Re: Recent gitlab account requests...

Jon Boone <[email protected]> Thu, 3 Jul 2025 08:31:36 -0400
Newsgroups gmane.lisp.common-lisp-net.devel
Message-ID <CACdCdGgm+La+y9oVGEuEK3YsuuYRZK4fTDw4Gmkp_bTc8Yrm1g@mail.gmail.com>
--0000000000009954330639058f5c
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I definitely agree that requiring a link-via-IRC might be too high of a
barrier.  Even for someone like myself who's used it for decades in the
past, but doesn't use it much any longer, it might be a sufficiently high
burden as to preclude registration, thereby driving repos toward
alternatives.

With regard to these recent requests, I did post a response 10 days ago to =
this
/lisp post
<https://www.reddit.com/r/lisp/comments/1licq8c/now_that_gitkpeio_is_down_h=
ow_does_quicklisp/?utm_source=3Dshare&utm_medium=3Dweb3x&utm_name=3Dweb3xcs=
s&utm_term=3D1&utm_content=3Dshare_button>
indicating
that hosting the quicklisp library repo in our gitlab might be a good
alternative.  That made me think perhaps some of the uptick in requests
were legitimate.

=E2=80=94jon


On Thu, Jul 3, 2025 at 8:19=E2=80=AFAM Georgiy Tugai <[email protected]> =
wrote:

> On 3/07/2025 06:39, Philipp Marek wrote:
> > Hi Jon,
> >>   Is there any vetting process for gitlab account requests or do we ju=
st
> >> grant them to whomever asks for them?
> > Well, I got suspicious by so many requests in short order -
> > (normally we're at a dozen people a year?)
> > and two requests coming in with the same name but different email
> addresses.
> > My guess is that these are spam(mers).
> >
> > I already asked on IRC about that yesterday.
> Most (if not all) of the requests that came in that burst are probably
> spam, agreed.
> > With the new installation, is the old process of asking for a
> registration link via IRC dead?
> > Would we want it again to cut down on automated (spam) account requests=
?
>
> The new installation currently does not support the link-via-IRC method, =
I
> imagine that we could reinstate it.
>
> Last time we discussed that, there was some concern as to whether
> link-via-IRC may be "too hard" for legitimate users, given how few people
> know about/use IRC these days.
>
>

--0000000000009954330639058f5c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div style=3D"font-family:garamond,&quot;times new ro=
man&quot;,serif;font-size:small" class=3D"gmail_default">I definitely=C2=A0=
agree that requiring a link-via-IRC might be too high of a barrier.=C2=A0 E=
ven for someone like myself who&#39;s used it for decades in the past, but =
doesn&#39;t use it much any longer, it might be a sufficiently high burden =
as to preclude registration, thereby driving repos toward alternatives.</di=
v><div style=3D"font-family:garamond,&quot;times new roman&quot;,serif;font=
-size:small" class=3D"gmail_default"><br></div><div style=3D"font-family:ga=
ramond,&quot;times new roman&quot;,serif;font-size:small" class=3D"gmail_de=
fault">With regard to these recent requests, I did post a response 10 days =
ago to <a href=3D"https://www.reddit.com/r/lisp/comments/1licq8c/now_that_g=
itkpeio_is_down_how_does_quicklisp/?utm_source=3Dshare&amp;utm_medium=3Dweb=
3x&amp;utm_name=3Dweb3xcss&amp;utm_term=3D1&amp;utm_content=3Dshare_button"=
>this /lisp post</a>=C2=A0indicating that hosting the quicklisp library rep=
o in our gitlab might be a good alternative.=C2=A0 That made me think perha=
ps some of the uptick in requests were legitimate.</div><br clear=3D"all"><=
/div><div><div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmai=
l_signature"><div dir=3D"ltr"><font face=3D"garamond, times new roman, seri=
f">=E2=80=94jon</font></div></div></div><br></div><br><div class=3D"gmail_q=
uote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, J=
ul 3, 2025 at 8:19=E2=80=AFAM Georgiy Tugai &lt;<a href=3D"mailto:georgiy@t=
ugai.id.au">[email protected]</a>&gt; wrote:<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;bo=
rder-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">=
On 3/07/2025 06:39, Philipp Marek wrote:<br>
&gt; Hi Jon,<br>
&gt;&gt;=C2=A0 =C2=A0Is there any vetting process for gitlab account reques=
ts or do we just<br>
&gt;&gt; grant them to whomever asks for them?<br>
&gt; Well, I got suspicious by so many requests in short order -<br>
&gt; (normally we&#39;re at a dozen people a year?)<br>
&gt; and two requests coming in with the same name but different email addr=
esses.<br>
&gt; My guess is that these are spam(mers).<br>
&gt;<br>
&gt; I already asked on IRC about that yesterday.<br>
Most (if not all) of the requests that came in that burst are probably spam=
, agreed.<br>
&gt; With the new installation, is the old process of asking for a registra=
tion link via IRC dead?<br>
&gt; Would we want it again to cut down on automated (spam) account request=
s?<br>
<br>
The new installation currently does not support the link-via-IRC method, I =
imagine that we could reinstate it.<br>
<br>
Last time we discussed that, there was some concern as to whether link-via-=
IRC may be &quot;too hard&quot; for legitimate users, given how few people =
know about/use IRC these days.<br>
<br>
</blockquote></div>

--0000000000009954330639058f5c--