Debian Developers - Re: Lots of (easily recognisible) spam sent to the BTS today

This is Interesting: Free IT Magazines  
Home > Archive > Debian Developers > October 2006 > Re: Lots of (easily recognisible) spam sent to the BTS today





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Re: Lots of (easily recognisible) spam sent to the BTS today
Bruce Sass

2006-10-31, 1:31 am

On Mon October 30 2006 16:46, Javier Fern=E1ndez-Sanguino Pe=F1a wrote:
<...>
> However, confirming each spam I have
> in my mailbox vs. the web interface is time consuming and slightly
> frustating when you find that the spam had no opportunity to get in
> (the bug was archived) or it was already removed (bad).


How time consuming it is depends on the UI. I checked out and reported=20
70+ spam messages sent to packages (via nnn@bugs.debian.org) handled by=20
team@dpkg.org a couple days ago (two batches) fairly quickly by using=20
KDE's "run command" applet (averaging 8 keystrokes, 2 mouse movements,=20
and two clicks, per message.)

> PS: If abuse of that (e-mail) interface was of concern it could be
> implemented so as to only consider GPG/PGP signed mail from DDs (I
> don't see that the web interface takes any precaution against being
> abused, from what I can tell, but a e-mail gateway is slightly more
> easier to abuse)


I have also been doing some bug cleaning in dselect recently (30+ bugs=20
closed or recalssified, only one which I ended up reopening), something=20
which would not be possible without pestering DD's if signed messages=20
were required.

I have yet to see a spam message sent to the BTS which used a "Package:"=20
pseudoheader, so that should work to eliminate BTS spam without=20
preventing non-DD's helping out.


=2D Bruce
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com