[MediaWiki-l] Spam!

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

[MediaWiki-l] Spam!

Ivan Sanders
Hi,

I thought I had this sorted, but I clearly dont. I have new users being
created and content uploaded. Email seems to be intermittent - sometimes I
get notifications, other times I don't

URL is at
http://www.actscoutaction.org.au/wiki/index.php/Special:RecentChanges


Here's some detail

LocalSettings.php:

# Disable anonymous editing
// Implicit group for all anonymous
$wgGroupPermissions['*'    ]['createaccount']   = false;
$wgGroupPermissions['*'    ]['read']            = true;
$wgGroupPermissions['*'    ]['edit']            = false;
$wgGroupPermissions['*'    ]['createpage']      = false;
$wgGroupPermissions['*'    ]['createtalk']      = false;

$wgUsersNotifiedOnAllChanges = array( 'WikiSysop', 'IvanSanders' );

Versions are:

MediaWiki 1.21.2 PHP 5.3.26 (litespeed) MySQL 5.5.32-31.0


Any help appreciated


Cheers

Ivan
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Reply | Threaded
Open this post in threaded view
|

Re: Spam!

Chris Steipp
That shouldn't be happening with those permission (from what I can see on a
very quick first look). Were you seeing this before you installed
the UserAdmin extension?

If you are able to get a trace of how these users are being created, please
ping me off list. I'd like to make sure that's not a hole that could be
used on other wikis.


On Thu, Sep 19, 2013 at 6:44 PM, Ivan Sanders <[hidden email]> wrote:

> Hi,
>
> I thought I had this sorted, but I clearly dont. I have new users being
> created and content uploaded. Email seems to be intermittent - sometimes I
> get notifications, other times I don't
>
> URL is at
> http://www.actscoutaction.org.au/wiki/index.php/Special:RecentChanges
>
>
> Here's some detail
>
> LocalSettings.php:
>
> # Disable anonymous editing
> // Implicit group for all anonymous
> $wgGroupPermissions['*'    ]['createaccount']   = false;
> $wgGroupPermissions['*'    ]['read']            = true;
> $wgGroupPermissions['*'    ]['edit']            = false;
> $wgGroupPermissions['*'    ]['createpage']      = false;
> $wgGroupPermissions['*'    ]['createtalk']      = false;
>
> $wgUsersNotifiedOnAllChanges = array( 'WikiSysop', 'IvanSanders' );
>
> Versions are:
>
> MediaWiki 1.21.2 PHP 5.3.26 (litespeed) MySQL 5.5.32-31.0
>
>
> Any help appreciated
>
>
> Cheers
>
> Ivan
> _______________________________________________
> MediaWiki-l mailing list
> [hidden email]
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Reply | Threaded
Open this post in threaded view
|

Re: Spam!

Jonathan Aquilina
In reply to this post by Ivan Sanders
The Document Foundation has the same issue with spam, what seems to really
mitigate the problem is the questy captcha the problem is that of
localization. i know the creator had started something of the sort and I am
hoping to find time to help him out.


On Fri, Sep 20, 2013 at 3:44 AM, Ivan Sanders <[hidden email]> wrote:

> Hi,
>
> I thought I had this sorted, but I clearly dont. I have new users being
> created and content uploaded. Email seems to be intermittent - sometimes I
> get notifications, other times I don't
>
> URL is at
> http://www.actscoutaction.org.au/wiki/index.php/Special:RecentChanges
>
>
> Here's some detail
>
> LocalSettings.php:
>
> # Disable anonymous editing
> // Implicit group for all anonymous
> $wgGroupPermissions['*'    ]['createaccount']   = false;
> $wgGroupPermissions['*'    ]['read']            = true;
> $wgGroupPermissions['*'    ]['edit']            = false;
> $wgGroupPermissions['*'    ]['createpage']      = false;
> $wgGroupPermissions['*'    ]['createtalk']      = false;
>
> $wgUsersNotifiedOnAllChanges = array( 'WikiSysop', 'IvanSanders' );
>
> Versions are:
>
> MediaWiki 1.21.2 PHP 5.3.26 (litespeed) MySQL 5.5.32-31.0
>
>
> Any help appreciated
>
>
> Cheers
>
> Ivan
> _______________________________________________
> MediaWiki-l mailing list
> [hidden email]
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>



--
Jonathan Aquilina
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
OQ
Reply | Threaded
Open this post in threaded view
|

Re: Spam!

OQ
The best solution I found was to require autoconfirmed accounts to have
multiple posts before being promoted, and requiring email confirmation in
conjunction with a captcha. Spammers will spend money to solve the captcha
to create accounts but when they have to solve ten more before
autoconfirmed, they never waste the time.
On Sep 20, 2013 3:49 AM, "Jonathan Aquilina" <[hidden email]> wrote:

> The Document Foundation has the same issue with spam, what seems to really
> mitigate the problem is the questy captcha the problem is that of
> localization. i know the creator had started something of the sort and I am
> hoping to find time to help him out.
>
>
> On Fri, Sep 20, 2013 at 3:44 AM, Ivan Sanders <[hidden email]>
> wrote:
>
> > Hi,
> >
> > I thought I had this sorted, but I clearly dont. I have new users being
> > created and content uploaded. Email seems to be intermittent - sometimes
> I
> > get notifications, other times I don't
> >
> > URL is at
> > http://www.actscoutaction.org.au/wiki/index.php/Special:RecentChanges
> >
> >
> > Here's some detail
> >
> > LocalSettings.php:
> >
> > # Disable anonymous editing
> > // Implicit group for all anonymous
> > $wgGroupPermissions['*'    ]['createaccount']   = false;
> > $wgGroupPermissions['*'    ]['read']            = true;
> > $wgGroupPermissions['*'    ]['edit']            = false;
> > $wgGroupPermissions['*'    ]['createpage']      = false;
> > $wgGroupPermissions['*'    ]['createtalk']      = false;
> >
> > $wgUsersNotifiedOnAllChanges = array( 'WikiSysop', 'IvanSanders' );
> >
> > Versions are:
> >
> > MediaWiki 1.21.2 PHP 5.3.26 (litespeed) MySQL 5.5.32-31.0
> >
> >
> > Any help appreciated
> >
> >
> > Cheers
> >
> > Ivan
> > _______________________________________________
> > MediaWiki-l mailing list
> > [hidden email]
> > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> >
>
>
>
> --
> Jonathan Aquilina
> _______________________________________________
> MediaWiki-l mailing list
> [hidden email]
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Reply | Threaded
Open this post in threaded view
|

Re: Spam!

K. Peachey-2
In reply to this post by Ivan Sanders
On Fri, Sep 20, 2013 at 11:44 AM, Ivan Sanders <[hidden email]>wrote:

> Hi,
>
> I thought I had this sorted, but I clearly dont. I have new users being
> created and content uploaded. Email seems to be intermittent - sometimes I
> get notifications, other times I don't
>
> URL is at
> http://www.actscoutaction.org.au/wiki/index.php/Special:RecentChanges
>
>
>
When did you set those settings? Since I don't see anything since the 19th
(Yesterday) which seems a tad unusual for  a spam bot.

I can't create a account via the UI, but I havn't checked the api but it
should do the same checks.

My suggestion would be to disable E:UserAdmin and E:DeleteBatch and see if
it still happens.

(Also seeing the Scouts Logo scared me a tad, Although we don't use MW up
here in the sunny state)
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Reply | Threaded
Open this post in threaded view
|

Re: Spam!

Jonathan Aquilina
In reply to this post by OQ
Is the below settings should they work at preventing spam? the most issue
is sign ups and spamming after sign ups that they are experiencing. questy
has made a big difference, except users are complaining that the questions
are not localized into their language.


On Fri, Sep 20, 2013 at 11:00 AM, OQ <[hidden email]> wrote:

> The best solution I found was to require autoconfirmed accounts to have
> multiple posts before being promoted, and requiring email confirmation in
> conjunction with a captcha. Spammers will spend money to solve the captcha
> to create accounts but when they have to solve ten more before
> autoconfirmed, they never waste the time.
> On Sep 20, 2013 3:49 AM, "Jonathan Aquilina" <[hidden email]>
> wrote:
>
> > The Document Foundation has the same issue with spam, what seems to
> really
> > mitigate the problem is the questy captcha the problem is that of
> > localization. i know the creator had started something of the sort and I
> am
> > hoping to find time to help him out.
> >
> >
> > On Fri, Sep 20, 2013 at 3:44 AM, Ivan Sanders <[hidden email]>
> > wrote:
> >
> > > Hi,
> > >
> > > I thought I had this sorted, but I clearly dont. I have new users being
> > > created and content uploaded. Email seems to be intermittent -
> sometimes
> > I
> > > get notifications, other times I don't
> > >
> > > URL is at
> > > http://www.actscoutaction.org.au/wiki/index.php/Special:RecentChanges
> > >
> > >
> > > Here's some detail
> > >
> > > LocalSettings.php:
> > >
> > > # Disable anonymous editing
> > > // Implicit group for all anonymous
> > > $wgGroupPermissions['*'    ]['createaccount']   = false;
> > > $wgGroupPermissions['*'    ]['read']            = true;
> > > $wgGroupPermissions['*'    ]['edit']            = false;
> > > $wgGroupPermissions['*'    ]['createpage']      = false;
> > > $wgGroupPermissions['*'    ]['createtalk']      = false;
> > >
> > > $wgUsersNotifiedOnAllChanges = array( 'WikiSysop', 'IvanSanders' );
> > >
> > > Versions are:
> > >
> > > MediaWiki 1.21.2 PHP 5.3.26 (litespeed) MySQL 5.5.32-31.0
> > >
> > >
> > > Any help appreciated
> > >
> > >
> > > Cheers
> > >
> > > Ivan
> > > _______________________________________________
> > > MediaWiki-l mailing list
> > > [hidden email]
> > > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> > >
> >
> >
> >
> > --
> > Jonathan Aquilina
> > _______________________________________________
> > MediaWiki-l mailing list
> > [hidden email]
> > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> >
> _______________________________________________
> MediaWiki-l mailing list
> [hidden email]
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>



--
Jonathan Aquilina
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Reply | Threaded
Open this post in threaded view
|

Re: Spam!

K. Peachey-2
In reply to this post by Ivan Sanders
On Fri, Sep 20, 2013 at 11:44 AM, Ivan Sanders <[hidden email]>wrote:

> Hi,
>
> I thought I had this sorted, but I clearly dont. I have new users being
> created and content uploaded. Email seems to be intermittent - sometimes I
> get notifications, other times I don't
>
> URL is at
> http://www.actscoutaction.org.au/wiki/index.php/Special:RecentChanges
>
>
>
Also, In other non-related discussion, You may wish to look at your $wglogo
line in the config, As it looks like it might be wrong (randomly breaking
for me on some pages)
_______________________________________________
MediaWiki-l mailing list
[hidden email]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l