You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by Vincent Siveton <vi...@gmail.com> on 2007/02/19 13:19:11 UTC

Jira spam

Hi,

Today, user "marie" has been spamming the JIRA issues:
MPA-2, MPA-5 and MPA-6.
Last week, "mars luther" did it for MAVEN-1832.

Could someone suspend them?

Thanks,

Vincent

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


Re: Jira spam

Posted by Jeff Turner <je...@apache.org>.
On Tue, Feb 20, 2007 at 12:06:28AM +0100, Martin van den Bemt wrote:
> I think you need need to report this to Jeff (I thought he could something with that)... Although I
> don't know if Jeff also helps out on the codehaus install.. (maybe asking what kind of measures he
> takes so we can also do that on codehaus ?).

Rather than delete spam comments manually (which effectively just moves
them to the issue change history), a JIRA admin should run the JSP at
http://jira.codehaus.org/secure/admin/cleancommentspam.jsp and
permanently delete them.

I have been tracking IPs of spammers from about 8 public JIRAs for about
3 months, and the spam originates from just a handful of ISPs.  The
latest spam reported here is almost certainly from ninand.ro, because 3
other JIRAs where hit on the same day with identical links:

https://svn.atlassian.com/svn/public/contrib/jira/spamfighting/spammers/ninand.ro/89.34.173.230/

It's up to Codehaus ops people (Cc'ed), but I suggest asking the hosting
company (Contegix) to ban the IPs of these ISPs hosting repeat spammers:

https://svn.atlassian.com/svn/public/contrib/jira/spamfighting/spammers/blockspammers.rc

I've done this for issues.apache.org and atlassian.com domains and it's
solved the problem.

Additionally, Contegix needs to delete the deleted comments directly from
the database:

https://svn.atlassian.com/svn/public/contrib/jira/spamfighting/scripts/commentspam_delete

since they're still available as google-fodder in the history:

http://jira.codehaus.org/browse/MPA-6?page=com.atlassian.jira.plugin.system.issuetabpanels:changehistory-tabpanel


--Jeff


> Mvgr,
> Martin
> 
> Carlos Sanchez wrote:
> > you can change their password (so they can't login) and email (to
> > avoid password recovery), i guess that would take them more time to
> > figure out than if you just remove their account
> > 
> > On 2/19/07, Arnaud HERITIER <ah...@gmail.com> wrote:
> >> To remove their accounts we need to have their emails.
> >> But, that's effectively an infinite war ;-)
> >>
> >> Arnaud
> >>
> >> On 2/19/07, Emmanuel Venisse <em...@venisse.net> wrote:
> >> >
> >> > We can't really suspend them, if we remove account(s), spammer(s)
> >> create a
> >> > new one.
> >> >
> >> > Emmanuel
> >> >
> >> > Vincent Siveton a écrit :
> >> > > Hi,
> >> > >
> >> > > Today, user "marie" has been spamming the JIRA issues:
> >> > > MPA-2, MPA-5 and MPA-6.
> >> > > Last week, "mars luther" did it for MAVEN-1832.
> >> > >
> >> > > Could someone suspend them?
> >> > >
> >> > > Thanks,
> >> > >
> >> > > Vincent
> >> > >
> >> > > ---------------------------------------------------------------------
> >> > > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >> > > For additional commands, e-mail: dev-help@maven.apache.org
> >> > >
> >> > >
> >> > >
> >> > >
> >> >
> >> >
> >> > ---------------------------------------------------------------------
> >> > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >> > For additional commands, e-mail: dev-help@maven.apache.org
> >> >
> >> >
> >>
> > 
> > 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


Re: Jira spam

Posted by Martin van den Bemt <ml...@mvdb.net>.
I think you need need to report this to Jeff (I thought he could something with that)... Although I
don't know if Jeff also helps out on the codehaus install.. (maybe asking what kind of measures he
takes so we can also do that on codehaus ?).

Mvgr,
Martin

Carlos Sanchez wrote:
> you can change their password (so they can't login) and email (to
> avoid password recovery), i guess that would take them more time to
> figure out than if you just remove their account
> 
> On 2/19/07, Arnaud HERITIER <ah...@gmail.com> wrote:
>> To remove their accounts we need to have their emails.
>> But, that's effectively an infinite war ;-)
>>
>> Arnaud
>>
>> On 2/19/07, Emmanuel Venisse <em...@venisse.net> wrote:
>> >
>> > We can't really suspend them, if we remove account(s), spammer(s)
>> create a
>> > new one.
>> >
>> > Emmanuel
>> >
>> > Vincent Siveton a écrit :
>> > > Hi,
>> > >
>> > > Today, user "marie" has been spamming the JIRA issues:
>> > > MPA-2, MPA-5 and MPA-6.
>> > > Last week, "mars luther" did it for MAVEN-1832.
>> > >
>> > > Could someone suspend them?
>> > >
>> > > Thanks,
>> > >
>> > > Vincent
>> > >
>> > > ---------------------------------------------------------------------
>> > > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> > > For additional commands, e-mail: dev-help@maven.apache.org
>> > >
>> > >
>> > >
>> > >
>> >
>> >
>> > ---------------------------------------------------------------------
>> > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> > For additional commands, e-mail: dev-help@maven.apache.org
>> >
>> >
>>
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


Re: Jira spam

Posted by Carlos Sanchez <ca...@apache.org>.
you can change their password (so they can't login) and email (to
avoid password recovery), i guess that would take them more time to
figure out than if you just remove their account

On 2/19/07, Arnaud HERITIER <ah...@gmail.com> wrote:
> To remove their accounts we need to have their emails.
> But, that's effectively an infinite war ;-)
>
> Arnaud
>
> On 2/19/07, Emmanuel Venisse <em...@venisse.net> wrote:
> >
> > We can't really suspend them, if we remove account(s), spammer(s) create a
> > new one.
> >
> > Emmanuel
> >
> > Vincent Siveton a écrit :
> > > Hi,
> > >
> > > Today, user "marie" has been spamming the JIRA issues:
> > > MPA-2, MPA-5 and MPA-6.
> > > Last week, "mars luther" did it for MAVEN-1832.
> > >
> > > Could someone suspend them?
> > >
> > > Thanks,
> > >
> > > Vincent
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> > > For additional commands, e-mail: dev-help@maven.apache.org
> > >
> > >
> > >
> > >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> > For additional commands, e-mail: dev-help@maven.apache.org
> >
> >
>


-- 
I could give you my word as a Spaniard.
No good. I've known too many Spaniards.
                             -- The Princess Bride

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


Re: Jira spam

Posted by Arnaud HERITIER <ah...@gmail.com>.
To remove their accounts we need to have their emails.
But, that's effectively an infinite war ;-)

Arnaud

On 2/19/07, Emmanuel Venisse <em...@venisse.net> wrote:
>
> We can't really suspend them, if we remove account(s), spammer(s) create a
> new one.
>
> Emmanuel
>
> Vincent Siveton a écrit :
> > Hi,
> >
> > Today, user "marie" has been spamming the JIRA issues:
> > MPA-2, MPA-5 and MPA-6.
> > Last week, "mars luther" did it for MAVEN-1832.
> >
> > Could someone suspend them?
> >
> > Thanks,
> >
> > Vincent
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> > For additional commands, e-mail: dev-help@maven.apache.org
> >
> >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
>

Re: Jira spam

Posted by Emmanuel Venisse <em...@venisse.net>.
We can't really suspend them, if we remove account(s), spammer(s) create a new one.

Emmanuel

Vincent Siveton a écrit :
> Hi,
> 
> Today, user "marie" has been spamming the JIRA issues:
> MPA-2, MPA-5 and MPA-6.
> Last week, "mars luther" did it for MAVEN-1832.
> 
> Could someone suspend them?
> 
> Thanks,
> 
> Vincent
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
> 
> 
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org