Community Help Wiki locked down

[Gunnar Hjalmarsson]

On 2016-01-06 01:02, Elizabeth K. Joseph wrote:
> Bad news: In order to triage this attack, the wiki has been locked
> down. Right now, only members of these two groups now have access to
> editing:
> 
> https://help.ubuntu.com/community/EditorGroup
> https://help.ubuntu.com/community/AdminGroup
> 
> They suggested we also set up a ContributorGroup of known users who
> contribute that can still edit even when the wiki is on lock down.
> This seems like a reasonable thing, but it does mean administrative
> overhead.

The problem causing this is the ease with which you can create a LP
account. Such acounts are also created from time to time by spammers who
change statuses etc. of bug reports.

> I don't know how long the lock down will last, and right now I'm not
> sure how logins look to folks not in EditorGroup or AdminGroup. That
> may be worth testing by someone not in those groups, it would be good
> to know if they are able to log in at all, or if it just shows all
> pages as Immutable.

No problem with logging in currently, but it doesn't help much, since
all the pages are "immutable".

Hopefully it will be reverted to the previous status soon.

> Given all of our problems generally with this help wiki and logins
> since the switch to Ubuntu SSO, the overall future of this wiki may be
> worth a discussion.

Any wiki is a potential target for spammers. I'd prefer to discuss the
monitoring procedures rather than closing the wiki, which currently
contains quite a few quality pages with high visit score.

-- 
Gunnar Hjalmarsson
https://launchpad.net/~gunnarhj