Re: [MediaWiki-l] Spam problem with a 1.22.6 installation

2014-06-15 Thread chris tharp
Thanks for thanking me, but seriously you should thank Jamie Thingelstad. Not only did he come up with the best answer for spam I've seen, but he also is, I think, one half of the time that created the Foreground skin (for my money the best skin in Mediawiki). Oh, and he started Wikiapiary: https:/

Re: [MediaWiki-l] Spam problem with a 1.22.6 installation

2014-06-15 Thread Mlpearc
Thank you Chris for that link, I had a terrible spam problem when I started my farm, not so much anymore (I believe an abuse filter a developer friend created coupled with range blocks seems to be catching them now). I'm going to re-config ConfirmEdit to the suggested on that page, it just seems to

Re: [MediaWiki-l] Spam problem with a 1.22.6 installation

2014-06-15 Thread Chris Tharp
Hi I recommend making your captcha questions dynamic. Best answer I ever found for spam on Mediawiki: http://thingelstad.com/stopping-mediawiki-spam-with-dynamic-questy-captchas/#more-154561559 Sent from my iPad On Jun 15, 2014, at 10:22 AM, Shirley Hicks wrote: > Good afternoon everyone, >

[MediaWiki-l] Spam problem with a 1.22.6 installation

2014-06-15 Thread Shirley Hicks
Good afternoon everyone, I finished upgrading our mediawiki wiki.redmountainmakers.org to 1.22.6 last weekend. Due to some family issues, ended up accessing my ISP to run maintenance scripts from the command line over an airport network enroute to another city. This may have been the source of

[MediaWiki-l] Spam settings for this list

2014-03-19 Thread Federico Leva (Nemo)
Were the antispam settings of this list changed recently? I've tried 5 times to send a message, without success. Messages are silently discarded so I have no idea what's going on (maybe they are still in the moderation queue), anyway the configuration

[MediaWiki-l] SPAM control Possibility

2013-11-26 Thread John W. Foster
Just wondering if there is a way to convert blocked users to inactive users, or does that happen automatically. If it can be done or already does occur, then in time the removeInactiveAccounts.php in /maintenance will get them eventually. Thanks John __

Re: [MediaWiki-l] Spam!

2013-09-20 Thread K. Peachey
On Fri, Sep 20, 2013 at 11:44 AM, Ivan Sanders wrote: > Hi, > > I thought I had this sorted, but I clearly dont. I have new users being > created and content uploaded. Email seems to be intermittent - sometimes I > get notifications, other times I don't > > URL is at > http://www.actscoutaction.or

Re: [MediaWiki-l] Spam!

2013-09-20 Thread Jonathan Aquilina
Is the below settings should they work at preventing spam? the most issue is sign ups and spamming after sign ups that they are experiencing. questy has made a big difference, except users are complaining that the questions are not localized into their language. On Fri, Sep 20, 2013 at 11:00 AM,

Re: [MediaWiki-l] Spam!

2013-09-20 Thread K. Peachey
On Fri, Sep 20, 2013 at 11:44 AM, Ivan Sanders wrote: > Hi, > > I thought I had this sorted, but I clearly dont. I have new users being > created and content uploaded. Email seems to be intermittent - sometimes I > get notifications, other times I don't > > URL is at > http://www.actscoutaction.or

Re: [MediaWiki-l] Spam!

2013-09-20 Thread OQ
The best solution I found was to require autoconfirmed accounts to have multiple posts before being promoted, and requiring email confirmation in conjunction with a captcha. Spammers will spend money to solve the captcha to create accounts but when they have to solve ten more before autoconfirmed,

Re: [MediaWiki-l] Spam!

2013-09-20 Thread Jonathan Aquilina
The Document Foundation has the same issue with spam, what seems to really mitigate the problem is the questy captcha the problem is that of localization. i know the creator had started something of the sort and I am hoping to find time to help him out. On Fri, Sep 20, 2013 at 3:44 AM, Ivan Sande

Re: [MediaWiki-l] Spam!

2013-09-19 Thread Chris Steipp
That shouldn't be happening with those permission (from what I can see on a very quick first look). Were you seeing this before you installed the UserAdmin extension? If you are able to get a trace of how these users are being created, please ping me off list. I'd like to make sure that's not a ho

[MediaWiki-l] Spam!

2013-09-19 Thread Ivan Sanders
Hi, I thought I had this sorted, but I clearly dont. I have new users being created and content uploaded. Email seems to be intermittent - sometimes I get notifications, other times I don't URL is at http://www.actscoutaction.org.au/wiki/index.php/Special:RecentChanges Here's some detail Local

Re: [MediaWiki-l] Spam extension with per page filters and API accessable

2013-02-21 Thread Al Johnson
Hi Chris, Open a ticket for AbuseFilter? From: Chris Steipp To: MediaWiki announcements and site admin list Cc: Al Johnson Sent: Thursday, February 21, 2013 1:42 PM Subject: Re: [MediaWiki-l] Spam extension with per page filters and API accessable On

Re: [MediaWiki-l] Spam extension with per page filters and API accessable

2013-02-21 Thread Chris Steipp
On Thu, Feb 21, 2013 at 7:22 AM, Mark A. Hershberger wrote: > On 02/20/2013 09:55 PM, Al Johnson wrote: >> Can anyone recommend a spam filter whereby one can specify a filter >> pattern along with the specific page to which the filter applies >> AND can be accessed and modified via the API? > > Ab

Re: [MediaWiki-l] Spam extension with per page filters and API accessable

2013-02-21 Thread Mark A. Hershberger
On 02/20/2013 09:55 PM, Al Johnson wrote: > Can anyone recommend a spam filter whereby one can specify a filter > pattern along with the specific page to which the filter applies > AND can be accessed and modified via the API? AbuseFilter has an API, but it is read-only. It shouldn't be to hard t

[MediaWiki-l] Spam extension with per page filters and API accessable

2013-02-20 Thread Al Johnson
Hi, Can anyone recommend a spam filter whereby one can specify a filter pattern along with the specific page to which the filter applies AND can be accessed and modified via the API? thanks, al ___ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.

Re: [MediaWiki-l] Spam-Benutzer-acounts löschen

2012-09-27 Thread Werner Lohe
Thanks very much for posting this. For people like me who have very limited techincal skills, but still want to support a simple wiki, the single biggest obstacle is understanding how to best deal with spam. I suspect lots of newbies appreciate occasional posts about spam. ^

Re: [MediaWiki-l] Spam-Benutzer-acounts löschen

2012-09-26 Thread Yury Katkov
Also be sure to attend SMWCon[1], I will present the tutorial on anti-spam there! ';) [1] http://semantic-mediawiki.org/wiki/SMWCon_Fall_2012 - Yury Katkov 2012/9/26 Yury Katkov > Hi Markus! > > I recommend you to use QuestyCaptcha to dissallow the bots to register and > also use $wgAut

Re: [MediaWiki-l] Spam-Benutzer-acounts löschen

2012-09-26 Thread Chris Steipp
A fairly detailed (if not super easy to use) place to start is http://www.mediawiki.org/wiki/Anti-spam_features, which points to various extensions that can help out. For a popular site, you'll need a holistic strategy for dealing with spam, which will include a few different tools, possibly somet

Re: [MediaWiki-l] Spam-Benutzer-acounts löschen

2012-09-26 Thread Yury Katkov
Hi Markus! I recommend you to use QuestyCaptcha to dissallow the bots to register and also use $wgAutoConfirmAge = 3600*24; - Yury Katkov 2012/9/26 Markus > Liebe MW-Spezialisten, > > Wir haben tausende Benutzeracounts von Spammern: > http://wiki.openseamap.org/**wiki/Spezial:Benutzer

Re: [MediaWiki-l] Spam-Benutzer-acounts löschen

2012-09-26 Thread Stip
https://www.mediawiki.org/wiki/Extension:User_Merge_and_Delete Einfach den Benutzer:Spam erstellen und alle Spam-Accounts mit diesem Benutzer vereinigen. Ich weiß allerdingt nicht, ob und wie man das per Bot automatisieren kann. Damit keine neuen Spamaccounts angelegt werden: http://www.media

[MediaWiki-l] Spam-Benutzer-acounts löschen

2012-09-26 Thread Markus
Liebe MW-Spezialisten, Wir haben tausende Benutzeracounts von Spammern: http://wiki.openseamap.org/wiki/Spezial:Benutzer Wie kann ich diese löschen? Eine "White list" von "guten" Benutzern ist vorhanden. Gibt es da einen Bot? Danke, Markus ___ Media

Re: [MediaWiki-l] spam users

2012-08-05 Thread Yury Katkov
Questy captcha is awesome but don't forget to change the questions from time to time. Maybe you'll also find this article interesting, I wrote it when there was much spam on semanticweb.org: http://semanticweb.org/wiki/semanticweb.org:Fighting_spam - Yury Katkov On Wed, Aug 1, 2012 at 10:28

Re: [MediaWiki-l] spam users

2012-08-01 Thread Anne Wilson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/08/12 11:36, Scheid, Bernhard wrote: > Hi, > > I am running a couple of relatively small academic Wikis mainly for > educational uses at university. Thus there is relatively little > traffic apar

Re: [MediaWiki-l] spam users

2012-08-01 Thread Frederick Grose
On Wed, Aug 1, 2012 at 12:44 PM, Helmut Hullen wrote: > Hallo, Bernhard, > > Du meintest am 01.08.12: > > > I am running a couple of relatively small academic Wikis mainly for > > educational uses at university. Thus there is relatively little > > traffic apart from course time. Nevertheless, so

Re: [MediaWiki-l] spam users

2012-08-01 Thread Helmut Hullen
Hallo, Bernhard, Du meintest am 01.08.12: > I am running a couple of relatively small academic Wikis mainly for > educational uses at university. Thus there is relatively little > traffic apart from course time. Nevertheless, some two years ago I > noticed more and more spam and thus reduced edi

Re: [MediaWiki-l] spam users

2012-08-01 Thread Luis Dantas
nge my question. > > http://www.mediawiki.org/wiki/Extension:QuestyCaptcha > > > Adrian > > > > From: "Scheid, Bernhard" > To: "mediawiki-l@lists.wikimedia.org" > Sent: Wednesday, August 1, 2012 3:36 AM > Subject: [MediaWiki-l

Re: [MediaWiki-l] spam users

2012-08-01 Thread Scheid, Bernhard
Many thanks! -Ursprüngliche Nachricht- Von: mediawiki-l-boun...@lists.wikimedia.org [mailto:mediawiki-l-boun...@lists.wikimedia.org] Im Auftrag von 2...@gmaskfx.com Gesendet: Mittwoch, 1. August 2012 15:30 An: MediaWiki announcements and site admin list Betreff: Re: [MediaWiki-l] spam

Re: [MediaWiki-l] spam users

2012-08-01 Thread 2...@gmaskfx.com
getting through so I might need to change my question.  http://www.mediawiki.org/wiki/Extension:QuestyCaptcha  Adrian From: "Scheid, Bernhard" To: "mediawiki-l@lists.wikimedia.org" Sent: Wednesday, August 1, 2012 3:36 AM Subject: [Media

Re: [MediaWiki-l] spam users

2012-08-01 Thread Amir E. Aharoni
2012/8/1 Scheid, Bernhard : > Hi, > > I am running a couple of relatively small academic Wikis mainly for > educational uses at university. Thus there is relatively little traffic > apart from course time. Nevertheless, some two years ago I noticed more and > more spam and thus reduced editing

[MediaWiki-l] spam users

2012-08-01 Thread Scheid, Bernhard
Hi, I am running a couple of relatively small academic Wikis mainly for educational uses at university. Thus there is relatively little traffic apart from course time. Nevertheless, some two years ago I noticed more and more spam and thus reduced editing rights first to registered users, then

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-15 Thread Benjamin Lees
On Fri, Apr 15, 2011 at 12:09 PM, 2...@gmaskfx.com <2...@gmaskfx.com> wrote: > As of now the only type of captcha that appears to work %100 is questycaptcha > unless ReCaptcha has been fixed. FancyCaptcha still seems to stop almost all spam. ___ MediaW

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-15 Thread 2...@gmaskfx.com
a has been fixed. --- On Thu, 4/14/11, Kilian wrote: > From: Kilian > Subject: Re: [Mediawiki-l] spam, spam, spam, and spam > To: mediawiki-l@lists.wikimedia.org > Date: Thursday, April 14, 2011, 6:33 AM > On 04/14/2011 01:28 PM, Anne Wilson > wrote: > > How do t

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-14 Thread Daniel Friesen
On 11-04-14 04:28 AM, Anne Wilson wrote: > On Wednesday 13 April 2011 22:29:35 Daniel Friesen wrote: >> On 11-04-13 10:42 AM, Anne Wilson wrote: >>> On Wednesday 13 April 2011 18:01:30 Kilian wrote: On 04/13/2011 06:57 PM, Hiram Clawson wrote: > The spam is getting really tiresome. I turn

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-14 Thread OQ
On Thu, Apr 14, 2011 at 7:08 AM, Schneelocke wrote: > On Thu, Apr 14, 2011 at 13:28, Anne Wilson wrote: >>> ^_^ That would be our autoconfirmed feature... and guess what, spambots >>> that know how to register, wait for the autoconfirmed time to elapse, >>> and then come back, already exist. Ther

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-14 Thread Schneelocke
On Thu, Apr 14, 2011 at 13:28, Anne Wilson wrote: >> ^_^ That would be our autoconfirmed feature... and guess what, spambots >> that know how to register, wait for the autoconfirmed time to elapse, >> and then come back, already exist. There are also ones that know how to >> confirm their own e-ma

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-14 Thread Kilian
On 04/14/2011 01:28 PM, Anne Wilson wrote: > How do the spambots know what delay is set? They probably try periodically. -Kilian ___ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-14 Thread Anne Wilson
On Wednesday 13 April 2011 22:29:35 Daniel Friesen wrote: > On 11-04-13 10:42 AM, Anne Wilson wrote: > > On Wednesday 13 April 2011 18:01:30 Kilian wrote: > >> On 04/13/2011 06:57 PM, Hiram Clawson wrote: > >>> The spam is getting really tiresome. I turned on ConfirmAccount and > >>> the spammers

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Daniel Friesen
On 11-04-13 10:42 AM, Anne Wilson wrote: > On Wednesday 13 April 2011 18:01:30 Kilian wrote: >> On 04/13/2011 06:57 PM, Hiram Clawson wrote: >>> The spam is getting really tiresome. I turned on ConfirmAccount and >>> the spammers continue to ask for accounts even through that mechanism. >>> It is

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Brion Vibber
On Wed, Apr 13, 2011 at 11:11 AM, Siebrand Mazeland wrote: > On 13-04-11 19:42 Anne Wilson wrote: > >What I'd really like to see is the ability to say that you can't make any > >edits until you have been registered for a period of time, unless you are > a > >member of a higher group. I doubt if

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Schneelocke
Hiya, On Wed, Apr 13, 2011 at 19:42, Anne Wilson wrote: > What I'd really like to see is the ability to say that you can't make any > edits until you have been registered for a period of time, unless you are a > member of a higher group.  I doubt if the spammers would bother creating an > account

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Siebrand Mazeland
Hi Anne, On 13-04-11 19:42 Anne Wilson wrote: >> >What I'd really like to see is the ability to say that you can't make any >edits until you have been registered for a period of time, unless you are >a >member of a higher group. I doubt if the spammers would bother creating >an >account and

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Chad
On Wed, Apr 13, 2011 at 1:42 PM, Anne Wilson wrote: > What I'd really like to see is the ability to say that you can't make any > edits until you have been registered for a period of time, unless you are a > member of a higher group.  I doubt if the spammers would bother creating an > account and

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Kilian
On 04/13/2011 07:42 PM, Anne Wilson wrote: > What I'd really like to see is the ability to say that you can't make any > edits until you have been registered for a period of time, unless you are a > member of a higher group. I doubt if the spammers would bother creating an > account and coming bac

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Anne Wilson
On Wednesday 13 April 2011 18:01:30 Kilian wrote: > On 04/13/2011 06:57 PM, Hiram Clawson wrote: > > The spam is getting really tiresome. I turned on ConfirmAccount and > > the spammers continue to ask for accounts even through that mechanism. > > It is a real pain... > > Read this: http://www.me

Re: [Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Kilian
On 04/13/2011 06:57 PM, Hiram Clawson wrote: > The spam is getting really tiresome. I turned on ConfirmAccount and > the spammers continue to ask for accounts even through that mechanism. > It is a real pain... Read this: http://www.mediawiki.org/wiki/Manual:Combating_spam http://www.mediawiki.o

[Mediawiki-l] spam, spam, spam, and spam

2011-04-13 Thread Hiram Clawson
The spam is getting really tiresome. I turned on ConfirmAccount and the spammers continue to ask for accounts even through that mechanism. It is a real pain... --Hiram ___ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedi

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-19 Thread Steven Dick
On Wed, Mar 16, 2011 at 8:15 PM, Daniel Friesen wrote: [...] > Sure enough after a bit I started seeing the same spam, > Perhaps it is a bit draconian, but on my wiki, when I get spam, I use checkuser to get their ip. I block their whole /24 subnet. I then go look at the spam they left me, and

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-18 Thread Marcin Cieslak
>> Kay Diederichs wrote: > I found that > To:gmail.com REJECT > (with one or multiple tabs where the blank appears in the line above) > seems to work well when appended to /etc/mail/access which is used by > sendmail on my CentOS-5.5 machine. Nota bene: only wikis are on this > machine, so it's

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-18 Thread Kay Diederichs
Am 17.03.2011 22:06, schrieb Platonides: > Daniel Friesen wrote: >> The spammers haven't coded the bots to handle QuestyCaptcha yet, but if >> people start using it to stop them, then they will code it into the bot. > > Questy captcha is a free form question. You can't learn how to bypass > a

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-17 Thread Platonides
Daniel Friesen wrote: > The spammers haven't coded the bots to handle QuestyCaptcha yet, but if > people start using it to stop them, then they will code it into the bot. Questy captcha is a free form question. You can't learn how to bypass any instance of it. Not even a human would be able to b

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread Daniel Friesen
On 11-03-16 04:35 PM, Frederick Grose wrote: > On Wed, Mar 16, 2011 at 6:50 PM, Hiram Clawson wrote: > >> What prevents the black hat google spammers from creating OpenID accounts ? >> >> --Hiram >> >> Frederick Grose wrote: >>> Install >>> http://www.mediawiki.org/wiki/Extension:OpenID >>> and di

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread Frederick Grose
On Wed, Mar 16, 2011 at 6:50 PM, Hiram Clawson wrote: > What prevents the black hat google spammers from creating OpenID accounts ? > > --Hiram > > Frederick Grose wrote: > > Install > > http://www.mediawiki.org/wiki/Extension:OpenID > > and disable new account creation, instead, redirect users t

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread Hiram Clawson
What prevents the black hat google spammers from creating OpenID accounts ? --Hiram Frederick Grose wrote: > Install > http://www.mediawiki.org/wiki/Extension:OpenID > and disable new account creation, instead, redirect users to the OpenID > account page, > Special:OpenIDLogin. _

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread 2...@gmaskfx.com
Questy solved this problem for me immediately.. I also feel totally redeemed to know that other people are having this same issue after I first posted about it a month or so ago. --- On Wed, 3/16/11, ro...@rogerchrisman.com wrote: > From: ro...@rogerchrisman.com > Subject: Re: [Media

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread roger
Try QuestyCaptcha*. It has been stopping spammers on my wiki that reCaptcha failed to. * http://www.mediawiki.org/wiki/ConfirmEdit#QuestyCaptcha Roger TEFLChina.org, wiki for teachers of English as a foreign language in China ___ MediaWiki-l mailing li

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-16 Thread Frederick Grose
On Wed, Mar 16, 2011 at 1:45 AM, Chris Lewis wrote: > Yes I have the same problem. So annoying. Are humans confirming the emails > as > well? > > I have captcha, email confirmation and the SpamBlacklist extension and i'm > still > getting spammed every day for the last week. They keep making new a

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-15 Thread Sarel Wessels (Agri Wiki)
At this stage I've blocked the function for users to create accounts themselves... They complete a form on the website, and I receive an email, then I create the account for them. Before I create the account, I normally contact them to determine if they are a genuine prospective users... It see

Re: [Mediawiki-l] spam attack avoids captcha

2011-03-15 Thread Chris Lewis
Yes I have the same problem. So annoying. Are humans confirming the emails as well? I have captcha, email confirmation and the SpamBlacklist extension and i'm still getting spammed every day for the last week. They keep making new accounts every day. What can I do since they are bypassing all

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-10 Thread Sol Invictus
>From my debug logging, the reCAPTCHAs were solved the first time, every time, in under 1 second. This is no human, and it's no retries. I can think of any way that could happen unless the service itself has been broken, legitimately or through some flaw. On Thu, Mar 10, 2011 at 3:37 PM, Benjamin

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-10 Thread Benjamin Lees
On Thu, Mar 10, 2011 at 11:10 AM, Dan Kohn wrote: > So, it looks like someone has programmed a > MediaWiki/ConfirmEdit-focused spambot that can defeat SimpleCatcha > (simple math problems) and -- shockingly -- ReCaptcha. But not that > they're using human beings to do the spamming. So, QuestyCap

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-10 Thread 2...@gmaskfx.com
Just wait.. the technology behind IBM's Watson will end up in the hands of spammers and then there'll be no stopping the spam ;-) --- On Thu, 3/10/11, Dan Kohn wrote: > From: Dan Kohn > Subject: Re: [Mediawiki-l] Spam account creation, circumventing recaptcha > To: "

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-10 Thread Dan Kohn
Sol, I'd like to confirm your analysis. I switched from ReCaptcha to QuestyCaptcha with a custom question and have seen no further spam. So, it looks like someone has programmed a Me

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-08 Thread Sol Invictus
I don't think that's the case; my logs show pretty much instant data entry. They must have found some way to break the service itself. I switched to Questy with some simple things like "type the word X" or "sum(2,3)" and it seems to be blocking them all so far. On Tue, Mar 8, 2011 at 10:43 AM, Dan

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-08 Thread Dan Kohn
My www.PWSNotes.org MediaWiki site, which I've operated since 2004, has been overrun with spam in the last month. I used Nuke to clean it up. Unfortunately, neither ConfirmEdit with ReCaptcha nor SpamBlacklist is stopping the spammers. I interpret this as meaning that real people are doing the s

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-07 Thread Hiram Clawson
I have captcha on, plus a user needs to validate their email address to acquire edit privls, and the spam just keeps coming. It appears to be an army of hired hands paid to insert links for black hat spoofing of google rankings. Do these guys get put on the black listing ? Maybe I should turn on

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-07 Thread Sol Invictus
Well, my log output shows the spam bots are entering valid responses. I have to assume that recaptcha has simply been broken, either legitimately or through response poisoning... guess I'll switch to another captcha type. On Mon, Mar 7, 2011 at 5:06 PM, Sol Invictus wrote: > I'll try to take a lo

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-07 Thread Sol Invictus
I'll try to take a look at the extension's code tonight to see if I can find it... was hoping someone had already identified the problem. On Mon, Mar 7, 2011 at 5:03 PM, OQ wrote: > On Mon, Mar 7, 2011 at 6:01 PM, Platonides wrote: >> There is probably some weakness inside recaptcha plugin (or t

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-07 Thread OQ
On Mon, Mar 7, 2011 at 6:01 PM, Platonides wrote: > There is probably some weakness inside recaptcha plugin (or they simply > broke recaptcha), as I have seen other wikis heavily spammed albeit > using recaptcha. > Back at the beginning of Jan all my sites that use reCaptcha started getting lots

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-07 Thread Platonides
Sol Invictus wrote: > Greetings, > > As of a few months ago, I've been getting spam pages generated on my > wiki. I upgraded to the latest mediawiki release and I added recaptcha > to login and anonymous edit, but spam accounts and pages are still > being created. I added debug output to the recap

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-07 Thread 2...@gmaskfx.com
Switching to Questycaptcha solved my spambot problem completely... a question as simple as what this website about did the trick. --- On Mon, 3/7/11, Sol Invictus wrote: > From: Sol Invictus > Subject: [Mediawiki-l] Spam account creation, circumventing recaptcha > To: me

Re: [Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-07 Thread OQ
On Mon, Mar 7, 2011 at 10:27 AM, Sol Invictus wrote: > Greetings, > > As of a few months ago, I've been getting spam pages generated on my > wiki. I upgraded to the latest mediawiki release and I added recaptcha > to login and anonymous edit, but spam accounts and pages are still > being created.

[Mediawiki-l] Spam account creation, circumventing recaptcha

2011-03-07 Thread Sol Invictus
Greetings, As of a few months ago, I've been getting spam pages generated on my wiki. I upgraded to the latest mediawiki release and I added recaptcha to login and anonymous edit, but spam accounts and pages are still being created. I added debug output to the recaptcha extension to show me when i

Re: [Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Phil Howard
On Wed, Jul 28, 2010 at 14:15, Brion Vibber wrote: > There are service firms > that simply employ lots of people to type in captchas on your spambot's > behalf. A number of porn sites work this way. When someone tries to access the freebie section of a porn site, they see a captcha. It's copie

Re: [Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Brion Vibber
On Wed, Jul 28, 2010 at 9:11 AM, Hiram Clawson wrote: > Good Morning MediaWiki Fans: > > Our wiki site suffered a spam attack this weekend. (version 1.13.0) The > attack evidently > had some method to work-around the new account Captcha barrier, and the > authorized user email allowed to edit s

Re: [Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Benjamin Lees
On Wed, Jul 28, 2010 at 12:11 PM, Hiram Clawson wrote: > Our wiki site suffered a spam attack this weekend.  (version 1.13.0)  The > attack evidently > had some method to work-around the new account Captcha barrier, and the > authorized user email allowed to edit setting. Which CAPTCHA plugin ar

Re: [Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Frederick Grose
On Wed, Jul 28, 2010 at 12:11 PM, Hiram Clawson wrote: > Good Morning MediaWiki Fans: > Our wiki site suffered a spam attack this weekend. (version 1.13.0) The > attack evidently had some method to work-around the new account Captcha barrier, and the authorized user email allowed to edit se

[Mediawiki-l] spam attack avoids captcha

2010-07-28 Thread Hiram Clawson
Good Morning MediaWiki Fans: Our wiki site suffered a spam attack this weekend. (version 1.13.0) The attack evidently had some method to work-around the new account Captcha barrier, and the authorized user email allowed to edit setting. I'm curious if anyone else has encountered such attacks a

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-08 Thread Ekompute .info
Hi Jules, thanks for your information. 170€ per year for your server sounds like a reasonable proposition. Siteground wanted US$99 per month which works out to almost US$1,200. By the way, what is the name of your webhost? May consider it one day, since I am now paying half of what you are paying f

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-08 Thread Julien Pedrono
2009/5/8 Ekompute .info > Hi Jule, thank you very much for your response. You're welcome, hope it helps. > I suppose there will be > thousands of people using InnoDB databases on the same mysql server. I will > try to get my webhost to do it for me then. If the problem is the same I had, it'

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-08 Thread Ekompute .info
Hi Jule, thank you very much for your response. I suppose there will be thousands of people using InnoDB databases on the same mysql server. I will try to get my webhost to do it for me then. By the way, just as an aside, I am wondering how to afford a dedicated server. It's so much more expensive

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-07 Thread Julien Pedrono
Hi, Sorry for misunderstanding, I thought you were using and administrating your own server... You can ask your hosting company support to look for a problem with thoses tables, as they have direct access on their servers. When I encountered my problem, I remember I created my wiki database again (

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-06 Thread Ekompute .info
Hi, ssh access? No idea what it is, but if you tell me, I may be able to ask my webhost to help me. Maiahost.com has been very helpful all these while, unlike my previous one and I am quite confident they will be very willing to help if they know how. PM Poon On Wed, May 6, 2009 at 5:31 PM, Ekomp

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-06 Thread Ekompute .info
On Wed, May 6, 2009 at 4:40 PM, Julien Pedrono wrote: > Hi, > > 2009/5/5 Ekompute .info > > > Hi, I backed up the table using phpMyAdmin. > > So you had some .sql files as a result... > I had such a problem a few months ago: > - my server crashed > - I managed to access it in rescue, and to back

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-06 Thread Julien Pedrono
Hi, 2009/5/5 Ekompute .info > Hi, I backed up the table using phpMyAdmin. So you had some .sql files as a result... I had such a problem a few months ago: - my server crashed - I managed to access it in rescue, and to back up my databases (mysql dump and a backup of /var/lib/mysql/wiki/*). - wh

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-05 Thread Ekompute .info
Hi Michael, I don't use prefix as I am already having a problem of database getting too big for shared hosting (not so much of space usage but more of downloading and uploading backups) and am thinking of splitting them as you can see from my other thread. PM Poon On Wed, May 6, 2009 at 2:27 AM,

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-05 Thread Ekompute .info
Hi, I backed up the table using phpMyAdmin. Does it mean that I cannot import? Guess I need to delete them then, since they are occupying quite a lot of space. By the way, I am using 1.14 and it is still using InnoDB. PM Poon On Tue, May 5, 2009 at 11:41 PM, Julien Pedrono wrote: > Hi, > > Did

Re: [Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-05 Thread Julien Pedrono
Hi, Did you backed up your tables using mysqldump, or a tool such as phpMyAdmin? Following my own experience, and because wiki tables use InnoDB (at least 'till 1.12), importing tables can lead to data access problems. Jules 2009/5/5 Michael Daly > Ekompute .info wrote: > > Hi, I backed up two

[Mediawiki-l] [SPAM] Re: Importing MySQL tables

2009-05-05 Thread Michael Daly
Ekompute .info wrote: > Hi, I backed up two tables (category, and categorylinks) from my database > and export it into another. Both wikis uses the same Mediawiki Version 1.14. > Although I do see that the two tables are uploaded, I cannot access them. Is > there something that I miss? Do the tabl

[Mediawiki-l] [SPAM] Re: Tell maintenance scripts our URL via LocalSettings

2009-05-04 Thread Michael Daly
jida...@jidanni.org wrote: > Michael Daly writes: > >> why not just eliminate it altogether and put both sets of ID info into >> LocalSettings.php without saying they have to be the same? > > Yes, that's what > http://www.mediawiki.org/wiki/Manual:AdminSettings.php#Merging_with_LocalSettings.php

Re: [Mediawiki-l] [SPAM] Re: Transplant help?

2009-05-04 Thread Jentzen Mooney
Thanks Mike for the help, I will make sure to post any of my findings here. /Jentzen Michael Daly wrote: > Jentzen Mooney wrote: > > >> Also I was wondering if I create a new wiki from 1.14 do you recommend >> setting up the SVN repository if I plan to upgrade in the coming months >> or years

[Mediawiki-l] [SPAM] Re: Tell maintenance scripts our URL via LocalSettings

2009-05-03 Thread Michael Daly
jida...@jidanni.org wrote: > I have taken the wild step of telling people the two files can be > combined into one: > http://www.mediawiki.org/wiki/Manual:AdminSettings.php#Merging_with_LocalSettings.php > , If you're going to do that, why do you assume that there need only be one user? If you

[Mediawiki-l] [SPAM] Re: [SPAM] Re: Can I put the AdminSettings jazz into LocalSettings?

2009-05-02 Thread Michael Daly
Darren VanBuren wrote: > The script won't show everyone the DB credentials. The script simply > assigns the variables. Nothing more. But you have to ensure that the web server doesn't serve up the AdminSettings file to anyone who wants to look. You also have to ensure that the web server isn't

Re: [Mediawiki-l] [SPAM] Re: Can I put the AdminSettings jazz into LocalSettings?

2009-05-02 Thread Darren VanBuren
The script won't show everyone the DB credentials. The script simply assigns the variables. Nothing more. Darren L. VanBuren = http://oks.tumblr.com/ On Sat, May 2, 2009 at 10:45, Michael Daly wrote: > jida...@jidanni.org wrote: >> Michael Daly writes: >>> Why not put the

[Mediawiki-l] [SPAM] Re: Can I put the AdminSettings jazz into LocalSettings?

2009-05-02 Thread Michael Daly
jida...@jidanni.org wrote: > Michael Daly writes: >> Why not put the server URL into AdminSettings.php where all the other >> maintenance script info goes? No sense using LocalSettings.php for nothing. > > Say, can I put the AdminSettings contents into LocalSettings and thus > not need to mainta

[Mediawiki-l] [SPAM] Re: Transplant help?

2009-05-01 Thread Michael Daly
Jentzen Mooney wrote: > Also I was wondering if I create a new wiki from 1.14 do you recommend > setting up the SVN repository if I plan to upgrade in the coming months > or years? I don't use SVN for upgrades, just for supporting an extension I wrote. When upgrading, I just download the zip

Re: [Mediawiki-l] [SPAM] Re: Transplant help?

2009-05-01 Thread Jentzen Mooney
Michael thank you so much, this good stuff to know. I will work on getting those Admin rights or getting some help. Also I was wondering if I create a new wiki from 1.14 do you recommend setting up the SVN repository if I plan to upgrade in the coming months or years? I don't know much about how

[Mediawiki-l] [SPAM] Re: Transplant help?

2009-05-01 Thread Michael Daly
Jentzen Mooney wrote: > I has be brought to my attention that the wiki installed is > mediawiki-1.6.8. I would like to using all the new included stuff in the > current wiki version like API,etc... > I have read about the trickiness of upgrading your wiki if you are below > a certain version,

[Mediawiki-l] [SPAM] Re: Tell maintenance scripts our URL via LocalSettings

2009-04-30 Thread Michael Daly
jida...@jidanni.org wrote: > Several maintenance scripts wish to use the URL of the server, [...] > Would the solution be to officially say that if the user intends to use > maintenance scripts, he should have something like > https://bugzilla.wikimedia.org/show_bug.cgi?id=18274#c6 > in LocalSettin

  1   2   >