On Tue, Apr 25, 2023 at 02:17:34PM -0700, Kevin Fenzi wrote: > Hey folks. > > So, a few weeks back I noticed some spam projects on pagure.io. > So, I cleaned up about 165 of them and deactivated 165 spam users. I took out a few a week or so ago, but not as many, I'm impressed :) > Now, I see there's another pile of them. :( > > So, I started to look at cleaning things up again, but I think we need a > better solution that doesn't involve admins manually cleaning things up. > ;( Additionally, the clean up is not really very scripted and takes a > long time to do. > > So, thoughts on a longer term solution? I can think of a few: > > 1. only allow fedora 'contributors' to make new projects. (ie, people in > at least one non cla/non base ipa group > Pros: > - Would very likely cut off the spam or at least cut it way down. > - Might be easy to implement? (not sure tho!) > Cons: > - Would block legit people who aren't fedora contributors. That might be the easiest as iirc, it's a simple config change (like the one we had before enforcing fpca on src.fp.o). > 2 Some kind of moderation for new projects > Pros: > - Would let non fedora folks make new projects. > - Would likely cut spam > Cons: > - Would require someone to moderate things > - Would requite us to make some kind of moderation code Another con: - will require code change > 3. A script to do all the cleanup so we could do it easier and some kind > of 'bad words' blocklist we could put in place to stop obvious spammers > (most of these are bogus "exam answers" ones) > Pros: > - Will cut down on spam some, but not fully. > Cons: > - Will have to write the script and implement the blocklist > - It's likely spammers will use different words over time and avoid the > block. We had basset in the past and always had in mind to hook pagure into it, but we decommissioned basset before we hooked pagure into it :/ Pierre
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
