On Tue, Nov 20, 2012 at 10:39 AM, Dave Fisher <dave2w...@comcast.net> wrote:
>
> On Nov 20, 2012, at 6:21 AM, Rob Weir wrote:
>
>> On Tue, Nov 20, 2012 at 6:46 AM, tj <t...@apache.org> wrote:
>>> Can I get lazy consensus on requiring users to request Mwiki accounts on a
>>> ML? Temporarily or permanently, I don't know.
>>>
>>
>> How many "real" wiki accounts do we get on a typical (no-spam) day?
>> Are we sure that the admins can handle that volume of manual account
>> requests?
>
> Managing real requests will certainly be less work than fighting spammers.
>
> +1 to proceeding now with registration by request.
>
> I'm actually for it permanently - although we should migrate to a wiki@oo.a.o 
> or admin@oo.a.o ML for these types of requests
>

I wouldn't do it permanently.  We're just avoiding the real issue --
we're not really maintaining our MWiki.  If we don't get some site
maintainer in there, to deal with upgrades, etc., the wiki will fall
over for some other reason at a future point.  When we deal with that
then we'll join the many other MWiki sites that don't require
extraordinary steps to keep spammers at bay.

Maybe we should do a call for MWiki and phpBB admin types at some
point?  Our infrastructure needs are complex enough that this is
project sub-discipline in itself.

-Rob

> Regards,
> Dave
>
>
>>
>>
>>> Any Administrator ("sysop") can create a new user account. I will research
>>> what change is required to block other sign-up methods.
>>>
>>> Currently, Mwiki is under massive attack by spammers. Thanks to the valiant
>>> efforts of volunteers Adailton, Helen russian, Pitonyak, and Yak, we are
>>> staying even: the lifetime of spam may be a few hours, but is usually only a
>>> few minutes.
>>>
>>> However, the spammers are creating new spam accounts (the pattern in the
>>> names is quite apparent) at a rate of one every minute or two, and 24/7. We
>>> cannot survive that kind of onslaught indefinitely.
>>>
>>> To be continued.
>>>
>>> /tj/
>>>
>

Reply via email to