[OpenStack-Infra] Wiki.o.o sustaining spam attack

James E. Blair corvus at inaugust.com
Fri Feb 12 17:16:53 UTC 2016


Jeremy Stanley <fungi at yuggoth.org> writes:

> On 2016-02-12 09:03:16 -0600 (-0600), JP Maxwell wrote:
>> I don't think it currently used open ID as far as I can see from the login
>> screen.  Could be mistaken though :)
>> 
>> https://drive.google.com/file/d/0B47GGpF8-_XHb2JFeUVHTG4tTU0/view?usp=docslist_api
>
> Wow! That's interesting. I wonder if there's an auth hole in the
> mobile browser support in Mediawiki? If you try to log in with a
> normal browser it sends you to login.launchpad.net to do OpenID
> authentication.

There is a mobile/desktop toggle on the bottom of the page.  Clicking
mobile and then clicking login takes me to:

https://wiki.openstack.org/w/index.php?title=Special:UserLogin&returnto=Main+Page&returntoquery=mobileaction%3Dtoggle_view_mobile%26welcome%3Dyes

-Jim



More information about the OpenStack-Infra mailing list