Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread Marton Kiss
Ok, I'll be there. M. On Sat, Feb 27, 2016 at 5:15 PM Elizabeth K. Joseph wrote: > We'll be getting together on Monday around 1700 UTC to work through this > together in a debug session in #openstack-infra (I'm too sick this weekend, > plus we need a time when more infra-root folks with the ins

[OpenStack-Infra] Meeting Minutes: (TripleO) HPE HW Relocation, Feb 25th 2016

2016-02-27 Thread Cody A.W. Somerville
HPE provides a number of baremetal nodes in two of their public cloud data centers, referred to as "US East" and "US West", for use by the OpenStack CI project. These machines were originally used for TripleO CI and are now being used to support the infracloud project. As part of the sunset of HPE

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread JP Maxwell
Elizabeth I hope you feel better. Just FYI, this is going full force in IRC right now. I’ve bowed out as the approach I was suggesting didn’t get traction. I proposed to manually iterate on this to confirm precisely which change solves the spam problem. Once that has been identified we can revert a

[OpenStack-Infra] nova-docs, nova-branch-tarball post jobs are broken due to constraints

2016-02-27 Thread Andreas Jaeger
Some post-jobs like nova-docs and nova-branch-tarball (similar for every other project that switched to using constraints unconditionally) are broken now. The problem is that we run these using "tox -evenv" - and the standard virtual environment for nova uses constraints. But since this is a post

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread Elizabeth K. Joseph
We'll be getting together on Monday around 1700 UTC to work through this together in a debug session in #openstack-infra (I'm too sick this weekend, plus we need a time when more infra-root folks with the institutional knowledge are around). On Feb 27, 2016 05:37, "Marton Kiss" wrote: > Yeah, the

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread Paul Belanger
On phone but patch puppet-mediawiki and enable captcha for all pages. We only did edit and create On Feb 26, 2016 10:38 AM, Marton Kiss wrote: I see a ton of incoming post requests: POST /w/index.php?title=Special%3ARunJobs&tasks=jobs&maxjobs=1&sigexpiry=1456508270&signature=571cfb216f944b15d2e

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread Marton Kiss
Yeah, the Settings.php was overriden by the latest puppet run. We need to wait for some infra guys to approve my patches and make it permanent: https://review.openstack.org/285669 Disable standard password based auth https://review.openstack.org/285672 Disable mobile frontend M. On Sat, Feb 27, 2

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread JP Maxwell
FYI. Still seeing the mobile view... J.P. Maxwell | tipit.net | fibercove.com On Feb 27, 2016 6:53 AM, "Marton Kiss" wrote: > Yes, applied them manually. Let's wait a few hours, and check for new spam > content / user accounts. > > M. > JP Maxwell (időpont: 2016. febr. 27., Szo, 13:50) ezt írta

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread Marton Kiss
Yes, applied them manually. Let's wait a few hours, and check for new spam content / user accounts. M. JP Maxwell (időpont: 2016. febr. 27., Szo, 13:50) ezt írta: > Cool. Are these applied? Any indication it has stopped the spam? Should we > clear out these non launchpad accounts from the DB? >

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread JP Maxwell
Cool. Are these applied? Any indication it has stopped the spam? Should we clear out these non launchpad accounts from the DB? J.P. Maxwell | tipit.net | fibercove.com On Feb 27, 2016 6:47 AM, "Marton Kiss" wrote: > And the mobile frontend will be disabled permanently with this patch: > https://

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread Marton Kiss
And the mobile frontend will be disabled permanently with this patch: https://review.openstack.org/285672 Disable mobile frontend M. On Sat, Feb 27, 2016 at 1:39 PM Marton Kiss wrote: > I made some investigation, and it seems to be that the spam pages are > created by accounts registered with p

Re: [OpenStack-Infra] Wiki.o.o sustaining spam attack

2016-02-27 Thread Marton Kiss
I made some investigation, and it seems to be that the spam pages are created by accounts registered with password accounts, and the launchpad openid auth is not affected at all. So the spam script is creating accounts like this: mysql> select * from user where user_name = 'CedricJamieson'\G;