On 9/19/19 1:14 AM, Carlos E. R. wrote:
Hi,
I just learned that the recommended procedure for prospective new members is to write a profile on https://connect.opensuse.org/
It is described here: https://en.opensuse.org/openSUSE:Members#Detailed_steps_to_follow
You know that I am one of the two volunteers that watch for spam on the connect platform. I have been told that the platform is insecure, and in fact people remove their profile. I don't know if this claims are true or not, but I ask here for your consideration.
For example, the other day a new user appeared, "rose25". Within a day, she made "friends" with possibly everybody on the platform, surely using a script, there is no other way to do thousands of friends. A few corresponded.
Subsequently I banned her.
Quickly another user appeared, "rose2525", but so far no activity I can can undoubtedly classify as "spam". However, some real users have made friends with her (like Malcolm Lewis, or Stefan Seyfried, but not listed later as such). I am suspicious and undecided.
The point: I highly suspect that this "rose25" got the emails and personal data on the profiles of everybody.
Thus I ask if would it not be better to modify the procedure for prospective new members to provide their "resume" in some other secure manner.
I am a bit worried. I do not want to be blamed for breach of privacy (EU regulations etc) as I am 50% the active admin of that platform, which I barely understand. I do not take responsibility in such an event.
Hi, Carlos: As I recall, I had tried to get something going to get a replacement for Connect that would make a better, more secure Membership list for the purposes of votes and other openSUSE activities. A couple of people started something, but nothing ever got anywhere. Without enough motivated help, and after an excruciating experience with the Elections and the Elections Committee (others were Ish and Edwin, who pulled their weight admirably) unable to get decent assistance with the last Board Elections, I was not about to go ahead with it on my own. I decided to instead devote my time to my Recordings and subsequently dropped out of that failed attempt to replace Connect. This is not aimed at you, I want to be clear, as you and another stepped up and have done a nice job at reducing the spam and similar activity, and I admire your resolve to help with that. But, this would all be a moot point, now, if I had received the full assistance with the move away from Connect months ago. Thanks for bringing this up, Carlos, as it *DOES* need to be addressed. -- -Gerry Makaro openSUSE Member openSUSE Contributor YaST Contributor aka Fraser_Bell on the Forums, OBS, IRC, and mail at openSUSE.org Fraser-Bell on Github -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org