[Xastir-dev] Wiki spam

Tom Russo russo at bogodyn.org
Sat Jan 9 16:18:04 EST 2010


Looks like the wiki was recently upgraded and its access control changed.  Now
there's a CAPTCHA for account creation, and anyone who gets past it can 
edit automatically.  The CAPTCHA might help keep out the bot spam, but
allows humans to spam as they will.

This was noticed by a KristineThompson, who created an account and immediately
added a somewhat subtle spam link to the MacOSXSource page.  Coincidentally 
enough, I just happened to log in a couple of hours after that happened and
noticed it right away.  I removed the spam (a link to a college application
essay writing service) and blocked the user.

There are a number of other new users in the last 30 days, none of whom have
actually contributed anything yet.  These are Gadlent, Roncasa, and Bmcconnell.
Developers might want to keep their eyes open for defaced or subtly modified
pages now that editing is unrestricted.  

Unfortunately, I cannot seem to view the change log prior to 10 December 2009,
so have no idea if other spam was introduced or if other malicious changes
were made to wiki pages before then.

When did the Wiki change policy?  

-- 
Tom Russo    KM5VY   SAR502   DM64ux          http://www.swcp.com/~russo/
Tijeras, NM  QRPL#1592 K2#398  SOC#236        http://kevan.org/brain.cgi?DDTNM
  In some cultures what I do would be considered normal. 
                                  -- Ineffective daily affirmation 




More information about the Xastir-dev mailing list