Recent spam attacks

[Ben Cooksley]

On Mon, Jun 26, 2023 at 5:25 AM Johnny Jazeix <jazeix at gmail.com> wrote:

> Hi,
> is there a way to help with this spam except reporting it to the sysadmin
> channel?
> https://invent.kde.org/kpj
> https://bugs.kde.org/show_bug.cgi?id=380007 and
> https://bugs.kde.org/show_bug.cgi?id=402838
> https://community.kde.org/Special:Contributions/Kpj
>

There are a number of community members who are empowered when it comes to
bugs.kde.org and our wikis, so mentioning it in #kde-devel and
#kde-sysadmin is the best way to get it dealt with when a Sysadmin is not
around.
For invent.kde.org, that is something only a Sysadmin can handle i'm afraid
as Gitlab does not have roles for anti-abuse functionality (it's full admin
or nothing).

I have now restored community.kde.org and techbase.kde.org from backups to
reverse the vandalism to those sites, and all comments they made on
bugs.kde.org have been blanked.
With respect to invent.kde.org, their account(s) are now banned, and all
content they created has been deleted.

I have also blocked all three of their accounts on the Identity end, which
will hopefully put an end to the majority of their abuse. Unfortunately as
Bugzilla does not participate in the Identity system, it is not protected
by the same mechanisms that I listed below.
(Their third Identity account was registered with a Yandex address)


>
>
> Thank you for your work.
>
> Cheers,
>
> Johnny
>

Thanks,
Ben


>
> Le dim. 25 juin 2023 à 13:05, Ben Cooksley <bcooksley at kde.org> a écrit :
>
>> Hi all,
>>
>> As some of you may have noticed, over the last couple of days we have
>> been experiencing some spam, with Phabricator heavily affected in addition
>> to Gitlab and our Wikis.
>>
>> The spam wave should now have been all cleaned up, with offending content
>> purged. My apologies to those that received the offensive material in
>> question.
>>
>> In response to this, I have now applied the same blocking measures that
>> were designed to defeat  our movie spammers against this recent attacker.
>> This means that Japan has now joined the list of countries considered
>> "abusive" and is now subject to aggressive counter measures designed to
>> defeat spam registrations.
>>
>> As such, people located within Japan may, depending on their specific
>> situation, have issues registering on KDE Identity. People affected by
>> those blocks should email sysadmin at kde.org for assistance with getting
>> manually registered.
>>
>> Please let me know if there are queries regarding this.
>>
>> Thanks,
>> Ben
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kde-community/attachments/20230626/68f2a0e5/attachment.htm>