From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 25869 invoked by alias); 17 Dec 2010 01:01:55 -0000 Received: (qmail 25862 invoked by uid 22791); 17 Dec 2010 01:01:55 -0000 X-SWARE-Spam-Status: No, hits=-2.1 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW X-Spam-Check-By: sourceware.org Received: from mail-gw0-f41.google.com (HELO mail-gw0-f41.google.com) (74.125.83.41) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Fri, 17 Dec 2010 01:01:51 +0000 Received: by gwj22 with SMTP id 22so85404gwj.14 for ; Thu, 16 Dec 2010 17:01:49 -0800 (PST) MIME-Version: 1.0 Received: by 10.150.143.2 with SMTP id q2mr1960455ybd.46.1292547709144; Thu, 16 Dec 2010 17:01:49 -0800 (PST) Received: by 10.150.143.20 with HTTP; Thu, 16 Dec 2010 17:01:49 -0800 (PST) In-Reply-To: <20101216221104.GG9812@redhat.com> References: <20101127165330.GB29428@adacore.com> <20101213151136.GA25111@adacore.com> <20101216120523.GA22292@adacore.com> <20101216221104.GG9812@redhat.com> Date: Wed, 22 Dec 2010 01:43:00 -0000 Message-ID: Subject: Re: abusive user of GDB Wiki for spam ... From: Daniel Berlin To: "Frank Ch. Eigler" Cc: Joel Brobecker , overseers@sourceware.org, Daniel Jacobowitz Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Mailing-List: contact overseers-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: overseers-owner@sourceware.org X-SW-Source: 2010-q4/txt/msg00084.txt.bz2 On Thu, Dec 16, 2010 at 5:11 PM, Frank Ch. Eigler wrote: > > Hi - > > On Thu, Dec 16, 2010 at 04:05:23PM +0400, Joel Brobecker wrote: > > [...] > > The first thing I would do is delete these files (added to page > > "rutud"). =A0This requires special priviledges. > > I zapped the files by low level fs ops. =A0Your wiki userid is now an > 'admin' and should have despam privileges, if that's quite enough. > > > The second thing is probably start a discussion with the other > > GDB maintainers as to decide what to do to prevent this sort of > > abuse. [...] > > The easiest option is to disable wiki attachments by default, by > adding > > =A0 =A0 actions_excluded =3D [u'AttachFile'] > > into the /wiki/PROJECT.py file. =A0Whether that can be enabled again on > a per-user basis, or whether an admin would have to hand-edit the file > again to turn on attachments briefly, I dunno. =A0Unfortunately, I have > so far found no better option with moinmoin. =A0Switching to another > wiki software (mediawiki?) is an option. At the point we switched from phpwiki, mediawiki was fairly difficult to se= tup. If it's not so hard anymore, i'm pretty positive mediawiki has a moinmoin importer, and supports recaptcha > > - FChE