[OpenStack-Infra] Wiki.o.o sustaining spam attack

Tom Fifield tom at openstack.org
Wed Mar 23 05:20:36 UTC 2016


On 23/03/16 13:05, Tom Fifield wrote:
> On 23/03/16 11:19, Tom Fifield wrote:
>> On 23/03/16 00:14, Paul Belanger wrote:
>>> On Tue, Mar 22, 2016 at 03:32:23PM +0800, Tom Fifield wrote:
>>>> Hi all,
>>>>
>>>>
>>>> I'm sad to say that:
>>>>
>>>> * spammers are back - 100-odd pages have gone in over the weekend
>>>> https://wiki.openstack.org/wiki/Special:NewPages
>>>>
>>>> * Cleanup was ineffective, with many spam pages still existing on
>>>> the wiki
>>>> (scroll through the NewPages link above)
>>>>
>>> So, just a quick update to this.  We just landed 287323[1] which
>>> installs
>>> SmiteSpam[2]. If you are in the bureaucrat group on wiki.o.o you'll
>>> be able to
>>> access it.
>>>
>>> Currently I've started the process on cleanup the wiki.  At the
>>> moment, I've
>>> blocked 54[3] account and delete 430+[4] pages. I'll send a follow up
>>> email once
>>> I am done for the day, but moving forward it will be easier for
>>> admins to detect
>>> the spam and stop it faster.
>>>
>>> [1] https://review.openstack.org/#/c/287232/
>>> [2] https://wiki.openstack.org/wiki/Special:SmiteSpam
>>> [3] https://wiki.openstack.org/wiki/Special:Log/block
>>> [4] https://wiki.openstack.org/wiki/Special:Log/delete
>>>
>>
>> Cheers Paul! This looks like a very handy extension. I've deleted a
>> couple pages already
>
>
> So, *sigh*. I've been trying to use
>
> https://wiki.openstack.org/wiki/Special:Nuke
>
> to delete pages matching
>
> %1%800% (there are about 5000)
>
> and it doesn't work :(
>
> Everything appears to be fine, but the pages don't get deleted or appear
> on the deletion log.

Also, appear to have exhausted the usefulness of smitespam for our 
particular case (though I suspect it will be good for the future). It 
appears to focus on pages with lots of external links, whereas our spam 
was mainly text-based, so even though many spam pages remain they aren't 
listed at smitespam.





More information about the OpenStack-Infra mailing list