Re: Wiki 2FA

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>
Cc: Greg Stark <stark(at)mit(dot)edu>, Stefan Kaltenbrunner <stefan(at)kaltenbrunner(dot)cc>, Greg Sabino Mullane <greg(at)turnstep(dot)com>, PostgreSQL www <pgsql-www(at)postgresql(dot)org>
Subject: Re: Wiki 2FA
Date: 2016-01-25 17:27:23
Message-ID: CABUevEwzjbfp8eRfD=LqU5rS8fJ4F6Uh01b8WN7aZ0LXjtTb8Q@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-www

On Mon, Jan 25, 2016 at 4:55 PM, Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>
wrote:

> Alvaro Herrera wrote:
>
> > We had a look at the kind of content that was being posted. One pattern
> > was that they posted a phone number hundreds or thousands of times in
> > different pages, with surrouding text stating that the number was the
> > support line for some home product (a laser printer, scanner, etc). No
> > URLs at all. The phone number was the valid number for some poor sod
> > who had no relationship at all to the product in question. (It wasn't a
> > single phone number, but it was a very limited amount of numbers. Maybe
> > a dozen, posted in thousands of fake pages, vandalized valid pages,
> > posted on user pages, and even on the comments for the wiki changes.)
>
> Eh. Today I just saw that somebody posted the same kind of content (a
> number for support service of a well known Windows antivirus software)
> in the bug report form.
>
>

We've had them post organizations related to it as well, in the web system.
Since the organizations are moderated, and they can't submit news or events
until it's approved, they never got any further than creating those.
They've also posted doc comments, which are also moderated.

The unique thing about the wiki is that we allowed them to post things
without moderation. (even the lists have moderation, depending on
subscriptions and spam scores)

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

In response to

Browse pgsql-www by date

  From Date Subject
Next Message Oleg Bartunov 2016-01-26 09:36:02 archives.postgresql.org problem
Previous Message Alvaro Herrera 2016-01-25 16:02:09 Re: Fwd: request for wiki edit priviledges