wiki spam

[Robert Collins]

Seems our wiki has been discovered by wiki spammers.

Disabling a spammers user id requires access to the filesystem - its a
privileged operation, so the easiest route is to contact one of the
Canonical staff on #bzr to escalate this to the sysadmins. I'll
certainly be forwarding usernames I note to be spamming to the
sysadmins.

However, this doesn't stop automatically created users, and the moin
wiki wire protocol is probably known by wiki spammers at this point.

Some options I'm aware of -
 - there is a proof-of-concept captcha for moin that I found via google
 - we could ask for the bazaar-vcs.org wiki to have its user-management 
   migrated to launchpad, like wiki.ubuntu.com is. This would force user
   creation to go through the email handshake to make an account, which
   is unlikely to be automated at this point

-Rob

-- 
GPG key available at: <http://www.robertcollins.net/keys.txt>.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/bazaar/attachments/20070914/a983523f/attachment.pgp