Re: trac ticket spam

2011-03-12 Thread Max Bolingbroke 
On 31 January 2011 16:54, Simon Marlow  wrote:
> On 31/01/2011 16:45, Claus Reinke wrote:

 Is there any way to have a "moderate first comment by new submitter"
 policy for trac, to avoid the kind of ticket spam we have at the moment?

 They seem to have started commenting on existing tickets now (#4510),
 which could turn into a real mess really quickly, if the currently known
 spam accounts aren't blocked soon, btw.
>>>
>>> We've deleted all the spam tickets and ticket changes. Ian blocked a
>>> few IPs, and I've added some more patterns to the spam filter:
>>>
>>> http://hackage.haskell.org/trac/ghc/wiki/BadContent
>>
>> Thanks!
>> You've been using trac's spam filter for a while now, and these still
>> got through. Also, I hadn't seen the commenting
>> and "make random changes to fields" aspect before - it
>> could be that someone is improving/testing trac spamming
>> tools (as trac is in wide-spread use).
>>
>>  From checking the spam filter plugin description, and since
>> spammers hardly ever make a useful contribution before
>> posting spam, adopting the mailing list trick of moderating
>> the first post for each new account might help a little (and
>> might be easy to implement for a trac hacker).
>
> If such a thing is already available as a plugin then we can drop it in, but
> otherwise it's unlikely - we don't really have the brain-cycles available
> for hacking Trac itself.

(Since the spam problem doesn't seem to be getting better, I'm
resurrecting this thread)

There is this plugin: https://software.sandia.gov/trac/fast/wiki/TicketModerator

"""
The TicketModerator plugin is an extension for the  Trac project
management and bug/issue tracking system. It supports the human
moderation of new tickets and ticket comments for unprivileged users
within Trac. When an unprivileged user submits a ticket or ticket
comment, their submission is recorded in a "moderation queue" and is
not visible on the main Trac site until a Moderator reviews their
submission and either accepts or rejects it. Accepted submissions are
then inserted into the main Trac ticket database.
"""

So someone would have to volunteer to moderate but it would prevent
spam showing up immediately. After a first valid ticket by a new user
account they can be assigned the MODERATOR_PASS_* privileges so they
can contribute freely.

Possibly useful?

Cheers,
Max

___
Glasgow-haskell-users mailing list
Glasgow-haskell-users@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-users

Re: Weird failure of ghc-7.0.2 on OS X 10.5 using the bindist tarball

2011-03-12 Thread Ian Lynagh 

It turns out that even an i386 build made on 10.6 won't work on 10.5:
http://hackage.haskell.org/trac/ghc/ticket/4996

And even if this is fixable, it won't help, as we'll have to drop 10.5
support in order to support XCode 4:
http://hackage.haskell.org/trac/ghc/ticket/5011

If you build GHC yourself then it should work, though.


Thanks
Ian


___
Glasgow-haskell-users mailing list
Glasgow-haskell-users@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-users

Re: Weird failure of ghc-7.0.2 on OS X 10.5 using the bindist tarball

2011-03-12 Thread Thomas Schilling 
OK, thanks.

On 12 March 2011 14:25, Ian Lynagh  wrote:
>
> It turns out that even an i386 build made on 10.6 won't work on 10.5:
>    http://hackage.haskell.org/trac/ghc/ticket/4996
>
> And even if this is fixable, it won't help, as we'll have to drop 10.5
> support in order to support XCode 4:
>    http://hackage.haskell.org/trac/ghc/ticket/5011
>
> If you build GHC yourself then it should work, though.
>
>
> Thanks
> Ian
>
>
> ___
> Glasgow-haskell-users mailing list
> Glasgow-haskell-users@haskell.org
> http://www.haskell.org/mailman/listinfo/glasgow-haskell-users
>



-- 
Push the envelope. Watch it bend.

___
Glasgow-haskell-users mailing list
Glasgow-haskell-users@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-users

Re: trac ticket spam

2011-03-12 Thread Simon Marlow 

On 12/03/11 09:00, Max Bolingbroke wrote:

On 31 January 2011 16:54, Simon Marlow  wrote:

On 31/01/2011 16:45, Claus Reinke wrote:


Is there any way to have a "moderate first comment by new submitter"
policy for trac, to avoid the kind of ticket spam we have at the moment?

They seem to have started commenting on existing tickets now (#4510),
which could turn into a real mess really quickly, if the currently known
spam accounts aren't blocked soon, btw.


We've deleted all the spam tickets and ticket changes. Ian blocked a
few IPs, and I've added some more patterns to the spam filter:

http://hackage.haskell.org/trac/ghc/wiki/BadContent


Thanks!
You've been using trac's spam filter for a while now, and these still
got through. Also, I hadn't seen the commenting
and "make random changes to fields" aspect before - it
could be that someone is improving/testing trac spamming
tools (as trac is in wide-spread use).

  From checking the spam filter plugin description, and since
spammers hardly ever make a useful contribution before
posting spam, adopting the mailing list trick of moderating
the first post for each new account might help a little (and
might be easy to implement for a trac hacker).


If such a thing is already available as a plugin then we can drop it in, but
otherwise it's unlikely - we don't really have the brain-cycles available
for hacking Trac itself.


(Since the spam problem doesn't seem to be getting better, I'm
resurrecting this thread)

There is this plugin: https://software.sandia.gov/trac/fast/wiki/TicketModerator

"""
The TicketModerator plugin is an extension for the  Trac project
management and bug/issue tracking system. It supports the human
moderation of new tickets and ticket comments for unprivileged users
within Trac. When an unprivileged user submits a ticket or ticket
comment, their submission is recorded in a "moderation queue" and is
not visible on the main Trac site until a Moderator reviews their
submission and either accepts or rejects it. Accepted submissions are
then inserted into the main Trac ticket database.
"""

So someone would have to volunteer to moderate but it would prevent
spam showing up immediately. After a first valid ticket by a new user
account they can be assigned the MODERATOR_PASS_* privileges so they
can contribute freely.

Possibly useful?


Maybe.  Before we look into that, I've also mentioned to Ian that I'm 
somewhat suspicious about the current spam plugin - I don't think it's 
actually working properly.  The log is supposed to list every content 
submission, but it only has a paultry few, suggesting that most content 
submissions are not actually being piped through the spam filter.


Cheers,
Simon


___
Glasgow-haskell-users mailing list
Glasgow-haskell-users@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-users

Re: trac ticket spam

2011-03-12 Thread Ian Lynagh 
On Sat, Mar 12, 2011 at 10:13:07PM +, Simon Marlow wrote:
> On 12/03/11 09:00, Max Bolingbroke wrote:
> >
> >There is this plugin: 
> >https://software.sandia.gov/trac/fast/wiki/TicketModerator
> >
> >The TicketModerator plugin is an extension for the  Trac project
> >
> >Possibly useful?
> 
> Maybe.  Before we look into that, I've also mentioned to Ian that
> I'm somewhat suspicious about the current spam plugin - I don't
> think it's actually working properly.  The log is supposed to list
> every content submission, but it only has a paultry few, suggesting
> that most content submissions are not actually being piped through
> the spam filter.

I was looking at this earlier today. Those that are in the monitor list
have "anonymous" as the author (prsumably due to people getting logged
out), so I wonder if comments from authenticated users are going via a
different path. I fiddled with various things, and enabled logging, but
am no further forward. The easiest way forward would probably be to
upgrade to trac 0.12, except it's not packaged for Debian (even in
unstable).

Maybe installing trac from source is the best way forward.


Thanks
Ian


___
Glasgow-haskell-users mailing list
Glasgow-haskell-users@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-users

Re: trac ticket spam

2011-03-12 Thread Krzysztof Skrzętnicki 
On page: http://hackage.haskell.org/trac/ghc/wiki/ReportABug

There is a certain
paragraph which says:

To report a bug, either:

   - Preferred:
  - register  an account
  on this Trac
  - Create a new
bug,
  and enter your bug report. You can also search the bug database here
  to make sure your bug hasn't already been reported (if it has, it might
  still help to add information from your experience to the
existing report).
   - Less preferred:
  - *To submit an anonymous bug: use login "guest", password "guest"*
  - *Bug reports can also be emailed to .*
  -


Perhaps one of these ways is being exploited?

Best regards,
Krzysztof Skrzętnicki

On Sat, Mar 12, 2011 at 23:27, Ian Lynagh  wrote:

> On Sat, Mar 12, 2011 at 10:13:07PM +, Simon Marlow wrote:
> > On 12/03/11 09:00, Max Bolingbroke wrote:
> > >
> > >There is this plugin:
> https://software.sandia.gov/trac/fast/wiki/TicketModerator
> > >
> > >The TicketModerator plugin is an extension for the  Trac project
> > >
> > >Possibly useful?
> >
> > Maybe.  Before we look into that, I've also mentioned to Ian that
> > I'm somewhat suspicious about the current spam plugin - I don't
> > think it's actually working properly.  The log is supposed to list
> > every content submission, but it only has a paultry few, suggesting
> > that most content submissions are not actually being piped through
> > the spam filter.
>
> I was looking at this earlier today. Those that are in the monitor list
> have "anonymous" as the author (prsumably due to people getting logged
> out), so I wonder if comments from authenticated users are going via a
> different path. I fiddled with various things, and enabled logging, but
> am no further forward. The easiest way forward would probably be to
> upgrade to trac 0.12, except it's not packaged for Debian (even in
> unstable).
>
> Maybe installing trac from source is the best way forward.
>
>
> Thanks
> Ian
>
>
> ___
> Glasgow-haskell-users mailing list
> Glasgow-haskell-users@haskell.org
> http://www.haskell.org/mailman/listinfo/glasgow-haskell-users
>
___
Glasgow-haskell-users mailing list
Glasgow-haskell-users@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-users

Re: a message from Tokyo

2011-03-12 Thread 山本和彦 
Hello, 

First of all, I thank those who sent me a message. Though many events
are canceled, Tokyo is just the usual today.

> I guess some of you have been to Sendai which is a central town of
> North-east of Japan. The situation of Sendai is really really bad. I'm
> concerning whether or not people of Tohoku University are safe. Thanks
> to twitter, Eijiro Sumii, who is the chair of ICPF 2011 programming
> contest is safe.

I should correct this information. The central city of Sendai was not
attacked by Tsunami. But the airport was destroyed since it is much
closer to the coast.

As you may know, the nuclear energy plants in Fukushima are in severe
situation. I hope they will stop safely.

We Japanese feel that people living all over the world are with
us. Thank you.

--Kazu

___
Glasgow-haskell-users mailing list
Glasgow-haskell-users@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-users