From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 48511 invoked by alias); 14 Jul 2016 19:47:18 -0000 Mailing-List: contact overseers-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: overseers-owner@sourceware.org Received: (qmail 48486 invoked by uid 89); 14 Jul 2016 19:47:17 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-2.2 required=5.0 tests=BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RP_MATCHES_RCVD,SPF_HELO_PASS autolearn=ham version=3.3.2 spammy=month, UD:ru, Hx-languages-length:1032, spammy X-HELO: mx1.redhat.com Received: from mx1.redhat.com (HELO mx1.redhat.com) (209.132.183.28) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-GCM-SHA384 encrypted) ESMTPS; Thu, 14 Jul 2016 19:47:07 +0000 Received: from int-mx13.intmail.prod.int.phx2.redhat.com (int-mx13.intmail.prod.int.phx2.redhat.com [10.5.11.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 87EB47F7C8 for ; Thu, 14 Jul 2016 19:47:06 +0000 (UTC) Received: from oldenburg.str.redhat.com (ovpn-204-57.brq.redhat.com [10.40.204.57]) by int-mx13.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u6EJl4DN009878 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 14 Jul 2016 15:47:05 -0400 Subject: Re: Remove spam with EditComments extension on sourceware.org bugzilla. To: "Carlos O'Donell" , overseers@sourceware.org, Frank Eigler References: From: Florian Weimer Message-ID: Date: Thu, 14 Jul 2016 19:47:00 -0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-SW-Source: 2016-q3/txt/msg00010.txt.bz2 On 07/14/2016 09:45 PM, Carlos O'Donell wrote: > Overseers, > > Since we have disabled the ability for anonymous uses from > editing bugs, the spammers have just started filling new > bugs with spam content in the description. > > We had four such bugs posted on the 12th of this month: > https://sourceware.org/bugzilla/buglist.cgi?email1=cucu%40divismail.ru&emailreporter1=1&emailtype1=exact&list_id=30036 > > Even with tag SPAM to hide the content the HTML source of > the page continues to have the spammy content, likely not > hiding it from indexing robots. > > I suggest we install Mozilla's EditComments extension: > https://github.com/mozilla-bteam/bmo/tree/master/extensions/EditComments > And allow admins to wipe spam comments from the database. > > That should be enough to make us a hard target and hopefully > they move on. Another option would be to set NOFOLLOW on all external hyperlinks, which might serve as a deterrent as well. Florian