Re: getting spammed on bugzilla

[Mark Wielaard <mark@klomp.org>]

Hi,

On Fri, Nov 12, 2021 at 08:40:33AM +0400, Joel Brobecker via Overseers wrote:
> My thinking on this is that we should try doing the same for
> sourceware's bugzilla, and see how it goes. I'm hoping the extra
> step will be a high enough barrier that it'll encourage the majority
> of spammers to find somewhere else to go. Even if not perfect, if
> we can block the majority of spam, that'll already be a great win
> for us.

I don't like it, but I don't see another solution.  I did tweak the
spam filters to count http[s]:// and reject any comments containing
10+ urls. That seems to have worked a little. But soon after we saw
even more spam comments that simply use 1 url (and copy/paste some
earlier comment text). Currently I am blocking ~3 users and tagging
~10 comments as spam a day. Which isn't really productive use of my
time, and not really sustainable. So unless someone knows a better way
of automatically detecting spam bugzilla comments and blocking users
that post them I am afraid we will have to restrict who can sign up
for a bugzilla account or explicitly approve first time bug posters.

Cheers,

Mark