Bugzilla Update Staged: Testing Requested

[Martin Steigerwald]

Am Sonntag, 23. Oktober 2016, 16:34:39 CEST schrieb Ben Cooksley:
> Hi all,

Hello Ben!

Thank for your taking care to update Bugzilla.

> I've prepared an update for bugs.kde.org, from the current version
> it's running to the latest version of Bugzilla. Due to the nature of
> changes made by upstream to the HTML it's been necessary to drop the
> Neverland theme for Bugzilla.
> 
> As dropping this theme may have resulted in unintentional breakage of
> templates, and the upgrade is quite significant (from the 4.x to 5.x
> series) it would be appreciated if folks could please quickly test the
> instance, located at https://bugstest.kde.org/
> 
> If you find any issues it would be appreciated if you could let us know.

I had a quick glance at bugs I reported and all seems fine. Actually I prefer 
the fixed fonts the default themes uses as it makes pasted console output so 
much more readable.

However I do not think any of the bugs I reported use a non text based 
template… but I am not sure… what I saw so far, just looks okay.


I do hope that the new version can help to implement measures to make bugzilla 
spam less likely, but if as you and Nicolás say this is really done by people 
who are paid to do it – I still have a hard time believing this… – … they 
basically would be able to circumvent any improvements with captcha´s and 
whatnot :(

What could work is a trainable spam filter within bugzilla. Or at least 
something that greps out phonenumbers together with certain key words (as all 
the spam I saw was just this).

I did some research on bugzilla and spam and… mostly the results are about 
preventing spam sent to users of bugzilla by not exposing their mail 
addresses… but not about spam in bug reports. I had no single hit on a spam 
filter *for* Bugzilla, which surprises me. Also the documentation for Bugzilla 
5.11 does not seem to mention anything about spam filtering.

I saw similar spam bugs with bugzilla.kernel.org and also Eclipse seems to 
have issues with it:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=502814

An idea here would be allowing others to clean this bugs too. Or modified: A 
button to mark that a bug report contains spam as an easier way to report it. 
Debian uses this approach for their own bug tracker, but as its email based in 
addition to a sophisticated spam filtering mail setup which seems to do pretty 
well.

Thank you,
-- 
Martin