[OpenStack-Infra] Wiki.o.o sustaining spam attack

Tom Fifield tom at openstack.org
Tue Feb 23 06:55:37 UTC 2016


For wiki.o.o, I believe this is at:

https://wiki.openstack.org/wiki/Special:Version

On 23/02/16 14:51, JP Maxwell wrote:
> I did setup a wiki and have a look at this briefly.   Can you confirm
> what extensions you are loading?  When you setup the wiki it generates a
> localsettings.php file that lists the extensions:
>
>
>
> Inline image 1
>
> # Enabled Extensions. Most extensions are enabled by including the base
> extension file here
> # but check specific extension documentation for more details
> # The following extensions were automatically enabled:
> wfLoadExtension( 'ConfirmEdit' );
> wfLoadExtension( 'InputBox' );
> wfLoadExtension( 'SpamBlacklist' );
> wfLoadExtension( 'TitleBlacklist' );
> wfLoadExtension( 'WikiEditor' );
>
> I think if you have that ConfirmEdit extension you can enable captcha
> when creating new pages / editing existing ones.  In addition, there do
> seem to be some spam extensions that come built in.
>
>
> J.P. Maxwell / tipit.net <http://www.tipit.net>
>
>
> On Tue, Feb 23, 2016 at 12:43 AM, Tom Fifield <tom at openstack.org
> <mailto:tom at openstack.org>> wrote:
>
>     Hi all,
>
>     Spam pages now outnumber content pages on our wiki.
>
>     I have stopped trying to keep up with deleting them, after putting
>     in many, many hours.
>
>
>     Is there any chance someone can make the configuration changes I
>     posted a couple weeks back, as an emergency measure?
>
>
>     *  update Apache web server configuration to block all spammer IPs
>     in lists available from www.stopforumspam.com
>     <http://www.stopforumspam.com> . Alternate, use the mediawiki plugin
>     that does the same:
>     https://www.mediawiki.org/wiki/Extension:StopForumSpam
>
>     * Configre the ConfirmEdit extension to set it to display a CAPTCHA
>     when creating a new page:
>
>     $wgCaptchaTriggers['create']        = true;
>
>
>
>     Regards,
>
>
>     Tom
>
>     On 15/02/16 22:05, Tom Fifield wrote:
>
>         Is there anyone who can help with this? There's still a ton of spam
>         going in, and manually cleaning it is a ton of effort.
>
>         On 12/02/16 06:40, Tom Fifield wrote:
>
>             OK, so, MediaWiki nas a nice manual on how to combat spam (
>             https://www.mediawiki.org/wiki/Manual:Combating_spam )
>
>             Would it be possible to get these implemented:
>
>             *  update Apache web server configuration to block all
>             spammer IPs in
>             lists available from www.stopforumspam.com
>             <http://www.stopforumspam.com> . Alternate, use the
>             mediawiki plugin that does the same:
>             https://www.mediawiki.org/wiki/Extension:StopForumSpam
>
>             * Configre the ConfirmEdit extension to set it to display a
>             CAPTCHA when
>             creating a new page:
>
>             $wgCaptchaTriggers['create']        = true;
>
>
>             Regards,
>
>
>             Tom
>
>
>             On 12/02/16 11:08, Tom Fifield wrote:
>
>                 Hi,
>
>                 Since about 11th January, wiki.o.o has been under attack
>                 by spammers.
>
>                 They're creating new pages at a rate of more than 50 a
>                 day, with titles
>                 that hint at calling certain phone numbers for various
>                 services.
>
>                 If you look at
>
>                 https://wiki.openstack.org/w/index.php?title=Special:NewPages
>
>                 you'll see them.
>
>                 It's across more than a dozen user accounts. I'm going
>                 to attempt some
>                 cleaning, but we probably need to look for an extension
>                 to do something
>                 about this pro-actively.
>
>
>
>                 Regards,
>
>
>                 Tom
>
>
>                 _______________________________________________
>                 OpenStack-Infra mailing list
>                 OpenStack-Infra at lists.openstack.org
>                 <mailto:OpenStack-Infra at lists.openstack.org>
>                 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
>
>
>             _______________________________________________
>             OpenStack-Infra mailing list
>             OpenStack-Infra at lists.openstack.org
>             <mailto:OpenStack-Infra at lists.openstack.org>
>             http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
>
>
>         _______________________________________________
>         OpenStack-Infra mailing list
>         OpenStack-Infra at lists.openstack.org
>         <mailto:OpenStack-Infra at lists.openstack.org>
>         http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
>
>
>
>     _______________________________________________
>     OpenStack-Infra mailing list
>     OpenStack-Infra at lists.openstack.org
>     <mailto:OpenStack-Infra at lists.openstack.org>
>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
>
>




More information about the OpenStack-Infra mailing list