Mark,
On 6/19/25 10:43 AM, Mark Thomas wrote:
On 19/06/2025 15:10, Mark Thomas wrote:
All,
The Tomcat project has been using Bugzilla to track issues for more
than 20 years.
Recently there has been a significant increase in abusive traffic
targetting the ASF's Bugzilla instances - mostly AI scraping.
To protect the ASF Bugzilla instances and ensure that they remain
usable for the community, the ASF has - with regret - configured all
ASF Bugzilla instances to require authentication in order to access them.
If you need to search bugs, view a bug report, report a bug or
otherwise interact with Bugzilla, you will need to login in first. If
you don't have an ASF Bugzilla account, the link to create one is on
the front page.
:(
While requiring authentication was a quick short term solution, some
longer term solutions were discussed which includes migrating away from
BugZilla. If we did so, GitHub issues is the obvious destination.
I guess maybe I don't understand the issue. BZ always required an
account to write, and anyone could register for an account. A small
hurdle, but present. The same is true for GitHub.
I'm not sure why we care about AI scrapers, given that all the mailing
lists and source code are also public. Everything produced by the ASF
and its committers over the years has already been stolen and had
whatever IP protections it had stripped and thrown into a big blender.
How does requiring a login to BZ to even *see* the bugs change anything?
Or is this an issue of scale? AI scrapers want to pull every bug for the
past 20 years and it's killing the service? And GitHub just has
effectively-infinite resources?
When we last discussed moving to GitHub issues in 2022 [1] the consensus
was not to. Has that view changed since then?
I have no strong preference for either. My concerns are more around if
we migrated, what would we migrate and how would we do it. We have a
*lot* of historical data. We have a couple of smaller projects we can
use to test any migration if we decide to go that way.
I have no particular preference. GH integrates nicely with PRs and all
of that. If we move to anything, I'd say GH is the way to go. I find
JIRA to be insufferable for some reason.
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
