Rockbox Technical Forums

Rockbox General => Rockbox General Discussion => Topic started by: TAC109 on February 20, 2017, 03:39:28 PM

Title: Spam in the Rockbox wiki
Post by: TAC109 on February 20, 2017, 03:39:28 PM
The RockBox wiki seems to have been taken over by spam Bots!
A recent user is JadwalqqAgenPokerDominoOnlineTerpercaya
Does anyone look after the wiki?
Title: Re: Spam in the Rockbox wiki
Post by: lebellium on February 20, 2017, 04:48:33 PM
That's just one among hundreds fake users https://www.rockbox.org/wiki/WebChanges?limit=1000

The interesting pages and changes are lost in that spam flow, that's a shame nobody can do something about it  :-\
Title: Re: Spam in the Rockbox wiki
Post by: saratoga on February 20, 2017, 06:56:11 PM
I looked briefly at the wiki, but i didn't see an easy way to set it so that new users couldn't edit their profiles until they were confirmed. 

Someone more familiar with the wiki will need to look at it.
Title: Re: Spam in the Rockbox wiki
Post by: __builtin on February 20, 2017, 08:39:32 PM
I just emailed Bjorn about periodically purging users that aren't in the WikiUsers group and are older than a certain age. This would at least reduce the number of spam accounts. Maybe some restrictions on username length would also be wise, seeing as all the spam accounts have unreasonably long names?
Title: Re: Spam in the Rockbox wiki
Post by: __builtin on March 22, 2017, 06:39:01 PM
I've just received word from Björn that he's implemented an automatic purge on new accounts that haven't been added to the WikiUsers group within 5 days of creation. This ought to solve the problem.
Title: Re: Spam in the Rockbox wiki
Post by: duo8 on March 23, 2017, 04:55:59 AM
Why not just lock registration and have accounts manually created by a wiki moderator on request?
Right now users have to manually verified anyway.
Title: Re: Spam in the Rockbox wiki
Post by: gevaerts on March 23, 2017, 05:57:27 AM
Why not just lock registration and have accounts manually created by a wiki moderator on request?
Right now users have to manually verified anyway.

The manual verification can be done by any verified user. I don't think manual account creation is something I'd let any verified user do, so that would severly limit the number of people who can do it, and therefore have a rather bad impact on response time.