Remove spam with EditComments extension on sourceware.org bugzilla.

Remove spam with EditComments extension on sourceware.org bugzilla.

[Carlos O'Donell]

Overseers,

Since we have disabled the ability for anonymous uses from
editing bugs, the spammers have just started filling new
bugs with spam content in the description.

We had four such bugs posted on the 12th of this month:
https://sourceware.org/bugzilla/buglist.cgi?email1=cucu%40divismail.ru&emailreporter1=1&emailtype1=exact&list_id=30036

Even with tag SPAM to hide the content the HTML source of
the page continues to have the spammy content, likely not
hiding it from indexing robots.

I suggest we install Mozilla's EditComments extension:
https://github.com/mozilla-bteam/bmo/tree/master/extensions/EditComments
And allow admins to wipe spam comments from the database.

That should be enough to make us a hard target and hopefully
they move on.

Thoughts?

-- 
Cheers,
Carlos.

Re: Remove spam with EditComments extension on sourceware.org bugzilla.

[Florian Weimer]

On 07/14/2016 09:45 PM, Carlos O'Donell wrote:
> Overseers,
>
> Since we have disabled the ability for anonymous uses from
> editing bugs, the spammers have just started filling new
> bugs with spam content in the description.
>
> We had four such bugs posted on the 12th of this month:
> https://sourceware.org/bugzilla/buglist.cgi?email1=cucu%40divismail.ru&emailreporter1=1&emailtype1=exact&list_id=30036
>
> Even with tag SPAM to hide the content the HTML source of
> the page continues to have the spammy content, likely not
> hiding it from indexing robots.
>
> I suggest we install Mozilla's EditComments extension:
> https://github.com/mozilla-bteam/bmo/tree/master/extensions/EditComments
> And allow admins to wipe spam comments from the database.
>
> That should be enough to make us a hard target and hopefully
> they move on.

Another option would be to set NOFOLLOW on all external hyperlinks, 
which might serve as a deterrent as well.

Florian

Re: Remove spam with EditComments extension on sourceware.org bugzilla.

[Carlos O'Donell]

On 07/14/2016 03:45 PM, Carlos O'Donell wrote:
> Overseers,
> 
> Since we have disabled the ability for anonymous uses from
> editing bugs, the spammers have just started filling new
> bugs with spam content in the description.
> 
> We had four such bugs posted on the 12th of this month:
> https://sourceware.org/bugzilla/buglist.cgi?email1=cucu%40divismail.ru&emailreporter1=1&emailtype1=exact&list_id=30036
> 
> Even with tag SPAM to hide the content the HTML source of
> the page continues to have the spammy content, likely not
> hiding it from indexing robots.
> 
> I suggest we install Mozilla's EditComments extension:
> https://github.com/mozilla-bteam/bmo/tree/master/extensions/EditComments
> And allow admins to wipe spam comments from the database.
> 
> That should be enough to make us a hard target and hopefully
> they move on.
> 
> Thoughts?

If you are allergic to github, here is the webtools git view of the
EditComments extension:

https://git.mozilla.org/?p=webtools/bmo/bugzilla.git;a=tree;f=extensions/EditComments;hb=HEAD

The related bugzilla upstream bug:

https://bugzilla.mozilla.org/show_bug.cgi?id=540
 
Any thoughts about enabling this to allow a core group of developers
to cleanup after the spammer while still leaving the registration an
open process (until we get comment moderation in upstream bugzilla)?

-- 
Cheers,
Carlos.