Re: Trac seems to think I'm a spambot...?
Herbert, Off the top of my head: What email addresses are attached to the spamming trac accounts? Is there any pattern to them? More importantly, are external links nofollow'd [1] to reduce spam incentive? Doesn't appear so [2] if you view html source and search for reddit thread. There's a whole bunch of material when I search for trac nofollow, so maybe that's the answer. [1] https://support.google.com/webmasters/answer/96569?hl=en [2] https://ghc.haskell.org/trac/ghc/ticket/8955 -- Kim-Ee On Mon, Apr 7, 2014 at 4:50 PM, Herbert Valerio Riedel hvrie...@gmail.comwrote: On 2014-04-07 at 11:43:23 +0200, Kyle Van Berendonck wrote: I just got flagged as a spambot trying to reply to a ticket too. It did give me a captcha option though. It's surprisingly difficult to discriminate between humans and bots; I've enabled http://trac.edgewall.org/wiki/SpamFilter and I've tried tweaking its score weightings, but it still gets some false positives, and is tends to annoy with reCaptcha interaction (and to my surprise, even spambots seem to be able to outsmart reCaptcha these days) Does anyone here have more experience with spam-filtering who could help set up the Trac spam-filtering? ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Re: Trac seems to think I'm a spambot...?
On Mon, Apr 7, 2014 at 5:17 PM, Kim-Ee Yeoh k...@atamo.com wrote: More importantly, are external links nofollow'd [1] to reduce spam incentive? Doesn't appear so [2] if you view html source and search for reddit thread. There's a whole bunch of material when I search for trac nofollow, so maybe that's the answer. Apparently 'nofollow' is not the answer, according to: http://trac.edgewall.org/ticket/1145 This guy has a lot of success leaning on Akismet and captcha for this tracspam setup: http://news.thedigitalmachine.com/2012/07/26/howto-configure-tracspam-to-allow-anonymous-ticket-creation-in-trac/ -- Kim-Ee ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Re: Trac seems to think I'm a spambot...?
On 2014-04-07 at 12:45:49 +0200, Kim-Ee Yeoh wrote: On Mon, Apr 7, 2014 at 5:17 PM, Kim-Ee Yeoh k...@atamo.com wrote: More importantly, are external links nofollow'd [1] to reduce spam incentive? Doesn't appear so [2] if you view html source and search for reddit thread. There's a whole bunch of material when I search for trac nofollow, so maybe that's the answer. Apparently 'nofollow' is not the answer, according to: http://trac.edgewall.org/ticket/1145 This guy has a lot of success leaning on Akismet and captcha for this tracspam setup: http://news.thedigitalmachine.com/2012/07/26/howto-configure-tracspam-to-allow-anonymous-ticket-creation-in-trac/ well, it was actually Akismet (as well as others) that declared Gergo's content (which was basically a pasted commit message) to be spam (ultimately giving it such a low scoring that even reCaptcha wouldn't compensate for it) Here's the score-computation: Akismet (-5): Akismet says content is spam AuthenticatedUserScore (4): User is authenticated BotScout (-2): BotScout says this is spam (Y|MULTI|IP|0|MAIL|0|NAME|3) Captcha (10): Human verified via CAPTCHA (Recaptcha) Defensio (2): Defensio says content is allowed (legitimate, 0.2, none) Session (0): Existing session found StopForumSpam (0): StopForumSpam says this is spam (username [0.01]) As for the previous question of whether the email-addresses of spammers follow any obvious pattern, not always; we've had a few spammers with ordinary looking gmail.com addresses as well; in the cases they do, one of the external anti-spam service usually classifies it as potential spam... ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
GHC section of the Haskell Communities and Activities Report, May 2014 edition
Austin, Mihai, GHC devs This is about the GHC section of the HCAR. Up to now, we have written a status report on the GHC Wiki (you can see them stretching back several years), and the HCAR team have generously done the conversion to Latex. Mihai, I hope that is still OK. Austin: you are the Managing Editor for the GHC status report. Could you * take a look at what has happened in the last six months (the 7.8 release notes would be a great start) * draft an outline for the report * delegate writing tasks to the rest of us By writing task I mean typically only a paragraph or two (see past reports), but specifically including pointers to further reading. Really every substantial item should have such a pointer. The status report should be a jumping off point for someone who wants to know more. There are technical things (eg pattern synonyms), but let's not forget the important process things (eg changes to the repository structure). All GHC devs: do feel free to add things that Austin omits. In particular, he may not be aware of what's on the horizon things that you are working on. Austin, do you think you could complete the sketch, and delegate tasks, as soon as the 7.8 release is out (which should only be hours away)? So it should be done by the end of this week. Thanks all Simon | -Original Message- | From: Haskell [mailto:haskell-boun...@haskell.org] On Behalf Of Mihai | Maruseac | Sent: 05 April 2014 15:28 | To: haskell; hask...@haskell.org | Subject: [Haskell] Call for Contributions - Haskell Communities and | Activities Report, May 2014 edition | | Dear all, | | I would like to collect contributions for the 24th edition of the | | | Haskell Communities Activities Report | | http://www.haskell.org/haskellwiki/Haskell_Communities_and_Activities_Rep | ort | | Submission deadline: 1 May 2014 | | (please send your contributions to hcar at haskell.org, | in plain text or LaTeX format) | | | This is the short story: | | * If you are working on any project that is in some way related | to Haskell, please write a short entry and submit it. Even if | the project is very small or unfinished or you think it is not | important enough --- please reconsider and submit an entry anyway! | | * If you are interested in an existing project related to Haskell that | has not previously been mentioned in the HCAR, please tell me, so | that I can contact the project leaders and ask them to submit an | entry. | | * Feel free to pass on this call for contributions to others that | might be interested. | | More detailed information: | | The Haskell Communities Activities Report is a bi-annual overview of | the state of Haskell as well as Haskell-related projects over the | last, and possibly the upcoming six months. If you have only recently | been exposed to Haskell, it might be a good idea to browse the | previous edition --- you will find interesting projects described as | well as several starting points and links that may provide answers to | many questions. | | Contributions will be collected until the submission deadline. They | will then be compiled into a coherent report that is published online | as soon as it is ready. As always, this is a great opportunity to | update your webpages, make new releases, announce or even start new | projects, or to talk about developments you want every Haskeller to | know about! | | Looking forward to your contributions, | | Mihai Maruseac and Alejandro Serrano Mena (current co-editors) | | | FAQ: | | Q: What format should I write in? | | A: The required format is a LaTeX source file, adhering to the template | that is available at: | | http://haskell.org/communities/05-2013/template.tex | | There is also a LaTeX style file at | | http://haskell.org/communities/05-2013/hcar.sty | | that you can use to preview your entry. If you do not know LaTeX, then | use plain text. If you modify an old entry that you have written for an | earlier edition of the report, you should already have received your old | entry as a template (provided I have your valid email address). Please | modify that template, rather than using your own version of the old | entry as a template. | | Q: Can I include Haskell code? | | A: Yes. Please use lhs2tex syntax | (http://people.cs.uu.nl/andres/lhs2tex/). | The report is compiled in mode polycode.fmt. | | Q: Can I include images? | | A: Yes, you are even encouraged to do so. Please use .jpg format, then. | | Q: Should I send files in .zip archives or similar? | | A: No, plain file attachements are the way. | | Q: How much should I write? | | A: Authors are asked to limit entries to about one column of text. A | general introduction is helpful. Apart from that, you should focus on | recent
Re: Trac seems to think I'm a spambot...?
Could we try something? I'm thinking that recaptcha can be a PITA if only because it disrupts one's state of flow but people will put up with it to save trac from spam. What if we replace captcha with a short, static question, the web form equivalent of a secret handshake? And give it enough weighting to override akismet? E.g. * What is Haskell's middle name? * What is SPJ's middle name? The main drawback to this is that it'll only be a matter of time before spammers wise up. But that interval might be long enough for something better on the horizon, e.g. akismet gets a lot smarter, better blog posts on tracspam, etc. Also, spammers might be deterred enough to give up and look elsewhere. Another drawback is that some folks won't actually know the secret handshake. Hopefully those numbers are very small. p.s. A variant to this that's more search-proof is some trivial haskell: E.g. let fibs = 0:1: ... fibs in fibs !! n where n is randomly chosen from 2, 3, or 4; where the answer is an instantaneous n-1. ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Re: Trac seems to think I'm a spambot...?
Hi, Am Montag, den 07.04.2014, 21:27 +0700 schrieb Kim-Ee Yeoh: What if we replace captcha with a short, static question, the web form equivalent of a secret handshake? And give it enough weighting to override akismet? E.g. * What is Haskell's middle name? * What is SPJ's middle name? I made good experience with such checks on my blog. The answer can be really simple, „What is SPJ’s first name?“ tends to be sufficient. Greetings, Joachim -- Joachim “nomeata” Breitner m...@joachim-breitner.de • http://www.joachim-breitner.de/ Jabber: nome...@joachim-breitner.de • GPG-Key: 0x4743206C Debian Developer: nome...@debian.org signature.asc Description: This is a digitally signed message part ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Re: Trac seems to think I'm a spambot...?
On Mon, Apr 07, 2014 at 09:27:32PM +0700, Kim-Ee Yeoh wrote: What if we replace captcha with a short, static question, the web form equivalent of a secret handshake? And give it enough weighting to override akismet? E.g. * What is Haskell's middle name? * What is SPJ's middle name? Yeah, I thought about something similar like: what's the result of 'map (+1) [1,2]'. The main drawback to this is that it'll only be a matter of time before spammers wise up. But that interval might be long enough for something better on the horizon, e.g. akismet gets a lot smarter, better blog posts on tracspam, etc. I don't think that the ghc wiki is of particular interest for spammers or that they gain a lot by understanding Haskell specifics. Most likely they will never notice it. Greetings, Daniel ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Re: Trac seems to think I'm a spambot...?
What is Simon's middle name? Is Peyton not part of his surname? Oh crap. I'm a bot. Sent from my iPad On Apr 7, 2014, at 10:53 AM, Daniel Trstenjak daniel.trsten...@gmail.com wrote: On Mon, Apr 07, 2014 at 09:27:32PM +0700, Kim-Ee Yeoh wrote: What if we replace captcha with a short, static question, the web form equivalent of a secret handshake? And give it enough weighting to override akismet? E.g. * What is Haskell's middle name? * What is SPJ's middle name? Yeah, I thought about something similar like: what's the result of 'map (+1) [1,2]'. The main drawback to this is that it'll only be a matter of time before spammers wise up. But that interval might be long enough for something better on the horizon, e.g. akismet gets a lot smarter, better blog posts on tracspam, etc. I don't think that the ghc wiki is of particular interest for spammers or that they gain a lot by understanding Haskell specifics. Most likely they will never notice it. Greetings, Daniel ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Re: Trac seems to think I'm a spambot...?
Hi, Am Montag, den 07.04.2014, 13:07 -0400 schrieb Edward Kmett: What is Simon's middle name? Is Peyton not part of his surname? It is, he has a middle name, and that is the reason I don’t find https://ghc.haskell.org/trac/ghc/wiki/Status/SLPJ-Tickets without looking in my browser history :-) Greetings, Joachim -- Joachim “nomeata” Breitner m...@joachim-breitner.de • http://www.joachim-breitner.de/ Jabber: nome...@joachim-breitner.de • GPG-Key: 0x4743206C Debian Developer: nome...@debian.org signature.asc Description: This is a digitally signed message part ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Re: Trac seems to think I'm a spambot...?
Is the Akismet filter enabled? In my experience, combining it with a technique like NoSpamNX (some sort of honey-pot field which wide range spambots are susceptible to) lowers spam hits to a level where manually moderating the rest is fine. If it is too hard for contributors to mark entries as spam, maybe that's what needs to be fixed. Edward Excerpts from Herbert Valerio Riedel's message of 2014-04-07 02:50:26 -0700: On 2014-04-07 at 11:43:23 +0200, Kyle Van Berendonck wrote: I just got flagged as a spambot trying to reply to a ticket too. It did give me a captcha option though. It's surprisingly difficult to discriminate between humans and bots; I've enabled http://trac.edgewall.org/wiki/SpamFilter and I've tried tweaking its score weightings, but it still gets some false positives, and is tends to annoy with reCaptcha interaction (and to my surprise, even spambots seem to be able to outsmart reCaptcha these days) Does anyone here have more experience with spam-filtering who could help set up the Trac spam-filtering? ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Offering GHC builder build slaves
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi folks: I have successfully built Ian Lynagh's GHC builder on Ubuntu and SmartOS and I would like to offer build slaves based on Carter's mirroring of the code to https://github.com/cartazio/ghc-builder. I can offer several build slaves, but I'm not sure what the process is. How do I run multiple build slaves? Do I need a separate username for each? Is there a username convention? The suggestion at https://ghc.haskell.org/trac/ghc/wiki/Builder is that I post a username and password to ghc@. There are two issues with this: 1. ghc@ does not exist as far as I can tell 2. Posting a password to a mailing list will make it publicly accessible and allow others to impersonate my build slaves I am happy to send this information if the admins of the GHC builder infrastructure are comfortable with the risks. Alternatively, I am able to send this via GPG encrypted email given the public key and email of an admin. Feel free to contact me on or off list about this. Best, Alain -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTQ0uTAAoJEP0rIXJNjNSA+fMH/2p9yeWgpfDeaTHilur5qoZ6 6DZiktJgvMpVeqFwHyaFMk+ubEp8/xU/VUrOEztr01jmzNLS2UoqDVH/7EZPZPtV 0ONh/bcYYA8EBa9SCqaVXVb9I8EdDE6w2cQGDqnwHqaFerAUqv8OiQEWyJCuJSdr 7EL/vcacNfr5Ix4oG2pkESvEJBHHEN4ZTXoKeJnyQT93o2RaC1fgImm6F6tgpdQE Jh+QInIX1dRuSl+pDlHg6kbLZqFG8Mnyz0bcWuUL2ekGQBp3HtT0MwonM9HUTmmG 0baRYUaK/moO5Q6lUXhI2eRT/UFl4qnzwJw/sIVuaL7h1Ikj0ZMOuPs0GjfRbY8= =/Rwk -END PGP SIGNATURE- ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
Re: Offering GHC builder build slaves
On 08/04/14 02:06, Alain O'Dea wrote: Hi folks: I have successfully built Ian Lynagh's GHC builder on Ubuntu and SmartOS and I would like to offer build slaves based on Carter's mirroring of the code to https://github.com/cartazio/ghc-builder. I can offer several build slaves, but I'm not sure what the process is. How do I run multiple build slaves? Do I need a separate username for each? Is there a username convention? The suggestion at https://ghc.haskell.org/trac/ghc/wiki/Builder is that I post a username and password to ghc@. There are two issues with this: 1. ghc@ does not exist as far as I can tell 2. Posting a password to a mailing list will make it publicly accessible and allow others to impersonate my build slaves I am happy to send this information if the admins of the GHC builder infrastructure are comfortable with the risks. Alternatively, I am able to send this via GPG encrypted email given the public key and email of an admin. Feel free to contact me on or off list about this. Best, Alain ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs I can offer a 32-bit Linux slave (or 2) myself. -- Mateusz K. ___ ghc-devs mailing list ghc-devs@haskell.org http://www.haskell.org/mailman/listinfo/ghc-devs
