Douglas E. Warner wrote: > On Tuesday 15 April 2008 15:33:24 Douglas E. Warner wrote: > >> We've disabled NOTES submissions since this has become such a problem after >> they were repaired. >> >> Right now we recommend that you request/upgrade to a Drupal site if you >> need gather feedback publically so you can setup your own forum. >> > > An update to the situation: > > We found on Friday that the emails were still going to the lists or project > owners (or whoever was configured to receive updates). We disabled the > emailing of these messages Friday afternoon (EDT); if you receive any more, > let us know. > > Today we went through the comments and deleted ones created on or after April > 14th. This should remove the spam comments from this recent attack from your > site. > > If you come across anything else that looks like it might've been from this > attack, let us know. > > If anyone would like to help restore functionality to the old notes system > let > me know; otherwise we will continue to recommend using Drupal for forums and > things requiring comments as the tools available there for stopping comment > spam are much more robust and can be updated more easily. > > I didn't use notes on my project page, but I already got spam on my main wiki page before I even put content on it myself... Default drupal setup allows for unauthenticated comments. So drupal is no safe haven from spam :-(
_______________________________________________ Project_owners mailing list [email protected] https://www.mozdev.org/mailman/listinfo/project_owners
