[Sugar-devel] [Sugar Labs] [Moderate] New Ticket: The Numerous Iphone Games

[James Cameron]

On Mon, May 04, 2015 at 02:47:03PM -0300, Gonzalo Odiard wrote:
> Anybody knows where are coming these spam tickets?

>From the internet.  Autonomous search engine optimisation functions
with occasional human oversight.

> I can't find it anywhere in bugs.sugarlabs.org,
> is not in the moderator queue

Someone else with moderator privilege may have already responded.

Can be checked by looking at the web server log for the instance.

> and the links point to other bugs.
> Is the second today.

Thankfully you only have two a day.  At peak, I was seeing several a
day on laptop.org, and moderation wasn't available at the time.

Once it reaches "too much", move the TICKET_CREATE and TICKET_MODIFY
permissions from the "anonymous" Subject to the "authenticated"
subject.

The attackers will respond by registering new accounts.

Once the new attacks are "too much", create a further barrier to
registering new accounts.  That's where I'm up to with dev.laptop.org,
and we've had spam since.

Don't forward the spam, as it helps the SEO goals of the attacker.

-- 
James Cameron
http://quozl.linux.org.au/