On 25/09/2026 18.08, Richard Henderson wrote:
Good idea, Daniel. While you're fixing typos, Thomas:
On 9/25/26 00:51, Thomas Huth wrote:
On 24/09/2026 15.56, Daniel P. Berrangé wrote:
Recently QEMU has received a denial of service attack on
its bug tracker in the form of 120 reports in 10 minutes,
and now repeated by another reporter in the form of 50
reports in the same day.
Prior to switching security disclosures to the bug tracker,
single reporters have submited 18, 22, and 114 bug reports.
submitted.
None of this is sustainable. It is an effective denial of
service attack on the project maintainers' time. Every bug
report is a TODO item added to someone's workload.
It is time to put hard limits on how many bugs, discovered
with assitance of automated tools, we are willing to accept
assistance
in a givenm time frame.
given
Thanks, I've fixed the typos and pushed it to the repo now.
Thomas
