From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([140.186.70.92]:38614)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <sw@weilnetz.de>) id 1RMEHC-0004UZ-6q
	for qemu-devel@nongnu.org; Fri, 04 Nov 2011 03:33:23 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <sw@weilnetz.de>) id 1RMEHB-0002i5-2H
	for qemu-devel@nongnu.org; Fri, 04 Nov 2011 03:33:22 -0400
Received: from v220110690675601.yourvserver.net ([78.47.199.172]:35484)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <sw@weilnetz.de>) id 1RMEHA-0002hH-U1
	for qemu-devel@nongnu.org; Fri, 04 Nov 2011 03:33:21 -0400
Message-ID: <4EB39500.3090608@weilnetz.de>
Date: Fri, 04 Nov 2011 08:32:16 +0100
From: Stefan Weil <sw@weilnetz.de>
MIME-Version: 1.0
References: <CAEH94LipDuuORxPjCAOJvO2QnYF1DMOcSswrDR1R4Tna1w-m2Q@mail.gmail.com>
	<4EB3544B.6090303@us.ibm.com>
In-Reply-To: <4EB3544B.6090303@us.ibm.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [Qemu-devel] The mainpage of QEMU.org is attacked?
List-Id: <qemu-devel.nongnu.org>
List-Unsubscribe: <https://lists.nongnu.org/mailman/options/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.nongnu.org/archive/html/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <https://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: Anthony Liguori <aliguori@us.ibm.com>
Cc: QEMU Developers <qemu-devel@nongnu.org>

Am 04.11.2011 03:56, schrieb Anthony Liguori:
> On 11/03/2011 09:43 PM, Zhi Yong Wu wrote:
>> HI,
>>
>> Just now i found that the mainpage of QEMU.org is hacked, right?
>> http://wiki.qemu.org/Main_Page
>
> Not hacked, it's a wiki, so it's vulnerable to spam.  Folks have been 
> doing a great job reverting the spam.
>
> It amazes me that the spambots are beating the captcha so easily :-/
>
> I've protected the front page for now as I think this is happening 
> repeatedly.
>
> Regards,
>
> Anthony Liguori

I suggest more restrictions for new user accounts to reduce wiki spam.

These mediawiki extensions require more reasonable user names
and account confirmation:

http://www.mediawiki.org/wiki/Extension:ConfirmAccount
http://www.mediawiki.org/wiki/Extension:AntiSpoof

For someone who is really interested in contributing to the QEMU wiki,
account confirmation should be acceptable, and we could be sure
that there is at least a valid mail address connected to the new account.

The rate of valid account request will be much less than the
current rate of new spammer accounts and their bad contributions,
so the work required to process them is less than the current
work to remove spam.

Regards,
Stefan Weil