Re: getting spammed on bugzilla

[Joel Brobecker <brobecker@adacore.com>]

> > > LLVM has solved this by disabling new user self-registration:
> > >
> > >   https://bugs.llvm.org/enter_bug.cgi
> > >
> > > "New user self-registration is disabled due to spam. For an account please email
> > > bugs-admin@lists.llvm.org
> > > with your e-mail address and full name."
> >
> > I'm happy to help with answering those legitimate account
> > creations, if that makes a differnce.
> >
> > Any other ideas, perhaps?
> 
> GCC already disables new account creation; while sourceware does not.
> I know the gcc bugzilla did get some spam last week and even at that
> point, the account had been created manually too (GCC has had new
> accounts disable for over a few years now even).
> So what looked like a legitimate request and turned out not to be, did
> slip through.  Fixing that is hard really.

Interesting. Thanks for sharing Andrew.

My thinking on this is that we should try doing the same for
sourceware's bugzilla, and see how it goes. I'm hoping the extra
step will be a high enough barrier that it'll encourage the majority
of spammers to find somewhere else to go. Even if not perfect, if
we can block the majority of spam, that'll already be a great win
for us.

-- 
Joel