Re: [OSGeo-Discuss] Some cialis spam in the wiki...

2009-07-05 Thread Rene A Enguehard
Just because a user has succeeded at the captcha does not mean he is 
indeed human. It's been proven by various researchers that beating 
captchas is entirely possible. Optical character recognition, like that 
used in flatbed scanner software, can be used with a fairly high success 
rate. Another technique is to build expert systems to evaluate the 
images. Another still is to build a map of hashes corresponding to 
captcha images with the solutions as

value.

Getting rid of spammers is a real pain. Captchas, IP bans and user 
registration limits all help but nothing really prevents it. 
Registration confirmation by humans is, unfortunately, the only way to 
be certain but not particularly convenient. The only thing I can think 
of that might work better is to build a filter layer into editing pages 
that scans the edit for words like "cialis" and if they are present 
sends an email to system administrators to confirm the edit. This would 
allow people to occasionally use banned words in legitimate uses but 
also flag spammers very quickly.


René

Markus Neteler a écrit :

On Sun, Jul 5, 2009 at 3:02 PM, Anne Ghisla wrote:
  

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dave Patton ha scritto:


...
  

There is a MediaWiki Extension for reCaptcha [1]
http://recaptcha.net/plugins/mediawiki/

[1]
http://recaptcha.net/learnmore.html
http://en.wikipedia.org/wiki/ReCAPTCHA
  

It is already active on new user registration, so maybe part of the spam
comes from human beings :S, then another way to limitate such spam is
ConfirmAccout extension [0], that requires sysops to confirm new users
one by one. This is extra load - but removing spam is extra load as well.



One am one of them - please don't :)
I am dealing with Wikis for many years. These human spammers always
went away so far after a period. The overhead to manually delete a page
from time to time is much less than confirming manually new users (which
is also a non-incentive since they cannot start to hack the Wiki right
away...). I don't mind to continue to delete those spam pages manually.

Cheers
Markus
___
Discuss mailing list
Discuss@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/discuss
  


___
Discuss mailing list
Discuss@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/discuss


Re: [OSGeo-Discuss] Some cialis spam in the wiki...

2009-07-05 Thread Markus Neteler
On Sun, Jul 5, 2009 at 3:02 PM, Anne Ghisla wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Dave Patton ha scritto:
...
>> There is a MediaWiki Extension for reCaptcha [1]
>> http://recaptcha.net/plugins/mediawiki/
>>
>> [1]
>> http://recaptcha.net/learnmore.html
>> http://en.wikipedia.org/wiki/ReCAPTCHA
>
> It is already active on new user registration, so maybe part of the spam
> comes from human beings :S, then another way to limitate such spam is
> ConfirmAccout extension [0], that requires sysops to confirm new users
> one by one. This is extra load - but removing spam is extra load as well.

One am one of them - please don't :)
I am dealing with Wikis for many years. These human spammers always
went away so far after a period. The overhead to manually delete a page
from time to time is much less than confirming manually new users (which
is also a non-incentive since they cannot start to hack the Wiki right
away...). I don't mind to continue to delete those spam pages manually.

Cheers
Markus
___
Discuss mailing list
Discuss@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/discuss


Re: [OSGeo-Discuss] Some cialis spam in the wiki...

2009-07-05 Thread Anne Ghisla
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dave Patton ha scritto:
> On 2009/07/04 8:00 AM, Tyler Mitchell (OSGeo) wrote:
>>
>> Anne Ghisla wrote:
>>> Is this enough to avoid such spam? Is't captcha better?
>>> I can have a look at how it can be implemented in user login (I know it
>>> is already active when a user adds external links to a page).
>>
>> Go for it.  If you find instructions, I can enable it.
> 
> There is a MediaWiki Extension for reCaptcha [1]
> http://recaptcha.net/plugins/mediawiki/
> 
> [1]
> http://recaptcha.net/learnmore.html
> http://en.wikipedia.org/wiki/ReCAPTCHA

It is already active on new user registration, so maybe part of the spam
comes from human beings :S, then another way to limitate such spam is
ConfirmAccout extension [0], that requires sysops to confirm new users
one by one. This is extra load - but removing spam is extra load as well.

HTH,
best regards,
Anne

[0] http://www.mediawiki.org/wiki/Extension:ConfirmAccount
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkpQpEgACgkQzZ3g4YwFFgYQdQCeOLbrsKKFoiTxK5oz9H9Hhkm4
DWkAoIzpVusGZEklVs/25eJiq3J56ln9
=AZ9s
-END PGP SIGNATURE-
___
Discuss mailing list
Discuss@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/discuss


Re: [OSGeo-Discuss] Military OSS

2009-07-05 Thread Markus Neteler
On Wed, Jul 1, 2009 at 4:27 PM, Michael P. Gerlek wrote:
> (sorry, that wasn't supposed to go to the whole list - still getting used to
> the iPhone...)

No - the problem is the odd setup of this list (unique in OSGeo?)
which changes replies to the list instead of the poster as
most other lists do.

http://www.unicom.com/pw/reply-to-harmful.html

We should follow also here the "Principle of Least Surprise"
and change the list settings.

Markus
___
Discuss mailing list
Discuss@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/discuss