Re: coordinated spam attack on wikicreole.org and jspwiki.org

> - Block edits from the source IP addrs that these came from
> * Will adding SpamFilter patterns for the IPs do this?
> (I'm guessing not, but thought I'd check to be sure)

In 2.6, it does, kinda.  2.4 does not.  However, I'm *so* going to  
update the 2.6 spamfilter to prevent this kind of stuff asap.

> - Do a CAPTCHA challenge during registration and/or page updating

2.6 does captcha *if* it suspects the page is spam.  It would not  
help in this case.

> - Validate a user's email address during registration (by sending
> it a code that they must subsequently provide back)

I don't know how this would help, since the bot can register as well.

(My guess is that this is either an attempt to poison a bayesian  
filter, or to annoy us until we stop checking all links and then they  
can start spamming.  For low-traffic sites an attack like this could  
be devastating, since no admin wants to keep rolling stuff back every  
morning.)

/Janne