Opened 3 years ago

Last modified 5 weeks ago

#11905 reopened defect (bug)

trac spam

Reported by: scribu Owned by: ryan
Priority: normal Milestone: WordPress.org
Component: WordPress.org site Version:
Severity: normal Keywords:
Cc:

Change History (28)

  • Milestone WordPress.org site deleted
  • Resolution set to fixed
  • Status changed from new to closed
  • Resolution fixed deleted
  • Status changed from closed to reopened

comment:3 follow-up: ↓ 4   dangayle3 years ago

Please, the spam from the WordPress trac generates a LOT of emails if you're subscribed to the wp-trac mailing list. It makes it really difficult for gmail to distinguish what is real and what is spam, so the filter doesn't work the greatest.

Just install SpamFilter or something. It even uses Akismet!

comment:4 in reply to: ↑ 3 ; follow-up: ↓ 5   nacin3 years ago

Replying to dangayle:

Please, the spam from the WordPress trac generates a LOT of emails if you're subscribed to the wp-trac mailing list. It makes it really difficult for gmail to distinguish what is real and what is spam, so the filter doesn't work the greatest.

Surely. For Gmail, my wp-trac filter is set to never send any of them to spam if they're from the proper email address. Then I deal with the very rare spam comment flood manually.

Just install SpamFilter or something. It even uses Akismet!

We have Akismet installed. It wasn't working right last time we had a spam issue, but I think Barry has addressed that.

Whenever we do have an issue, we'll all notice it pretty quickly thanks to wp-trac. (If not, hop into #wordpress-dev.) We can then make Trac read-only temporarily, block the dotorg account, and run a query to remove the comments.

comment:5 in reply to: ↑ 4   dangayle3 years ago

Replying to nacin:

Then I deal with the very rare spam comment flood manually.

I get viagra emails from trac daily. It makes me start to question myself. (lol)

  • Resolution set to fixed
  • Status changed from reopened to closed
  • Milestone set to WordPress.org
  • Resolution fixed deleted
  • Status changed from closed to reopened

Couldn't something like this plugin be implemented on the wp.org signup:

http://wordpress.org/extend/plugins/stop-spammer-registrations-plugin/

Version 0, edited 2 years ago by scribu (next)

I've nuked seolife, downloadbook, propostaff. Unfortunately due to the way Trac implements HTTP auth, I don't think I can invalidate their cookies.

duck_ noticed that our Trac spam tools aren't enabled properly. I'll be working with Barry at some point soon to fix this.

User: http://profiles.wordpress.org/users/uggbootsspace

Nuked/took over account

duck_ noticed that our Trac spam tools aren't enabled properly. I'll be working with Barry at some point soon to fix this.

It looks to me like it's simply the Trust level set for users that's causing it to never trigger. The other trigger levels probably need tweaking too though.

Someone's trying to sneak spam links into their replies.

http://core.trac.wordpress.org/ticket/18465#comment:38
http://core.trac.wordpress.org/ticket/19971#comment:6

I've removed the links, but was tempted to remove the comments entirely.

Blocked nemgavekort, revoked the Trac cookie.

comment:23 in reply to: ↑ 19   SergeyBiryukov7 months ago

Someone's trying to sneak spam links into their replies.

http://core.trac.wordpress.org/ticket/20013#comment:8

http://profiles.wordpress.org/DeanKolt

Has added attachments with links in the description: http://cl.ly/OS9h

Note: See TracTickets for help on using tickets.