On Tue, Apr 9, 2013 at 10:56 AM, Ask Bjørn Hansen <a...@perl.org> wrote:
> On Apr 9, 2013, at 6:45, David Golden <x...@xdg.me> wrote:
>> PAUSE ID's cost very little to provide.  I see no reason to deny
>> anyone's application as long as they seem human and mention Perl.
>
> They get an email address and a link from the CPAN sites and could use both 
> for spam.

So could the existing user base.

Here's what an intentional spammer would have to do:

Eve: I want a PAUSE ID:
xdg: (canned email) We only give them out to people who want to upload
Eve: I want to upload to CPAN
xdg: (approves)

Nothing I do stops malicious (human) applicants from doing whatever they want.

If I see half a dozen nearly identically-worded applications in a day,
of course I'll throw up the red flag and ask you guys to dig into it.

Longer-term, anything automated would need the usual email
confirmation cycle that most online services have.

David


--
David Golden <x...@xdg.me>
Take back your inbox! → http://www.bunchmail.com/
Twitter/IRC: @xdg

Reply via email to