[lm-sensors] new account(s) - trac/wiki

[lm-sensors] new account(s) - trac/wiki

[Rudolf Marek]

Hi all,

Anyone here interrested in Wiki/trac account?

Btw I had to create the special account for the appending of trac ticket
user:ticket
password:needhelp

As the temporary anti-spam workaround.

Also we need to discuss the wiki editing policy, I think more people should be
edit the Wiki. What others think? Some open account to edit certain pages?
(except the download page for example), or something like bellow?

Phil, Axel please is it possible to:
1) remove those old imported tickets (close them)
2) remove the spam?
3) I think trac-10 should have some captcha or some account plugin.
   Maybe we should move to this direction. Or is there a way how to write
something to new ticket page about the "ticket" account?

This email should be some starter of discussion.

Many thanks,
Regards
Rudolf

[lm-sensors] new account(s) - trac/wiki

[Axel Thimm]

On Sun, Jul 09, 2006 at 10:20:47PM +0200, Rudolf Marek wrote:
> Hi all,
> 
> Anyone here interrested in Wiki/trac account?
> 
> Btw I had to create the special account for the appending of trac ticket
> user:ticket
> password:needhelp
> 
> As the temporary anti-spam workaround.
> 
> Also we need to discuss the wiki editing policy, I think more people should be
> edit the Wiki. What others think? Some open account to edit certain pages?
> (except the download page for example), or something like bellow?
> 
> Phil, Axel please is it possible to:
> 1) remove those old imported tickets (close them)
> 2) remove the spam?

Where is it? The trac installation allows for easy removal of whole
tickets. Spam comments need to be cut out via SQL :/

> 3) I think trac-10 should have some captcha or some account plugin.
>    Maybe we should move to this direction. Or is there a way how to write
> something to new ticket page about the "ticket" account?

AFAIK there is no captcha support anywhere in trac yet

http://trac-hacks.org/ticket/407

and the registration plugin is for 0.9. So the best we can currently
hope is that 0.10 gets finally released, so that some plugins are
brought up to date including the registration/authentication plugins.

Until then account registration needs to be manually handled.
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.lm-sensors.org/pipermail/lm-sensors/attachments/20060709/1389eb9d/attachment-0001.bin 

[lm-sensors] new account(s) - trac/wiki

[Rudolf Marek]

> Where is it? The trac installation allows for easy removal of whole
> tickets. Spam comments need to be cut out via SQL :/

Yes I know it is PITA.
2076
2082
2005

and #1

I stopped the anonymous append as fast I could.

Many thanks,

Regards
Rudolf

[lm-sensors] new account(s) - trac/wiki

[Philip Edelbrock]

On Jul 9, 2006, at 2:19 PM, Axel Thimm wrote:

> On Sun, Jul 09, 2006 at 10:20:47PM +0200, Rudolf Marek wrote:
>> Hi all,
>>
>> Anyone here interrested in Wiki/trac account?
>>
>> Btw I had to create the special account for the appending of trac  
>> ticket
>> user:ticket
>> password:needhelp
>>
>> As the temporary anti-spam workaround.
>>
>> Also we need to discuss the wiki editing policy, I think more  
>> people should be
>> edit the Wiki. What others think? Some open account to edit  
>> certain pages?
>> (except the download page for example), or something like bellow?
>>
>> Phil, Axel please is it possible to:
>> 1) remove those old imported tickets (close them)

I closed them.


>> 2) remove the spam?

I can remove the spam comments, too, while I'm there.


Phil
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2439 bytes
Desc: not available
Url : http://lists.lm-sensors.org/pipermail/lm-sensors/attachments/20060709/af911984/attachment.bin 

[lm-sensors] new account(s) - trac/wiki

[Philip Edelbrock]

On Jul 9, 2006, at 3:30 PM, Philip Edelbrock wrote:

>
> On Jul 9, 2006, at 2:19 PM, Axel Thimm wrote:
>
>> On Sun, Jul 09, 2006 at 10:20:47PM +0200, Rudolf Marek wrote:
>>> Hi all,
>>>
>>> Anyone here interrested in Wiki/trac account?
>>>
>>> Btw I had to create the special account for the appending of trac  
>>> ticket
>>> user:ticket
>>> password:needhelp
>>>
>>> As the temporary anti-spam workaround.
>>>
>>> Also we need to discuss the wiki editing policy, I think more  
>>> people should be
>>> edit the Wiki. What others think? Some open account to edit  
>>> certain pages?
>>> (except the download page for example), or something like bellow?
>>>
>>> Phil, Axel please is it possible to:
>>> 1) remove those old imported tickets (close them)
>
> I closed them.
>
>
>>> 2) remove the spam?
>
> I can remove the spam comments, too, while I'm there.
>

OK, I changed the comments to '(spam removed)' since it looks like  
they also changed the status of the ticket at the same time, and I  
didn't want to lose that information.

Tickets effected (in no particular order):

2072
2082
2075
1
2076
2005
1946


Phil

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2439 bytes
Desc: not available
Url : http://lists.lm-sensors.org/pipermail/lm-sensors/attachments/20060709/94f52058/attachment.bin 

[lm-sensors] new account(s) - trac/wiki

[Philip Edelbrock]

On Jul 9, 2006, at 3:44 PM, Philip Edelbrock wrote:

>
> On Jul 9, 2006, at 3:30 PM, Philip Edelbrock wrote:
>
>>
>> On Jul 9, 2006, at 2:19 PM, Axel Thimm wrote:
>>
>>> On Sun, Jul 09, 2006 at 10:20:47PM +0200, Rudolf Marek wrote:
>>>> Hi all,
>>>>
>>>> Anyone here interrested in Wiki/trac account?
>>>>
>>>> Btw I had to create the special account for the appending of  
>>>> trac ticket
>>>> user:ticket
>>>> password:needhelp
>>>>
>>>> As the temporary anti-spam workaround.
>>>>
>>>> Also we need to discuss the wiki editing policy, I think more  
>>>> people should be
>>>> edit the Wiki. What others think? Some open account to edit  
>>>> certain pages?
>>>> (except the download page for example), or something like bellow?
>>>>
>>>> Phil, Axel please is it possible to:
>>>> 1) remove those old imported tickets (close them)
>>
>> I closed them.
>>
>>
>>>> 2) remove the spam?
>>
>> I can remove the spam comments, too, while I'm there.
>>
>
> OK, I changed the comments to '(spam removed)' since it looks like  
> they also changed the status of the ticket at the same time, and I  
> didn't want to lose that information.
>
> Tickets effected (in no particular order):
>
> 2072
> 2082
> 2075
> 1
> 2076
> 2005
> 1946

OK, I reverted the state of the tickets back to how they were before,  
and tried to undo as much of the damage as possible.  There's still  
some bogus change histories that get displayed, but we'll just have  
to ingore those for now, I guess.  At least it was only 8 tickets. ;'p

BTW- It looks like Axel has a dev version os Trac 0.10 installed?  I  
was reading that there is a captcha plugin for it:

http://dev.wp-plugins.org/wiki/AuthImage


Phil

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2439 bytes
Desc: not available
Url : http://lists.lm-sensors.org/pipermail/lm-sensors/attachments/20060709/445acfea/attachment.bin 

[lm-sensors] new account(s) - trac/wiki

[Michael Renzmann]

Hi.

> On Sun, Jul 09, 2006 at 10:20:47PM +0200, Rudolf Marek wrote:
>> Phil, Axel please is it possible to:
>> 1) remove those old imported tickets (close them)
>> 2) remove the spam?
> Where is it? The trac installation allows for easy removal of whole
> tickets. Spam comments need to be cut out via SQL :/

Nope. There is a nice plugin that allows to easily remove tickets as well
as changes (comments, attribute modifications, ...) to tickets. We use it
on madwifi.org to get rid of comment spam quite successfully.

The plugin can be found here:
http://trac-hacks.org/wiki/TicketDeletePlugin

It requires WebAdmin, which is already included in 0.10dev.

>> 3) I think trac-10 should have some captcha or some account plugin.
>>    Maybe we should move to this direction. Or is there a way how to
>> write
>> something to new ticket page about the "ticket" account?
> AFAIK there is no captcha support anywhere in trac yet

Captcha's are bad for usability, and personally I avoid it wherever
possible. Forcing users to make use of registration (or providing a
default login) also has a negative effect on the usability IMO. There are
other measures that can be taken against spam:

1. The above mentioned TicketDeletePlugin to remove existing spam and
those spam posts that makes it to the ticket engine albeit the measures
that are in effect (no anti-spam method is perfect).

2. https. Spam bots don't know https, but the users' browser does.
However, he will have to click a few buttons to accept the home-made
certificate, unless the project is ready to invest some money to get one
that is signed by a trusted CA.

3. mod_security, if Trac is running on Apache. Almost all Trac spam I've
seen so far is getting POSTed to .../ticket/<number>#preview, where
legitimate ticket submissions are POSTed to .../ticket/<number> (without
#preview). Most of the spam that is thrown on Trac does not get through
because of this (Trac is telling the spammer that someone else has
modified the ticket since he has started to "edit" it), however it still
puts a bit of unnecessary load on the server.
Another thing I've noticed is that spammers don't have neither the
trac_auth nor the trac_session cookie.

I'm looking at mod_security now and will give it a try to filter out spam
by these findings.

4. SpamFilter plugin: http://trac.edgewall.org/wiki/SpamFilter

This requires 0.10dev r3180 or later. It provides various methods to
filter out spam: via regular expressions (used on quite a few sites), by
blacklisting IPs (not very useful IMO), via akismet and with a Bayes
filter.


IMO, either 2 or a combination of 3 and 4 should be quite effective,
reducing the spam that shows up on the site to a minimum.

> and the registration plugin is for 0.9. So the best we can currently
> hope is that 0.10 gets finally released, so that some plugins are
> brought up to date including the registration/authentication plugins.
>
> Until then account registration needs to be manually handled.

Registration won't help for too long, see:
http://trac-hacks.org/ticket/443 for example.

Bye, Mike