Ticket #829 (closed defect: fixed)

Opened 6 years ago

Last modified 6 years ago

Rampant spambots (do something about them)

Reported by: williami Owned by: justin
Priority: blocker Milestone:
Component: CBLFS Wiki Version:
Keywords: Cc:

Description

I've just noticed that this site is being spammed by randomly generated Trac accounts, and that has got to stop. It's flooding the site, and it's annonying as hell.

Probably should try integrating a CAPTCHA in there, like reCAPTCHA:

 http://www.google.com/recaptcha

We can't let this go unnoticed. Marking as a blocker.

Change History

comment:1 Changed 6 years ago by justin

  • Status changed from new to assigned
  • Owner changed from clfs-commits@… to justin
  • Component changed from BOOK to CBLFS Wiki
  • Milestone CLFS Standard 1.2.0 deleted

Agreed, the spam bots are getting super annoying on both CBLFS and the trac here. First step is to upgrade trac, which has been on my todo list for a while anyways. I'll try to get to that today. For now, we have a trac module to delete said spam tickets which I just used to clear these out.

comment:2 Changed 6 years ago by justin

Trac has been upgraded to 0.12.2.

comment:3 Changed 6 years ago by justin

cblfs.cross-lfs.org has been upgraded, and spam plugins installed to help with the bots:

SpamBlacklist
TitleBlacklist

ConfirmEdit is already installed but could use some tightening. More to come.

Last edited 6 years ago by justin (previous) (diff)

comment:4 Changed 6 years ago by jciccone

Justin, Thanks for upgrading Trac, It's not sending out emails to the list when new tickets are made or when tickets are updated anymore.

Will look into some solutions for cblfs. I noticed it in my rss feed but haven't had a chance to do anything about it yet.

comment:5 Changed 6 years ago by jciccone

Correction, I am getting emails on tickets that I have commented on, but not any ticket that anyone makes. That's how it worked in the past, changed a while ago I just never said anything. Will look through the admin preferences.

I also re-enabled the math captcha in mediawiki. I had to re-configure the plugin a little bit as well as build ocaml and install  texvc for mediawiki.

If this is still a problem I think we should into using the DNSBLs next. In the past this was sufficient though.

Lets keep an eye and see what happens.

comment:6 Changed 6 years ago by jciccone

  • Status changed from assigned to closed
  • Resolution set to fixed

Looks good to me so far, going to close this ticket.

Note: See TracTickets for help on using tickets.