[Bug Bugzilla/32270] New: Re-enabling account creation with an anti-spam Bugzilla extension

[Bug Bugzilla/32270] New: Re-enabling account creation with an anti-spam Bugzilla extension

[sam at gentoo dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=32270

            Bug ID: 32270
           Summary: Re-enabling account creation with an anti-spam
                    Bugzilla extension
           Product: sourceware
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Bugzilla
          Assignee: LpSolit at gmail dot com
          Reporter: sam at gentoo dot org
                CC: overseers at sourceware dot org, pinskia at gcc dot gnu.org
  Target Milestone: ---

Making accounts request-only for anti-spam purposes has been effective but it
deters people from reporting bugs. We often get people give up in #gcc, for
example, let alone others we don't hear from.

In Gentoo, we wrote a quick BZ extension to ban URLs for 24 hours after account
creation:
https://gitweb.gentoo.org/fork/bugzilla.git/commit/?id=fcc197db4063b60433d29af0b2173be09271bbb6.

pinskia pointed out that if we adopt this for sourceware+gcc, we should add an
exemption for godbolt. Maybe we should do debian etc as well.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug Bugzilla/32270] Re-enabling account creation with an anti-spam Bugzilla extension

[pinskia at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=32270

--- Comment #1 from Andrew Pinski <pinskia at gcc dot gnu.org> ---
github should also be on the exemption list because many non-bugzilla users
will place everything in the text field rather than "see also", etc.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug Bugzilla/32270] Re-enabling account creation with an anti-spam Bugzilla extension

[LpSolit at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=32270

--- Comment #2 from Frédéric Buclin <LpSolit at gmail dot com> ---
Note that there is no need to alter the DB schema to store the creation date of
user accounts. This information is already stored in the profiles_activity
table:

SELECT profiles_when FROM profiles_activity INNER JOIN fielddefs ON fieldid =
fielddefs.id WHERE userid = ? AND name = 'creation_ts';

The question mark must be replaced by the user ID.

This makes most of the code in the Gentoo extension useless.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug Bugzilla/32270] Re-enabling account creation with an anti-spam Bugzilla extension

[sam at gentoo dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=32270

--- Comment #3 from Sam James <sam at gentoo dot org> ---
(In reply to Frédéric Buclin from comment #2)
> This makes most of the code in the Gentoo extension useless.

Excellent news, thanks. I'll pass that on.

Any thoughts on the general issue?

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug Bugzilla/32270] Re-enabling account creation with an anti-spam Bugzilla extension

[LpSolit at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=32270

--- Comment #4 from Frédéric Buclin <LpSolit at gmail dot com> ---
(In reply to Sam James from comment #0)
> In Gentoo, we wrote a quick BZ extension to ban URLs for 24 hours after
> account creation

How effective is this extension to prevent spam ? Aren't spammers waiting 24
hours to try again? Or do they give up pretty quickly?

To prevent spammers, I filed https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72856
some years ago, but it didn't got very far.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug Bugzilla/32270] Re-enabling account creation with an anti-spam Bugzilla extension

[sam at gentoo dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=32270

--- Comment #5 from Sam James <sam at gentoo dot org> ---
We get it a few times a year now, it was much worse before. I am also happy to
keep an eye out, I already watch new bug reports closely as does Andrew.

-- 
You are receiving this mail because:
You are on the CC list for the bug.