Information about increase of spam in Fedora Infrastructure

Kevin Fenzi <[email protected]> Tue, 7 Jun 2016 15:56:08 -0600
Newsgroups gmane.linux.redhat.fedora.core.announce
Organization Scrye, INC
Message-ID <[email protected]>
Greetings. 

Over the last few months there has been a large increase in spam
submitted to some Fedora Infrastructure services, mostly focused on
fedorahosted trac (wiki and tickets) and the Fedora project wiki.
(They have also begun targeting bugzilla.redhat.com, please report any
spams there to
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&version=4.4)

To combat this flood of spam we have created an automated spam
detection and cleanup service called Basset (https://pagure.io/basset)

Basset hooks into our infrastructure in a number of places:

* Into the Fedora Account System (FAS). Basset may decide based on a
  number of factors that a new account does not appear legitimate and
  mark it 'spamcheck_denied' or 'spamcheck_manual' (it's not sure). New
  account holders that find themselves with this status should get an
  email asking them to mail [email protected] to reset and
  retrain Basset. 

* Into trac ticket and wiki submissions. When spam tickets or wiki
  edits are noted, the user is moved to 'spamcheck_denied' status,
  their edits or tickets are deleted. If you see a spam ticket or wiki
  edit that is older than an hour or so please let us know and we can
  train Basset on it. Otherwise, please leave such tickets and edits
  alone, or Basset may mark your account as well for editing the spam. 

* Into other services soon as well that spammers may target. 

Please do let us know at [email protected] or via a
infrastructure trac ticket
( https://fedorahosted.org/fedora-infrastructure/ ) if you find any
spam not deleted/cleaned up, or users mis-marked. Do allow Basset
a few minutes processing time however. 

kevin

--
announce mailing list
[email protected]
https://lists.fedoraproject.org/admin/lists/[email protected]
signature.asc (application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=DuhX
-----END PGP SIGNATURE-----