[SAC] Wiki is being spammed

Committees SAC mailing list
1

FOlks,
the Wiki is bein spammend badly. Who can turn it off for now until it
can be fixed?

Thankx,
Arnulf

2

I disabled account creation again for now.

This anti-social spammers are really ill! Sorry, I don't (even want to) know how to handle this...

Regards,
Christian

On 16.01.2016 13:37, Seven (aka Arnulf) wrote:

FOlks,
the Wiki is bein spammend badly. Who can turn it off for now until it
can be fixed?

Thankx,
Arnulf
_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

3

On Jan 16, 2016 1:50 PM, “Christian Willmes” <mail@cwillmes.de> wrote:

I disabled account creation again for now.

In grasswiki.osgeo.org we have account moderation on. Almost no spammers subscribe, so the overhead is close to zero.

Maybe try that also here?

Markus

4

Yes, sounds good to me!

Is it this [1] extension?

Christian

[1] https://www.mediawiki.org/wiki/Extension:Moderation

On 16.01.2016 14:13, Markus Neteler wrote:

On Jan 16, 2016 1:50 PM, "Christian Willmes" <mail@cwillmes.de <mailto:mail@cwillmes.de>> wrote:
>
> I disabled account creation again for now.

In grasswiki.osgeo.org <http://grasswiki.osgeo.org> we have account moderation on. Almost no spammers subscribe, so the overhead is close to zero.

Maybe try that also here?

Markus

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

5

Hi Guys,

I run the OpenStreetMap wiki. We recently combated a similar spam problem.

Few tips:
* Enabled $wgEnableDnsBlacklist:
https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/LocalSettings.php.erb#L207
* $wgDnsBlacklistUrls:
https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/LocalSettings.php.erb#L208
* $wgEmailConfirmToEdit = true;
* Increase $wgAutoblockExpiry
* $wgSpamRegex
* Install AbuseFilter extension:
https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/mw-ext-AbuseFilter.inc.php.erb
* Chat to me on IRC and I'll share the private AbuseFilter rules.
(Firefishy in #osgeo on freenode + #osm-dev on oftc)
* Use Extension:Nuke to clean up existing spam.

Kind regards,

Grant

On 16 January 2016 at 13:17, Christian Willmes <mail@cwillmes.de> wrote:

Yes, sounds good to me!

Is it this [1] extension?

Christian

[1] https://www.mediawiki.org/wiki/Extension:Moderation

On 16.01.2016 14:13, Markus Neteler wrote:

On Jan 16, 2016 1:50 PM, "Christian Willmes" <mail@cwillmes.de
<mailto:mail@cwillmes.de>> wrote:
>
> I disabled account creation again for now.

In grasswiki.osgeo.org <http://grasswiki.osgeo.org> we have account
moderation on. Almost no spammers subscribe, so the overhead is close to
zero.

Maybe try that also here?

Markus

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

6

Hi All -

I visited the Wikimedia Foundation HQ in downtown San Francisco just now (15th Anniversary of Wikipedia)

One of the WMF principals would like to see our problems resolved…

https://github.com/slaporte?tab=repositories

Direct technical contact, MediaWiki dev:

Kunal Mehta mwuser:legoktm

legoktm -at- wikimedia.org

Please update this list on progress…

best regards from Berkeley, California

  • -Brian M Hamlin

On Sat, 16 Jan 2016 13:53:43 +0000, Grant Slater osgeo@firefishy.com wrote:

Hi Guys,

I run the OpenStreetMap wiki. We recently combated a similar spam problem.

Few tips:

Kind regards,

Grant

On 16 January 2016 at 13:17, Christian Willmes mail@cwillmes.de wrote:

Yes, sounds good to me!

Is it this [1] extension?

Christian

[1] https://www.mediawiki.org/wiki/Extension:Moderation

On 16.01.2016 14:13, Markus Neteler wrote:

On Jan 16, 2016 1:50 PM, “Christian Willmes” <mail@cwillmes.de
mailto:mail@cwillmes.de> wrote:

I disabled account creation again for now.

In grasswiki.osgeo.org http://grasswiki.osgeo.org we have account
moderation on. Almost no spammers subscribe, so the overhead is close to
zero.

Maybe try that also here?

Markus

Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

–
Brian M Hamlin
OSGeo California Chapter
blog.light42.com

7

Hi Grant, SAC,

On Sat, Jan 16, 2016 at 2:53 PM, Grant Slater <osgeo@firefishy.com> wrote:

Hi Guys,

I run the OpenStreetMap wiki. We recently combated a similar spam problem.

Few tips:
* Enabled $wgEnableDnsBlacklist:
https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/LocalSettings.php.erb#L207

Yes, that was already active.

* $wgDnsBlacklistUrls:
https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/LocalSettings.php.erb#L208

... I have updated our list to yours now.

* $wgEmailConfirmToEdit = true;

... was there.

* Increase $wgAutoblockExpiry

... added.

* $wgSpamRegex

https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/LocalSettings.php.erb#L216
... our wgSpamRegex (in our LocalSettings.php in line 201) is quite different.
@SAC: I guess we adopt those of the OpenStreetMap wiki?

* Install AbuseFilter extension:
https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/mw-ext-AbuseFilter.inc.php.erb
* Chat to me on IRC and I'll share the private AbuseFilter rules.
(Firefishy in #osgeo on freenode + #osm-dev on oftc)

.... AbuseFilter to be done (anyone in SAC to tackle this?)

* Use Extension:Nuke to clean up existing spam.

I tried Extension:BlockAndNuke to no avail. It does not seems to read
the whitelist.
Extension:Nuke I don't remember if I tried.

Thanks for your hints, Grant. Much appreciated.

Markus

8

Hi,

I have spent 1-2 hs now to delete spam accounts and some 5000? pages.

We must do something about it. I still believe that the Wiki should be
connected to LDAP. Really.

Markus

9

On Mon, Jan 18, 2016 at 11:13 PM, Markus Neteler <neteler@osgeo.org> wrote:

Hi,

I have spent 1-2 hs now to delete spam accounts and some 5000? pages.

If anyone wants to continue, do this:

https://wiki.osgeo.org/wiki/Special:NewPages

--> click on contrib of the respective spam account
      --> "mass delete" (more or less top right)
      --> block account in parallel, infinite time

cheers
Markus

10

On 01/18/2016 02:13 PM, Markus Neteler wrote:

Hi,

I have spent 1-2 hs now to delete spam accounts and some 5000? pages.

We must do something about it. I still believe that the Wiki should be
connected to LDAP. Really.

This issue is technical. We need a solid plan on how to implement the
switch to LDAP. Ideally current users could login with their wiki
accounts and link their LDAP account. With there being overlap of some
time where either local or LDAP login works. Once that is working we can
disable the non-LDAP user creation method.

Anyone know how to set up something like this?

Thanks,
Alex

11

Brian,

Thanks for making initial contact. How do you suggest we proceed? Should
we convene a small wiki working group (Christian, Martin & ?) and have
them discuss via email with Kunal how to implement a solution?

Thanks,
Alex

On 01/16/2016 06:15 PM, Brian M Hamlin wrote:

Hi All -

   I visited the Wikimedia Foundation HQ in downtown San Francisco just now
(15th Anniversary of Wikipedia)

One of the WMF principals would like to see our problems resolved..

     https://github.com/slaporte?tab=repositories

Direct technical contact, MediaWiki dev:

   Kunal Mehta mwuser:legoktm

   legoktm -at- wikimedia.org

   Please update this list on progress..

   best regards from Berkeley, California

   - -Brian M Hamlin

On Sat, 16 Jan 2016 13:53:43 +0000, Grant Slater <osgeo@firefishy.com> wrote:

    Hi Guys,

    I run the OpenStreetMap wiki. We recently combated a similar spam problem.

    Few tips:
    * Enabled $wgEnableDnsBlacklist:
    https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/LocalSettings.php.erb#L207
    * $wgDnsBlacklistUrls:
    https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/LocalSettings.php.erb#L208
    * $wgEmailConfirmToEdit = true;
    * Increase $wgAutoblockExpiry
    * $wgSpamRegex
    * Install AbuseFilter extension:
    https://github.com/openstreetmap/chef/blob/master/cookbooks/mediawiki/templates/default/mw-ext-AbuseFilter.inc.php.erb
    * Chat to me on IRC and I'll share the private AbuseFilter rules.
    (Firefishy in #osgeo on freenode + #osm-dev on oftc)
    * Use Extension:Nuke to clean up existing spam.

    Kind regards,

    Grant

    On 16 January 2016 at 13:17, Christian Willmes <mail@cwillmes.de> wrote:
     > Yes, sounds good to me!
     >
     > Is it this [1] extension?
     >
     > Christian
     >
     > [1] https://www.mediawiki.org/wiki/Extension:Moderation
     >
     > On 16.01.2016 14:13, Markus Neteler wrote:
     >>
     >>
     >>
     >> On Jan 16, 2016 1:50 PM, "Christian Willmes" <mail@cwillmes.de
     >> <mailto:mail@cwillmes.de>> wrote:
     >> >
     >> > I disabled account creation again for now.
     >>
     >> In grasswiki.osgeo.org <http://grasswiki.osgeo.org> we have account
     >> moderation on. Almost no spammers subscribe, so the overhead is close to
     >> zero.
     >>
     >> Maybe try that also here?
     >>
     >> Markus
     >>
     >>
     >>
     >> _______________________________________________
     >> Sac mailing list
     >> Sac@lists.osgeo.org
     >> http://lists.osgeo.org/mailman/listinfo/sac
     >
     >
     > _______________________________________________
     > Sac mailing list
     > Sac@lists.osgeo.org
     > http://lists.osgeo.org/mailman/listinfo/sac
    _______________________________________________
    Sac mailing list
    Sac@lists.osgeo.org
    http://lists.osgeo.org/mailman/listinfo/sac

--
Brian M Hamlin
OSGeo California Chapter
blog.light42.com

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

12

Hi,

from my understanding, Martin already tried to connect the updated wiki to LDAP.?
I do not know anything about LDAP, so I did not had a look into this problem, because if Martin can't do it... it must be tough.

Recently, someone here brought MediaWiki consultancy up.
Maybe we can look for someone to pay for setting LDAP up properly?

Christian

On 19.01.2016 21:31, Alex M wrote:

On 01/18/2016 02:13 PM, Markus Neteler wrote:

Hi,

I have spent 1-2 hs now to delete spam accounts and some 5000? pages.

We must do something about it. I still believe that the Wiki should be
connected to LDAP. Really.

This issue is technical. We need a solid plan on how to implement the
switch to LDAP. Ideally current users could login with their wiki
accounts and link their LDAP account. With there being overlap of some
time where either local or LDAP login works. Once that is working we can
disable the non-LDAP user creation method.

Anyone know how to set up something like this?

Thanks,
Alex

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac