[OpenStack-Infra] Wiki.o.o sustaining spam attack

JP Maxwell jp at tipit.net
Tue Feb 23 06:51:05 UTC 2016


I did setup a wiki and have a look at this briefly.   Can you confirm what
extensions you are loading?  When you setup the wiki it generates a
localsettings.php file that lists the extensions:



[image: Inline image 1]

# Enabled Extensions. Most extensions are enabled by including the base
extension file here
# but check specific extension documentation for more details
# The following extensions were automatically enabled:
wfLoadExtension( 'ConfirmEdit' );
wfLoadExtension( 'InputBox' );
wfLoadExtension( 'SpamBlacklist' );
wfLoadExtension( 'TitleBlacklist' );
wfLoadExtension( 'WikiEditor' );

I think if you have that ConfirmEdit extension you can enable captcha when
creating new pages / editing existing ones.  In addition, there do seem to
be some spam extensions that come built in.


J.P. Maxwell / tipit.net <http://www.tipit.net>


On Tue, Feb 23, 2016 at 12:43 AM, Tom Fifield <tom at openstack.org> wrote:

> Hi all,
>
> Spam pages now outnumber content pages on our wiki.
>
> I have stopped trying to keep up with deleting them, after putting in
> many, many hours.
>
>
> Is there any chance someone can make the configuration changes I posted a
> couple weeks back, as an emergency measure?
>
>
> *  update Apache web server configuration to block all spammer IPs in
> lists available from www.stopforumspam.com . Alternate, use the mediawiki
> plugin that does the same:
> https://www.mediawiki.org/wiki/Extension:StopForumSpam
>
> * Configre the ConfirmEdit extension to set it to display a CAPTCHA when
> creating a new page:
>
> $wgCaptchaTriggers['create']        = true;
>
>
>
> Regards,
>
>
> Tom
>
> On 15/02/16 22:05, Tom Fifield wrote:
>
>> Is there anyone who can help with this? There's still a ton of spam
>> going in, and manually cleaning it is a ton of effort.
>>
>> On 12/02/16 06:40, Tom Fifield wrote:
>>
>>> OK, so, MediaWiki nas a nice manual on how to combat spam (
>>> https://www.mediawiki.org/wiki/Manual:Combating_spam )
>>>
>>> Would it be possible to get these implemented:
>>>
>>> *  update Apache web server configuration to block all spammer IPs in
>>> lists available from www.stopforumspam.com . Alternate, use the
>>> mediawiki plugin that does the same:
>>> https://www.mediawiki.org/wiki/Extension:StopForumSpam
>>>
>>> * Configre the ConfirmEdit extension to set it to display a CAPTCHA when
>>> creating a new page:
>>>
>>> $wgCaptchaTriggers['create']        = true;
>>>
>>>
>>> Regards,
>>>
>>>
>>> Tom
>>>
>>>
>>> On 12/02/16 11:08, Tom Fifield wrote:
>>>
>>>> Hi,
>>>>
>>>> Since about 11th January, wiki.o.o has been under attack by spammers.
>>>>
>>>> They're creating new pages at a rate of more than 50 a day, with titles
>>>> that hint at calling certain phone numbers for various services.
>>>>
>>>> If you look at
>>>>
>>>> https://wiki.openstack.org/w/index.php?title=Special:NewPages
>>>>
>>>> you'll see them.
>>>>
>>>> It's across more than a dozen user accounts. I'm going to attempt some
>>>> cleaning, but we probably need to look for an extension to do something
>>>> about this pro-actively.
>>>>
>>>>
>>>>
>>>> Regards,
>>>>
>>>>
>>>> Tom
>>>>
>>>>
>>>> _______________________________________________
>>>> OpenStack-Infra mailing list
>>>> OpenStack-Infra at lists.openstack.org
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
>>>>
>>>>
>>> _______________________________________________
>>> OpenStack-Infra mailing list
>>> OpenStack-Infra at lists.openstack.org
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
>>>
>>
>> _______________________________________________
>> OpenStack-Infra mailing list
>> OpenStack-Infra at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
>>
>
>
> _______________________________________________
> OpenStack-Infra mailing list
> OpenStack-Infra at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-infra/attachments/20160223/26207375/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 49970 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-infra/attachments/20160223/26207375/attachment-0001.png>


More information about the OpenStack-Infra mailing list