Re: coordinated spam attack on wikicreole.org and jspwiki.org

Note also that 2.5/2.6 also has workflow capabilities that allows a  
named group of users to serve as approvers for page edits. This is  
essentially a moderation feature.

Andrew

On Sep 26, 2007, at 4:13 PM, Janne Jalkanen wrote:

>> Glad to hear that 2.6 has some capabilities in these areas. It  
>> does leave some sites in a bit of a bind, though. (Do I want to  
>> run on a version blessed as being production-ready, or one that  
>> provides the spam controls that most production sites will need?)
>
> The 2.6 SpamFilter *should* be trivially backportable to 2.4.   
> Anybody want to send me a patch; I'll gladly release a 2.4.105 with  
> it...
>
> (If anyone wants to take over maintenance of 2.4, this would be a  
> good time to step up, by the way.)
>
>> I think it could help if combined with a way to blacklist  
>> registrations from certain email address patterns. So for example,  
>> if we see that all of the spam users are registering with  
>> [email protected] addresses, we could blacklist spammer.com.  
>> Currently, even if that capability existed, the spammer could just  
>> put in whatever email address they wanted (since there will be no  
>> validation step). With the validation step in place, at least  
>> they'd have to keep coming up with new email addresses/domains to  
>> use.
>
> Of course, if they're using hotmail.com or gmail.com... ;-)
>
> In 2.6, there is a way to moderate registrations (and remove user  
> accounts), so that might be really useful as well.
>
> /Janne
>
>
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss  
> thestable release (even-numbered, 2.4.x, 2.6.x), and user- 
> issues.For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList