www.digitalmars.com         C & C++   DMDScript  

digitalmars.D - Bot creating issues

reply Dominikus Dittes Scherkl <Dominikus.Scherkl continental-corporation.com> writes:
Hm.

There seem to be some bot generating a lot of new Issues in the D 
bugzilla. Or is that intentional?!?
Nov 25 2016
next sibling parent reply Dominikus Dittes Scherkl <Dominikus.Scherkl continental-corporation.com> writes:
On Friday, 25 November 2016 at 17:27:07 UTC, Dominikus Dittes 
Scherkl wrote:

 Hm.

 There seem to be some bot generating a lot of new Issues in the 
 D bugzilla. Or is that intentional?!?


It started 3 days ago, but becomming increasingly frequent - at 
the moment every twenty minutes a new one appears!
Nov 25 2016
parent reply "H. S. Teoh via Digitalmars-d" <digitalmars-d puremagic.com> writes:
On Fri, Nov 25, 2016 at 05:34:53PM +0000, Dominikus Dittes Scherkl via
Digitalmars-d wrote:

 On Friday, 25 November 2016 at 17:27:07 UTC, Dominikus Dittes Scherkl wrote:

 Hm.
 
 There seem to be some bot generating a lot of new Issues in the D
 bugzilla. Or is that intentional?!?


 
 It started 3 days ago, but becomming increasingly frequent - at the
 moment every twenty minutes a new one appears!


I just went and closed a bunch of them that I could find.  They all
appear to come from the same account, so perhaps a temporary stop-gap is
to disable the account in question?

Though, I suspect it's not so simple, as it's probably a spam bot that's
signing up new accounts to post spam every so often.

I wonder if the solution might be as simple as slightly massaging the
signup page so that it's not as recognizable to the spambot as the
standard bugzilla signup page.  This should at least defeat the dumbest
of the spambots. Though I suspect nowadays smarter spambots are readily
available to spammers that can easily bypass such measures.  But unless
we're being targeted specifically, simple measures ought to be able to
stem the tide of spam.

It's a whole 'nother can o' worms if we're being targeted specifically,
though.


T

-- 
"No, John.  I want formats that are actually useful, rather than over-featured
megaliths that address all questions by piling on ridiculous internal links in
forms which are hideously over-complex." -- Simon St. Laurent on xml-dev
Nov 25 2016
parent reply WM.H <WM.h nowhere.fi> writes:
On Friday, 25 November 2016 at 17:37:13 UTC, H. S. Teoh wrote:

 On Fri, Nov 25, 2016 at 05:34:53PM +0000, Dominikus Dittes 
 Scherkl via Digitalmars-d wrote:

 On Friday, 25 November 2016 at 17:27:07 UTC, Dominikus Dittes 
 Scherkl wrote:

 Hm.
 
 There seem to be some bot generating a lot of new Issues in 
 the D bugzilla. Or is that intentional?!?


 
 It started 3 days ago, but becomming increasingly frequent - 
 at the moment every twenty minutes a new one appears!


 I just went and closed a bunch of them that I could find.  [...]
 T


I hope that the bot don't use a real address because you've 
forget to uncheck "CC add me to the list"...which means that your 
address is possibly added to a database.
Nov 25 2016
parent reply "H. S. Teoh via Digitalmars-d" <digitalmars-d puremagic.com> writes:
On Fri, Nov 25, 2016 at 07:17:20PM +0000, WM.H via Digitalmars-d wrote:

 On Friday, 25 November 2016 at 17:37:13 UTC, H. S. Teoh wrote:

 On Fri, Nov 25, 2016 at 05:34:53PM +0000, Dominikus Dittes Scherkl via
 Digitalmars-d wrote:

 On Friday, 25 November 2016 at 17:27:07 UTC, Dominikus Dittes
 Scherkl wrote:

 Hm.

 There seem to be some bot generating a lot of new Issues in
 the D bugzilla. Or is that intentional?!?




 
 It started 3 days ago, but becomming increasingly frequent - at
 the moment every twenty minutes a new one appears!


 
 I just went and closed a bunch of them that I could find.  [...]
 T


 
 I hope that the bot don't use a real address because you've forget to
 uncheck "CC add me to the list"...which means that your address is
 possibly added to a database.


Oops! :-(


T

-- 
Truth, Sir, is a cow which will give [skeptics] no more milk, and so they are
gone to milk the bull. -- Sam. Johnson
Nov 25 2016
parent Johannes Pfau <nospam example.com> writes:
Am Fri, 25 Nov 2016 11:43:07 -0800
schrieb "H. S. Teoh via Digitalmars-d" <digitalmars-d puremagic.com>:


 I hope that the bot don't use a real address because you've forget
 to uncheck "CC add me to the list"...which means that your address
 is possibly added to a database.  


 
 Oops! :-(
 


If bots really want to collect email addresses from bugzilla there are
other ways to do that: The 'bug report changed' email sent by bugzilla
contains email addresses anyway:

hsteoh ... changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |hsteoh ...
         Resolution|---                         |INVALID

Also all these messages get posted to d.D.bugs including full email
addresses. This archive can be indexed by crawlers:
https://www.google.de/search?q=site%3Ahttp%3A%2F%2Fforum.dlang.org%2Fgroup%2Fissues&ie=utf-8&oe=utf-8&client=firefox-b&gfe_rd=cr&ei=V1I5WM3QI8Kv8wfJsrKwAw#q=site:http:%2F%2Fforum.dlang.org%2Fgroup%2Fissues+hsteoh

Additionally every logged in bugzilla user can see the email address of
any other bugzilla user when reading a bug report.


TLDR; better use a good spam filter :-(
Nov 26 2016
prev sibling parent Jonathan M Davis via Digitalmars-d <digitalmars-d puremagic.com> writes:
On Friday, November 25, 2016 17:27:07 Dominikus Dittes Scherkl via 
Digitalmars-d wrote:

 Hm.

 There seem to be some bot generating a lot of new Issues in the D
 bugzilla. Or is that intentional?!?


Of course, it isn't. It's spam. And Brad is looking into how to deal with
it.

- Jonathan M Davis
Nov 25 2016