Re: [OpenStack-Infra] Pholio Spec 340641

2016-08-09 Thread JP Maxwell
There is only currently one issue: I can get it to authenticate against login.ubuntu but neither dev or production OpenStackID. If we wish to stand this up against OpenStackID I'm going to need some eyes on that particular issue. Craige greetings - are you trying to use Open ID 2.0 or Open ID conn

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-03-22 Thread JP Maxwell
happening and how to stop it then we would propose a permanent patch which could be submitted through the normal processes. J.P. Maxwell | tipit.net | fibercove.com On Mar 22, 2016 5:39 PM, "Jeremy Stanley" wrote: > On 2016-03-22 08:23:08 -0500 (-0500), JP Maxwell wrote: > > If anyo

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-03-22 Thread JP Maxwell
> tools. > But that hasn't landed yet. > > Until now, I am going into the wiki every few days to ban existing > accounts that > have already been created manually. > > [1] https://review.openstack.org/#/c/287232/ > > > > > > Regards, > > > &g

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-03-22 Thread JP Maxwell
If anyone wants to approve this I am still happy to help. https://review.openstack.org/#/c/285641/1 I don't think you are ever going to be successful at blocking accounts or IPs. You must block the creation of the spam by the bots. IMHO focusing on improving the captcha or understanding the bypas

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread JP Maxwell
tps://review.openstack.org/285669] Disable standard password based auth https://review.openstack.org/285672 [https://review.openstack.org/285672] Disable mobile frontend M. On Sat, Feb 27, 2016 at 2:27 PM JP Maxwell < j...@tipit.net [j...@tipit.net] > wrote: FYI. Still seeing the mobile v

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread JP Maxwell
FYI. Still seeing the mobile view... J.P. Maxwell | tipit.net | fibercove.com On Feb 27, 2016 6:53 AM, "Marton Kiss" wrote: > Yes, applied them manually. Let's wait a few hours, and check for new spam > content / user accounts. > > M. > JP Maxwell (időpont: 20

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread JP Maxwell
ew.openstack.org/285669 Disable standard password based auth >> >> Just for the record, the last spam user account: >> 7536 | EarthaChester22 >> >> Marton >> >> >> On Sat, Feb 27, 2016 at 8:31 AM Marton Kiss >> wrote: >> >>> Hi, >&

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-26 Thread JP Maxwell
hasn't > require > SSH access for me to wiki.o.o. I did need infra-root help to expose our > configuration safely. I'd rather take some time to see what the fixes are, > having infra-root apply changes, then move them into puppet. > > It also has been discussed to simp

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-26 Thread JP Maxwell
8e M. On Fri, Feb 26, 2016 at 6:35 PM Marton Kiss < marton.k...@gmail.com [marton.k...@gmail.com] > wrote: Oh, I can login. So what we need? M. On Fri, Feb 26, 2016 at 6:33 PM JP Maxwell < j...@tipit.net [j...@tipit.net] > wrote: I think what Jimmy is referring to is what I was

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-26 Thread JP Maxwell
eb 26, 2016 at 6:33 PM JP Maxwell < j...@tipit.net [j...@tipit.net] > wrote: I think what Jimmy is referring to is what I was suggesting by removing the extensions / making the question impossible to answer. Basically a series of rapid fire changes while tailing the logs and seeing what stops

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-26 Thread JP Maxwell
i if we really want spamming to stop, obviously that will affect normal usage. > Jimmy > > Paul Belanger wrote: > >On Fri, Feb 26, 2016 at 10:12:12AM -0600, JP Maxwell wrote: > >>But if you wanted to upgrade everything, remove the mobile view extension, > >>test in a de

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-26 Thread JP Maxwell
But if you wanted to upgrade everything, remove the mobile view extension, test in a dev/staging environment then deploy to production fingers crossed, I think that would be a valid approach as well. J.P. Maxwell | tipit.net | fibercove.com On Feb 26, 2016 10:08 AM, "JP Maxwell" wrot

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-26 Thread JP Maxwell
Plus one except in this case it is much easier to know if our efforts are working on production because the spam either stops or not. J.P. Maxwell | tipit.net | fibercove.com On Feb 26, 2016 9:48 AM, "Paul Belanger" wrote: > On Fri, Feb 26, 2016 at 09:18:00AM -0600, JP Maxwell

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-26 Thread JP Maxwell
. J.P. Maxwell | tipit.net | fibercove.com On Feb 26, 2016 9:12 AM, "Paul Belanger" wrote: > On Thu, Feb 25, 2016 at 08:10:34PM -0800, Elizabeth K. Joseph wrote: > > On Thu, Feb 25, 2016 at 6:35 AM, Jeremy Stanley > wrote: > > > On 2016-02-25 02:46:13 -0600 (-0600),

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-26 Thread JP Maxwell
iawiki.org/wiki/Compatibility#PHP> for details of which > versions are compatible with prior versions of PHP. > > The wiki.o.o seems to be running on precise, meanwhile the git consumed > repo simply not supporting the PHP version provided there. > > M. > > On Fri, Feb 26,

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-25 Thread JP Maxwell
On Feb 25, 2016 10:10 PM, "Elizabeth K. Joseph" wrote: > On Thu, Feb 25, 2016 at 6:35 AM, Jeremy Stanley wrote: > > On 2016-02-25 02:46:13 -0600 (-0600), JP Maxwell wrote: > >> Please be aware that you can now create accounts under the mobile > >> view

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-25 Thread JP Maxwell
Please be aware that you can now create accounts under the mobile view in the wiki native user table. I just created an account for JpMaxMan. Not sure if this matters but wanted to make sure you were aware. J.P. Maxwell | tipit.net | fibercove.com On Feb 24, 2016 6:16 PM, "Elizabeth K. Joseph" w

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-24 Thread JP Maxwell
It looks like you are using it (you can see it in the mobile login view), but it is not being used once you are logged in: $wgGroupPermissions['user' ]['skipcaptcha'] = true; I think you need to remove the above line. And add in the two below: $wgCaptchaTriggers['edit'] = true; $wgCaptc

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-23 Thread JP Maxwell
, 2016 at 9:33 AM, JP Maxwell wrote: > > Thanks Elizabeth - good info - that document answers the questions of > where > > the code lives and how updates are performed. It would all require ssh > > access to the server it seems, which I don’t have. > > Right, this is

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-23 Thread JP Maxwell
://tipit.net] | fibercove.com [http://www.fibercove.com] On Tue, Feb 23, 2016 at 11:14 AM, Elizabeth K. Joseph wrote: On Tue, Feb 23, 2016 at 8:53 AM, JP Maxwell wrote: > Thanks Marton & Paul. > > Marton, however the infra community wants to handle the puppetization of the > local setti

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-23 Thread JP Maxwell
I did setup a wiki and have a look at this briefly. Can you confirm what extensions you are loading? When you setup the wiki it generates a localsettings.php file that lists the extensions: [image: Inline image 1] # Enabled Extensions. Most extensions are enabled by including the base extens

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-23 Thread JP Maxwell
Thanks Marton & Paul. Marton, however the infra community wants to handle the puppetization of the local settings file is fine with me. It is a very typical PHP app. Whatever is done we should have an easy path to update it. The MediaWiki version should also be updated to the latest version at some

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-23 Thread JP Maxwell
) > - we can beg for an account to execute cleanup scripts to remove spam > content automagically > > Cheers, > Marton > JP Maxwell (időpont: 2016. febr. 23., K, 8:59) ezt írta: > >> One final thought, I recall on the mobile view there is a secret word >> request in

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-23 Thread JP Maxwell
ers['create']= true; J.P. Maxwell / tipit.net <http://www.tipit.net> On Tue, Feb 23, 2016 at 1:48 AM, JP Maxwell wrote: > Hah. Well, I'm not entirely sure how this is setup to manage code > changes. I looked in GitHub and just see the puppet confi

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-22 Thread JP Maxwell
s in a few hours. J.P. Maxwell / tipit.net <http://www.tipit.net> On Tue, Feb 23, 2016 at 1:43 AM, Tom Fifield wrote: > Cheers, that's exactly what we need someone to do. > > > On 23/02/16 15:34, JP Maxwell wrote: > >> OK - so per the info here, you have to set

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-22 Thread JP Maxwell
n question (the answers shall be in lowercase): $wgCaptchaQuestions[] = array( 'question' => "2 + 2 ?", 'answer' => array( '4', 'four' ) ); $wgCaptchaTriggers['edit'] = true; $wgCaptchaTriggers['create']= true; J.P. Maxw

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-17 Thread JP Maxwell
> > > > Thanks for taking some time to look at this today! If we could find an > open source captcha option, that may be part of the solution. > > Do you think you might have some time to also look at the other > generalized Mediawiki proposals that Clint Byrum linked to earlier in > the thread? I

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-17 Thread JP Maxwell
M, Jeremy Stanley wrote: > > On 2016-02-15 09:04:41 -0600 (-0600), JP Maxwell wrote: > >> Tom, yes we can probably help. Do you want to ping me off list - > >> need to get some more info about how it is setup / version > >> controlled / deployed / etc. > > &g

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-15 Thread JP Maxwell
Tom, yes we can probably help. Do you want to ping me off list - need to get some more info about how it is setup / version controlled / deployed / etc. J.P. Maxwell | tipit.net [http://tipit.net] | fibercove.com [http://www.fibercove.com] On Mon, Feb 15, 2016 at 8:05 AM, Tom Fifield wrote: I

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-12 Thread JP Maxwell
J.P. Maxwell / tipit.net <http://www.tipit.net> On Fri, Feb 12, 2016 at 11:16 AM, James E. Blair wrote: > Jeremy Stanley writes: > > > On 2016-02-12 09:03:16 -0600 (-0600), JP Maxwell wrote: > >> I don't think it currently used open ID as far as I can see from the &g

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-12 Thread JP Maxwell
I don't think it currently used open ID as far as I can see from the login screen. Could be mistaken though :) https://drive.google.com/file/d/0B47GGpF8-_XHb2JFeUVHTG4tTU0/view?usp=docslist_api J.P. Maxwell | tipit.net | fibercove.com On Feb 12, 2016 8:46 AM, "Doug Hellmann" wrote: > > Doesn't

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-11 Thread JP Maxwell
It looks like this plugin is bundled with media wiki: https://m.mediawiki.org/wiki/Extension:ConfirmEdit Which offers various different types of captcha. It also looks like you might be using it (see: https://drive.google.com/file/d/0B47GGpF8-_XHTXFfR3RIbXozSDg/view?usp=docslist_api ). Maybe swi

Re: [OpenStack-Infra] Biting the bullet on issue tracking

2015-03-25 Thread JP Maxwell
Greetings everyone :) I understand you are potentially looking for an issue management system to adopt. I'd like to throw it out there that you have a look at Tipit's forked version of Chili Project ( http://www.chiliproject.org ) which itself is a fork of red mine. Keep in mind Chili Project is