| From: | Magnus Hagander <magnus(at)hagander(dot)net> |
|---|---|
| To: | Kevin Grittner <kgrittn(at)gmail(dot)com> |
| Cc: | Dave Page <dpage(at)pgadmin(dot)org>, Bruce Momjian <bruce(at)momjian(dot)us>, Guillaume Lelarge <guillaume(at)lelarge(dot)info>, pgsql-www <pgsql-www(at)postgresql(dot)org> |
| Subject: | Re: Spam on the wiki |
| Date: | 2015-12-16 17:21:47 |
| Message-ID: | CABUevEyFvPPLZciJq+bihsW=-K2VmHnw4jc0hO6DZeOaOXD7hQ@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-www |
On Wed, Dec 16, 2015 at 6:19 PM, Kevin Grittner <kgrittn(at)gmail(dot)com> wrote:
> On Wed, Dec 16, 2015 at 11:16 AM, Dave Page <dpage(at)pgadmin(dot)org> wrote:
>
> > I've blocked those two users, and it looks like Alvarro has done
> > a few more.
>
> There seem to be a lot of user IDs involved. Do we know whether
> there are new user registrations happening, or were all these set
> up before the attack?
>
There are new user registrations happening. Not sure if those are the ones
used, but there definitely are.
Either they've found a way to script-generate gmail addresses, or they have
found a way to break the django hashes.
--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Andres Freund | 2015-12-16 17:22:55 | Re: Spam on the wiki |
| Previous Message | Magnus Hagander | 2015-12-16 17:21:14 | Re: Spam on the wiki |