From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 25546 invoked by alias); 11 Mar 2013 20:27:40 -0000 Received: (qmail 25504 invoked by uid 22791); 11 Mar 2013 20:27:37 -0000 X-SWARE-Spam-Status: No, hits=-5.2 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,KHOP_RCVD_TRUST,KHOP_THREADED,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_YE X-Spam-Check-By: sourceware.org Received: from mail-ve0-f176.google.com (HELO mail-ve0-f176.google.com) (209.85.128.176) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Mon, 11 Mar 2013 20:27:22 +0000 Received: by mail-ve0-f176.google.com with SMTP id cz10so3002394veb.35 for ; Mon, 11 Mar 2013 13:27:21 -0700 (PDT) X-Received: by 10.52.37.81 with SMTP id w17mr4727382vdj.70.1363033641659; Mon, 11 Mar 2013 13:27:21 -0700 (PDT) MIME-Version: 1.0 Received: by 10.58.237.1 with HTTP; Mon, 11 Mar 2013 13:26:41 -0700 (PDT) In-Reply-To: References: From: Steven Bosscher Date: Mon, 11 Mar 2013 20:27:00 -0000 Message-ID: Subject: Re: Why so much spam on the GCC wiki? To: overseers@sourceware.org Content-Type: text/plain; charset=ISO-8859-1 Mailing-List: contact overseers-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: overseers-owner@sourceware.org X-SW-Source: 2013-q1/txt/msg00080.txt.bz2 On Mon, Mar 4, 2013 at 8:32 AM, Ian Lance Taylor wrote: > As you know, there is a trivial password scheme--you have to answer one > of two questions to make a change. I assume that the two possible > answers have been built into spam programs, so I bet we could eliminate > a lot of new spam for a while by just changing the passwords. I think > this is in /wiki/gcc.py on sourceware. Anybody have any good > suggestions for new questions? Suggestions for new questions: - release dates - date stamp of the latest trunk snapshot (if updating the password(s) can be scripted on sourceware.org) - output from dummy C programs that "decrypt" a string But why not just somehow restrict wiki change access to sourceware account holders? The openness of the wiki is a noble goal, but AFAIK there are no non-contributor pages on the wiki anyway. > I also think it would be a good idea to require a comment for every > change to the wiki. That would also make it easier to spot spam changes > since it would be harder for the bots to create a coherent comment. I'm > not sure if there is a simple way to do that. That's certainly a good idea. Can it be done? Ciao! Steven