Re: [webkit-dev] SPAM on trac.webkit.org

[Carlos Alberto Lopez Perez]

On 29/04/16 19:58, Lucas Forschler wrote:
>> I wonder if it would be possible to also allow contributors (as listed
>> in the "Contributors" field of contributors.json) to edit the wiki?
>>
>> We have a need to allow WebKitGTK+ gardeners (some of them still not
>> committers) to edit the WiKi.
> 
> This should be possible. Please file a bugzilla and I’ll investigate what 
> it’s going to take to get this working.
> 

https://bugs.webkit.org/show_bug.cgi?id=157191

Thanks!



signature.asc
Description: OpenPGP digital signature
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Lucas Forschler]

> On Apr 29, 2016, at 9:25 AM, Carlos Alberto Lopez Perez  
> wrote:
> 
> On 21/04/16 19:30, Lucas Forschler wrote:
>> Hello everyone,
>> 
>> I’d like to follow up on the current wiki situation.
>> 
>> In the past, any authenticated trac.webkit.org user was allowed to
>> modify or create wiki entries. However, with the recent spam
>> infiltration, this is no longer viable. To solve this, I’ve removed
>> WIKI_MODIFY and WIKI_CREATE permissions from the authenticated users
>> group. This seems to have eliminated spam from making it to the wiki
>> pages.
>> 
>> We currently have a ‘developer' group on trac, which contains all
>> members with svn committer privileges.  This group has WIKI_MODIFY
>> and WIKI_CREATE permissions. Using this mechanism means only users
>> with svn committer privileges are now allowed to create or modify
>> wiki entries. I am hoping this will be sufficient moving forward. I
>> do understand that there may be folks who contribute to WebKit, but
>> are not svn committers. If there is sufficient desire, I can
>> investigate another level of access.
>> 
>> Please let me know if you have any concerns.
>> 
>> thanks, Lucas
> 
> I wonder if it would be possible to also allow contributors (as listed
> in the "Contributors" field of contributors.json) to edit the wiki?
> 
> We have a need to allow WebKitGTK+ gardeners (some of them still not
> committers) to edit the WiKi.

This should be possible. Please file a bugzilla and I’ll investigate what it’s 
going to take to get this working.

Lucas

> 
> Thanks

___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Carlos Alberto Lopez Perez]

On 21/04/16 19:30, Lucas Forschler wrote:
> Hello everyone,
> 
> I’d like to follow up on the current wiki situation.
> 
> In the past, any authenticated trac.webkit.org user was allowed to
> modify or create wiki entries. However, with the recent spam
> infiltration, this is no longer viable. To solve this, I’ve removed
> WIKI_MODIFY and WIKI_CREATE permissions from the authenticated users
> group. This seems to have eliminated spam from making it to the wiki
> pages.
> 
> We currently have a ‘developer' group on trac, which contains all
> members with svn committer privileges.  This group has WIKI_MODIFY
> and WIKI_CREATE permissions. Using this mechanism means only users
> with svn committer privileges are now allowed to create or modify
> wiki entries. I am hoping this will be sufficient moving forward. I
> do understand that there may be folks who contribute to WebKit, but
> are not svn committers. If there is sufficient desire, I can
> investigate another level of access.
> 
> Please let me know if you have any concerns.
> 
> thanks, Lucas

I wonder if it would be possible to also allow contributors (as listed
in the "Contributors" field of contributors.json) to edit the wiki?

We have a need to allow WebKitGTK+ gardeners (some of them still not
committers) to edit the WiKi.

Thanks



signature.asc
Description: OpenPGP digital signature
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Lucas Forschler]

Hello everyone,

I’d like to follow up on the current wiki situation.

In the past, any authenticated trac.webkit.org user was allowed to modify or 
create wiki entries. However, with the recent spam infiltration, this is no 
longer viable. To solve this, I’ve removed WIKI_MODIFY and WIKI_CREATE 
permissions from the authenticated users group. This seems to have eliminated 
spam from making it to the wiki pages.

We currently have a ‘developer' group on trac, which contains all members with 
svn committer privileges.  This group has WIKI_MODIFY and WIKI_CREATE 
permissions. Using this mechanism means only users with svn committer 
privileges are now allowed to create or modify wiki entries. I am hoping this 
will be sufficient moving forward. I do understand that there may be folks who 
contribute to WebKit, but are not svn committers. If there is sufficient 
desire, I can investigate another level of access. 

Please let me know if you have any concerns.

thanks,
Lucas


> On Apr 18, 2016, at 3:54 AM, Lucas Forschler  wrote:
> 
> Hi Michael,
> 
> The problem was not specific to your account, but to all new accounts created 
> recently.
> I believe this has been fixed. Please let me know if you have any issues. 
> 
> Lucas
> 
> 
> 
>> On Apr 18, 2016, at 1:48 AM, Lucas Forschler  wrote:
>> 
>> HI Michael,
>> 
>> I do see you are listed as an svn committer, but it is unclear to me how 
>> this migrates to trac’s group permissioning system.
>> I may have been wrong about all committers being in the developer group. I 
>> will need to research this mechanism a bit more.
>> Lucas
>> 
>>> On Apr 17, 2016, at 8:33 AM, Michael Catanzaro  
>>> wrote:
>>> 
>>> On Sun, 2016-04-17 at 06:44 -0700, Lucas Forschler wrote:
 I believe the spam is coming only from users who are not identified
 as developers (committers). Therefore, I’ve re-enabled WIKI_CREATE
 and WIKI_MODIFY permissions to the trac ‘developer’ group. 
 This will keep the wiki locked down to those with committer access,
 and not be as open as we would prefer. Moving forward, we should
 decide which mechanism we’d like to use to help prevent spam.
>>> 
>>> Perhaps I was never added to the developer group, as I can't edit the
>>> wiki anymore. Could you look into this Lucas?
>>> 
>>> Thanks,
>>> 
>>> Michael
>> 
>> ___
>> webkit-dev mailing list
>> webkit-dev@lists.webkit.org
>> https://lists.webkit.org/mailman/listinfo/webkit-dev
> 
> ___
> webkit-dev mailing list
> webkit-dev@lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev

___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Lucas Forschler]

Hi Michael,

The problem was not specific to your account, but to all new accounts created 
recently.
I believe this has been fixed. Please let me know if you have any issues. 

Lucas



> On Apr 18, 2016, at 1:48 AM, Lucas Forschler  wrote:
> 
> HI Michael,
> 
> I do see you are listed as an svn committer, but it is unclear to me how this 
> migrates to trac’s group permissioning system.
> I may have been wrong about all committers being in the developer group. I 
> will need to research this mechanism a bit more.
> Lucas
> 
>> On Apr 17, 2016, at 8:33 AM, Michael Catanzaro  wrote:
>> 
>> On Sun, 2016-04-17 at 06:44 -0700, Lucas Forschler wrote:
>>> I believe the spam is coming only from users who are not identified
>>> as developers (committers). Therefore, I’ve re-enabled WIKI_CREATE
>>> and WIKI_MODIFY permissions to the trac ‘developer’ group. 
>>> This will keep the wiki locked down to those with committer access,
>>> and not be as open as we would prefer. Moving forward, we should
>>> decide which mechanism we’d like to use to help prevent spam.
>> 
>> Perhaps I was never added to the developer group, as I can't edit the
>> wiki anymore. Could you look into this Lucas?
>> 
>> Thanks,
>> 
>> Michael
> 
> ___
> webkit-dev mailing list
> webkit-dev@lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev

___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Lucas Forschler]

HI Michael,

I do see you are listed as an svn committer, but it is unclear to me how this 
migrates to trac’s group permissioning system.
I may have been wrong about all committers being in the developer group. I will 
need to research this mechanism a bit more.
Lucas

> On Apr 17, 2016, at 8:33 AM, Michael Catanzaro  wrote:
> 
> On Sun, 2016-04-17 at 06:44 -0700, Lucas Forschler wrote:
>> I believe the spam is coming only from users who are not identified
>> as developers (committers). Therefore, I’ve re-enabled WIKI_CREATE
>> and WIKI_MODIFY permissions to the trac ‘developer’ group. 
>> This will keep the wiki locked down to those with committer access,
>> and not be as open as we would prefer. Moving forward, we should
>> decide which mechanism we’d like to use to help prevent spam.
> 
> Perhaps I was never added to the developer group, as I can't edit the
> wiki anymore. Could you look into this Lucas?
> 
> Thanks,
> 
> Michael

___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Michael Catanzaro]

On Sun, 2016-04-17 at 06:44 -0700, Lucas Forschler wrote:
> I believe the spam is coming only from users who are not identified
> as developers (committers). Therefore, I’ve re-enabled WIKI_CREATE
> and WIKI_MODIFY permissions to the trac ‘developer’ group. 
> This will keep the wiki locked down to those with committer access,
> and not be as open as we would prefer. Moving forward, we should
> decide which mechanism we’d like to use to help prevent spam.

Perhaps I was never added to the developer group, as I can't edit the
wiki anymore. Could you look into this Lucas?

Thanks,

Michael
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Lucas Forschler]

I believe the spam is coming only from users who are not identified as 
developers (committers). Therefore, I’ve re-enabled WIKI_CREATE and WIKI_MODIFY 
permissions to the trac ‘developer’ group. 
This will keep the wiki locked down to those with committer access, and not be 
as open as we would prefer. Moving forward, we should decide which mechanism 
we’d like to use to help prevent spam.

Lucas

> On Apr 17, 2016, at 6:14 AM, Lucas Forschler  wrote:
> 
> I’ve removed WIKI_CREATE and WIKI_MODIFY permissions from the ‘authenticated' 
> and ‘developer' groups. Removing from the authenticated group may have been 
> enough, but I wanted to be certain to stop spam and get it under control 
> before loosening permissions.
> 
> I’ve also attempted to delete all the spam posts, and revert any 
> modifications to other pages.
> 
> Looks like the following email addresses were used:
> tom24...@gmail.com 
> anna.rasca...@gmail.com 
> emaxi...@gmail.com 
> mailme.jo...@rediffmail.com 
> 
> I believe we can turn on the Captcha mechanism, which may help alleviate some 
> spam. I’ll continue to investigate.
> Lucas
> 
>> On Apr 17, 2016, at 5:27 AM, Lucas Forschler > > wrote:
>> 
>> I’m investigating now.
>> It looks like trac also has some spam filter ability: 
>> https://trac.edgewall.org/wiki/SpamFilter 
>> 
>> 
>> Lucas
>> 
>>> On Apr 16, 2016, at 7:07 PM, Darin Adler >> > wrote:
>>> 
>>> We are definitely going to have to change the policy on the wiki. The spam 
>>> is being posted from multiple different email addresses, so banning 
>>> accounts is not going to be sufficient.
>>> 
>>> Who knows how to turn off modification to the Wiki while we decide how to 
>>> lock it down?
>>> 
>>> — Darin
>>> ___
>>> webkit-dev mailing list
>>> webkit-dev@lists.webkit.org 
>>> https://lists.webkit.org/mailman/listinfo/webkit-dev 
>>> 
>> 
>> ___
>> webkit-dev mailing list
>> webkit-dev@lists.webkit.org 
>> https://lists.webkit.org/mailman/listinfo/webkit-dev
> 
> ___
> webkit-dev mailing list
> webkit-dev@lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev

___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Lucas Forschler]

I’ve removed WIKI_CREATE and WIKI_MODIFY permissions from the ‘authenticated' 
and ‘developer' groups. Removing from the authenticated group may have been 
enough, but I wanted to be certain to stop spam and get it under control before 
loosening permissions.

I’ve also attempted to delete all the spam posts, and revert any modifications 
to other pages.

Looks like the following email addresses were used:
tom24...@gmail.com
anna.rasca...@gmail.com
emaxi...@gmail.com
mailme.jo...@rediffmail.com 

I believe we can turn on the Captcha mechanism, which may help alleviate some 
spam. I’ll continue to investigate.
Lucas

> On Apr 17, 2016, at 5:27 AM, Lucas Forschler  wrote:
> 
> I’m investigating now.
> It looks like trac also has some spam filter ability: 
> https://trac.edgewall.org/wiki/SpamFilter 
> 
> 
> Lucas
> 
>> On Apr 16, 2016, at 7:07 PM, Darin Adler > > wrote:
>> 
>> We are definitely going to have to change the policy on the wiki. The spam 
>> is being posted from multiple different email addresses, so banning accounts 
>> is not going to be sufficient.
>> 
>> Who knows how to turn off modification to the Wiki while we decide how to 
>> lock it down?
>> 
>> — Darin
>> ___
>> webkit-dev mailing list
>> webkit-dev@lists.webkit.org 
>> https://lists.webkit.org/mailman/listinfo/webkit-dev
> 
> ___
> webkit-dev mailing list
> webkit-dev@lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev

___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Lucas Forschler]

I’m investigating now.
It looks like trac also has some spam filter ability: 
https://trac.edgewall.org/wiki/SpamFilter 


Lucas

> On Apr 16, 2016, at 7:07 PM, Darin Adler  wrote:
> 
> We are definitely going to have to change the policy on the wiki. The spam is 
> being posted from multiple different email addresses, so banning accounts is 
> not going to be sufficient.
> 
> Who knows how to turn off modification to the Wiki while we decide how to 
> lock it down?
> 
> — Darin
> ___
> webkit-dev mailing list
> webkit-dev@lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev

___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Darin Adler]

We are definitely going to have to change the policy on the wiki. The spam is 
being posted from multiple different email addresses, so banning accounts is 
not going to be sufficient.

Who knows how to turn off modification to the Wiki while we decide how to lock 
it down?

— Darin
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Darin Adler]

> On Apr 16, 2016, at 6:44 PM, Michael Catanzaro  wrote:
> 
> a wiki admin will have to clean this up

I don’t think I’m an admin, but I was able to delete the pages.

> (and ban the user).

I don’t know how to do that.

— Darin
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Darin Adler]

> On Apr 16, 2016, at 6:44 PM, Michael Catanzaro  wrote:
> 
> A bunch of spam pages are currently being created on the wiki. I don’t have 
> permission to delete the pages

I deleted them.

If this continues then we can change the rules for the Wiki.

— Darin
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Michael Catanzaro]

A bunch of spam pages are currently being created on the wiki. I don't
have permission to delete the pages so a wiki admin will have to clean
this up (and ban the user).

The first such page is:

http://trac.webkit.org/wiki/Microsoft%20Office%20Support@%201844.811.60
63%20Phone%20number%20Microsoft%20Office%20tech%20support%20number..
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Re: [webkit-dev] SPAM on trac.webkit.org

[Darin Adler]

> On Mar 30, 2016, at 4:00 AM, Osztrogonác Csaba  wrote:
> 
> Just out of curiosity, why trac.webkit.org WIKI can be editable by everybody? 
> Shouldn't we restrict it for only contributors who are present in 
> contributors.json?

I think it’s just a result of our original philosophy on how to run the 
project. We typically start as open as possible without restrictions and lock 
things down only if we decide that’s a solution to a problem.

— Darin
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev