On 24/02/2019 01:15, Stefan Seyfried wrote:
Hi all
(starting a new subthread, I'm not interested in the flame wars)
Am 20.02.19 um 10:48 schrieb Alex Christoph Bihlmaier:
Hello dear fellow opensuse-enthusiasts!
I am wondering about openSUSE connect - there is a huge amount of spam on it and it really is not a shiny & bright representation of the openSUSE project.
I looked at it.
AFAICT, what the spammers do is: * get an openSUSE (microfocus.com) account * use this account to log into connect and then start throwing crap into the fan to distribute it.
How can we solve it? 1) disable these accounts 2) block specific accounts on connect.o.o, even though they are still enabled 3) (not an option yet, see the flame wars) shut down connect.o.o
1) might be hard for the community, as the accounts are maintained by microfocus. Additionally, even an account that "we" (community) identify as a spammer, might still be a paying SUSE / Novell / Microfocus customer, and disabling the account might have unwanted consequences.
Sometime in the not to distant future, if it hasn't happened already this will no longer be an issue as with the Microfocus - SUSE Split all the accounts should be duplicated / separated where needed, the only potential downside here is the people who can probably bulk disable a bunch of accounts or come up with a way to do something similar are also exceptionally busy working on splitting everything that needs to be split.
2) I have no idea if this is technically possible. Anyone with knowledge of the underlying system around that can tell us if this is possible?
If 2) is possible, I would volunteer to go through connect.o.o and disable/block/whatever all accounts that are obvious spam.
3) given people are starting to step up and actively work on 3, its quite possible that we will reach a point where connect can be killed, maybe even before we have better access / time to deal with spam accounts. There is potentially not much point in cleaning up connect if it looks likely that we will be able to kill it in the next month or two, as its hardly something that new users are going to find we haven't advertised where it is well for a long time and existing users only ever go there to apply for membership which can now be done via email anyway. Which brings me to a thought bubble of I wonder if we just kill the front end or make it only accessible internally to the hero's or even just remove the dns entries for connect so its only findable for the people who still really need to use it. -- Simon Lees (Simotek) http://simotek.net Emergency Update Team keybase.io/simotek SUSE Linux Adelaide Australia, UTC+10:30 GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org