophie -- Founding member of The Document Foundation -- Unsubscribe instructions: E-mail to website+h...@libreoffice.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/www/website/ All messages sent to this list will be publicly archived and cannot be deleted
