On Tue, Apr 29, 2025 at 04:31:30PM -0600, Karl Berry wrote: > > Don't the bots use anonymous https access, not creating an account? > If so, I wonder about adding all sv users to some placeholder group, > precisely so they can get non-anonymous access to other groups.
Probably we can, at least after their first comment on trackers within the 2-week period allowed for idle accounts https://savannah.nongnu.org/maintenance/IdleAccounts/ > I'm > aware that spammers create accounts so they can post comments and such, These days most of them just create accounts and do nothing more. > but probably that set of bad guys doesn't care (know) about ssh access. I think we'll be able to detect and neutralize those who know and care, or to reconsider adding new users to the placeholder group.
signature.asc
Description: PGP signature