Re: [List admins] Suspicious subscriptions from aol.com

2018-05-10 Thread Huji Lee
On the list for which I am a moderator, the trend is now shifting towards @ yahoo.com accounts (but there is still a fair share of @aol.com ones stoo) On Wed, May 9, 2018 at 6:42 AM, gulu wrote: > Hello. > > Sorry, cannot see the content from underways, but, my message was about > we‘re not havi

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-09 Thread gulu
Hello. Sorry, cannot see the content from underways, but, my message was about we‘re not having any solution yet, since that time. We‘re currently burning listmod time, which is perhaps the most limited good in our universe. Anybody should do something. I‘m happy to assist if you let me know

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-09 Thread Andre Klapper
On Wed, 2018-05-09 at 09:55 +0200, Patrick Rother wrote: > Hello. > > Am 07.05.18 um 19:58 schrieb Sergey Leschina: > > Guys, please stop writing that you have the same problem in the > > your > > mailing list. > > I have already counted 17 such letters. Stop, please! > > > > I've got nearly 10

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-09 Thread Patrick Rother
Hello. Am 07.05.18 um 19:58 schrieb Sergey Leschina: Guys, please stop writing that you have the same problem in the your mailing list. I have already counted 17 such letters. Stop, please! I've got nearly 100 subscription requests last night on the more than a dozen OTRS lists. Could anybody

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-08 Thread MA
Hello, I have added the same regex and while I test, I get the 'this address is banned etc.' message, but fact is that I too am receiving lots of requests from aol.com addresses as well. 14 in the last hours on two ML I administer. Regards, M. 2018-05-08 22:46 GMT+02:00 Dario Taraborelli : > Qu

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-08 Thread Dario Taraborelli
Quick heads up that the proposed solution to add the following: Privacy options -> in ban_list window add ^.*aol\.com doesn't seem to block subscription *requests*, which I am getting tons of on two private lists I run. On Tue, May 8, 2018 at 3:10 AM Andre Klapper wrote: > On Mon, 2018-05-07

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-08 Thread Andre Klapper
On Mon, 2018-05-07 at 12:57 -0400, Yishen Miao wrote: > Additionally, we should let security team know about this in case it > is related to the brute force attack on English Wikipedia. > Thanks! Security team has been made aware already yesterday. and

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Sergey Leschina
Guys, please stop writing that you have the same problem in the your mailing list. I have already counted 17 such letters. Stop, please! 2018-05-07 20:39 GMT+03:00 Andy Cruz y Corro : > Same thing happening on Volunteer Supporters > > > On Mon, May 7, 2018, 11:57 AM Yishen Miao wrote: > >> Addit

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Andy Cruz y Corro
Same thing happening on Volunteer Supporters On Mon, May 7, 2018, 11:57 AM Yishen Miao wrote: > Additionally, we should let security team know about this in case it is > related to the brute force attack on English Wikipedia. < > https://phabricator.wikimedia.org/T193769> > > Best, > Mys_721tx >

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Yishen Miao
Additionally, we should let security team know about this in case it is related to the brute force attack on English Wikipedia. Best, Mys_721tx > On May 7, 2018, at 12:55, Yishen Miao wrote: > > Same for unblock-zh and otrs-zh. > > Best, > Mys_721t

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Yishen Miao
Same for unblock-zh and otrs-zh. Best, Mys_721tx > On May 7, 2018, at 12:54, Pharos wrote: > > I have seen the same suspicious pattern for lists I help administer. > > Thanks, > Pharos > > On Mon, May 7, 2018 at 12:51 PM, Ashwin Baindur > wrote: > Same for Wikimedia-In-En. > > On Mon, May

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Pharos
I have seen the same suspicious pattern for lists I help administer. Thanks, Pharos On Mon, May 7, 2018 at 12:51 PM, Ashwin Baindur wrote: > Same for Wikimedia-In-En. > > On Mon, May 7, 2018 at 5:45 PM, Luca Martinelli > wrote: > >> I think is fair to say that all MLs are under attack, so let'

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Ashwin Baindur
Same for Wikimedia-In-En. On Mon, May 7, 2018 at 5:45 PM, Luca Martinelli wrote: > I think is fair to say that all MLs are under attack, so let's discuss the > countermeasures. Do we want to temporarily global ban all AOL accounts, at > least those who try to subscribe? Is it possible? > > L. >

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Luca Martinelli
I think is fair to say that all MLs are under attack, so let's discuss the countermeasures. Do we want to temporarily global ban all AOL accounts, at least those who try to subscribe? Is it possible? L. Il lun 7 mag 2018, 12:31 Axel Pettersson ha scritto: > Hi, > +1 for wiki loves public art. H

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Sudhanwa Jogalekar
Same with the list Wikimedia-IN-PUN. However, because the subscription needs approval, all these are pending. Either have to clean up the queue or it will clean up automatically later on. Instead of blocking domain, setting up for approval is easier solution. Regards Sudhanwa On Mon, May 7, 2018

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Andre Klapper
On Mon, 2018-05-07 at 13:43 +0200, Andre Klapper wrote: > On Mon, 2018-05-07 at 10:31 +, Axel Pettersson wrote: > > +1 for wiki loves public art. Hoping for a global solution. > > If wanted (I don't know if it is technically feasible though), please > feel free to create a task in Phabricator

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Yongmin H.
You’ll probably need to file a task in https://phabricator.wikimedia.org/ with tag Wikimedia-mailing-lists. (I dunno if this should be security stuff) -- Yongmin Sent from my iPhone https://reviwiki.info/ Text licensed under CC BY ND 2.0 KR Please note that this address is list-only address and a

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Andre Klapper
Hi, I don't think more confirmations / "me too" are needed. :) On Mon, 2018-05-07 at 10:31 +, Axel Pettersson wrote: > +1 for wiki loves public art. Hoping for a global solution. If wanted (I don't know if it is technically feasible though), please feel free to create a task in Phabricator

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Dhaval S. Vyas
Can there be a global rule applied? On Mon, 7 May 2018, 13:14 masti, wrote: > Privacy options -> in ban_list window add ^.*aol\.com > > masti > > On 07.05.2018 12:27, Gitartha Bordoloi wrote: > > Same issue in wikipedia-as. Can anyone please tell me how to block > subscriptions from @aol.com? >

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Dennis Tobar
I see the same issue in @wikimedia-cl. I'll apply the recommend privacy setting. Kindly. On Mon, May 7, 2018 at 8:14 AM masti wrote: > Privacy options -> in ban_list window add ^.*aol\.com > > masti > > On 07.05.2018 12:27, Gitartha Bordoloi wrote: > > Same issue in wikipedia-as. Can anyone pl

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread masti
Privacy options -> in ban_list window add ^.*aol\.com masti On 07.05.2018 12:27, Gitartha Bordoloi wrote: Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 20

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Axel Pettersson
Hi, +1 for wiki loves public art. Hoping for a global solution. Bästa hälsningar, /Axel Den mån 7 maj 2018 12:28Gitartha Bordoloi skrev: > Same issue in wikipedia-as. Can anyone please tell me how to block > subscriptions from @aol.com? > > On Mon 7 May, 2018, 3:51 PM masti, wrote: > >> same t

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Gitartha Bordoloi
Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 2018, 3:51 PM masti, wrote: > same thing on wikinews-pl > > masti > > On 07.05.2018 12:07, KuboF Hromoslav wrote: > > Hi there. > > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy",

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Samuel Guebo
Hello, Facing the same issue in wikimedia-ci On Mon, May 7, 2018 at 10:21 AM, masti wrote: > same thing on wikinews-pl > > masti > > > On 07.05.2018 12:07, KuboF Hromoslav wrote: > > Hi there. > > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, > we have received suspic

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread masti
same thing on wikinews-pl masti On 07.05.2018 12:07, KuboF Hromoslav wrote: Hi there. On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, we have received suspicious mass s

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Tomasz Sienicki
F: KuboF Hromoslav > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, we > have received suspicious mass subscriptions (several tens in several hours). > They came from nowhere, all with @aol.com address (very > unusual for our target group) and all decl

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Gergo Tisza
On Mon, May 7, 2018 at 12:08 PM KuboF Hromoslav wrote: > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, > we have received suspicious mass subscriptions (several tens in several > hours). They came from nowhere, all with @aol.com address (very unusual > for our target gr

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Dhaval S. Vyas
Thank you KuboF for posting it. We have noticed the same on wikipedia-gu l8st as well. I was thinking to where to start this communication. Regards, Dhaval Vyas On Mon, 7 May 2018, 12:08 KuboF Hromoslav, wrote: > Hi there. > > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am ad

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Анатолій Гончаров
Wikimediaua has similar problem - 35 subscription requests from AOL 2018-05-07 13:09 GMT+03:00 Ragib Hasan : > Just noticed the same on the Wikimedia-bd list. > > -- > Ragib > > > > On Mon, May 7, 2018 at 5:08 AM KuboF Hromoslav > wrote: > >> Hi there. >> >> On the lists "wikimedia-sk" and "wiki

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Željko Filipin
I am admin of a couple of mailing lists, I have noticed the same suspicious activity from aol addresses. Only subscriptions for now. Željko On Mon, May 7, 2018 at 12:07 PM, KuboF Hromoslav wrote: > Hi there. > > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, > we have

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread MA
Hi there, I was about to complain about this because the mailing lists I administer (metawiki-admins and meta-oversight) are also suffering from this flood. I've set ^aol\.com as banned (not sure if that's right?) to stop them as I've got few dozens of requests like that already. Thanks for your

Re: [List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread Ragib Hasan
Just noticed the same on the Wikimedia-bd list. -- Ragib On Mon, May 7, 2018 at 5:08 AM KuboF Hromoslav wrote: > Hi there. > > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, > we have received suspicious mass subscriptions (several tens in several > hours). They came

[List admins] Suspicious subscriptions from aol.com

2018-05-07 Thread KuboF Hromoslav
Hi there. On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, we have received suspicious mass subscriptions (several tens in several hours). They came from nowhere, all with @aol.com address (very unusual for our target group) and all declared only first name. Most certainly