my vote is yes, at least for the time being, make it editable by registered users only. David On Sat, Feb 8, 2014 at 2:48 PM, Romy Ilano <romy(a)snowyla.com> wrote:

FYI, someone(s) was spamming the Noisebridge wiki, too. ________________________________ > Date: Sat, 8 Feb 2014 17:19:46 -0800 > From: peteforsyth(a)gmail.com > To: dkeenan44(a)gmail.com > CC: sudo-discuss(a)lists.sudoroom.org > Subject: Re: [sudo-discuss] someone hacking the SudoRoom Wiki > > > I agree, yes as a temporary measure. I replied earlier, but apparently > only to romy : I am happy to work with others to navigate the famously > infuriating anti spam options for mediawiki. > > Pete > > On Feb 8, 2014 2:58 PM, "David Keenan" > <dkeenan44@gmail.com<mailto:dkeenan44@gmail.com>> wrote: > my vote is yes, at least for the time being, make it editable by > registered users only. > > David > > > On Sat, Feb 8, 2014 at 2:48 PM, Romy Ilano > <romy@snowyla.com<mailto:romy@snowyla.com>> wrote: > the hardcore jerky action links are appearing again and again (Deleted > this twice & saw a bunch of other people delete it) > > It's coming in off an annonymous login (various IP Addresses) > > Should we lock down the wiki & make it editable by registered users only? > > https://sudoroom.org/mediawiki/index.php?title=Sudoroom&action=history > > > > > ============================= > > Romy Ilano > romy@snowyla.com<mailto:romy@snowyla.com> > > > > > On Sat, Feb 8, 2014 at 9:11 AM, > mattsenate@gmail.com<mailto:mattsenate@gmail.com> > <mattsenate@gmail.com<mailto:mattsenate@gmail.com>> wrote: > To check the recent changes and help combat spam, check out > https://sudoroom.org/wiki/Special:RecentChanges > > // Matt > > > ----- Reply message ----- > From: "Romy Ilano" <romy@snowyla.com<mailto:romy@snowyla.com>> > To: "sudo-discuss" > <sudo-discuss@lists.sudoroom.org<mailto:sudo-discuss@lists.sudoroom.org>> > Subject: [sudo-discuss] someone hacking the SudoRoom Wiki > Date: Fri, Feb 7, 2014 15:58 > > > Hey, I just fixed a hack on the SudoRoom main page. > > Someone is hacking the SudoRoom Wiki - I don't know who, I know this > probably happens often. Are there safety precautions? > > https://sudoroom.org/mediawiki/index.php?title=Sudoroom&action=history > > I undid the "hardcore jerkey action" - and I saw that someone also > undid this shortly before I went on the page. > > Any idea wh'os doing this? > > > ============================= > > Romy Ilano > romy@snowyla.com<mailto:romy@snowyla.com> > > > > > _______________________________________________ > sudo-discuss mailing list > sudo-discuss@lists.sudoroom.org<mailto:sudo-discuss@lists.sudoroom.org> > http://lists.sudoroom.org/listinfo/sudo-discuss > > > > _______________________________________________ > sudo-discuss mailing list > sudo-discuss@lists.sudoroom.org<mailto:sudo-discuss@lists.sudoroom.org> > http://lists.sudoroom.org/listinfo/sudo-discuss > > > _______________________________________________ sudo-discuss mailing > list sudo-discuss(a)lists.sudoroom.org > http://lists.sudoroom.org/listinfo/sudo-discuss

David, two things: On Sun, Feb 9, 2014 at 5:54 PM, David Keenan &lt;dkeenan44(a)gmail.com&gt; wrote: (1) In my opinion, it is better to leave things open to casual fixes, than to close things down; obstacles of any kind will prevent some improvements (even if they are only small improvements that somebody doesn't feel like bothering with an account for). In my mind this is not an absolute rule, but it's a worthwhile guiding principle. (2) With MediaWiki, requiring registration doesn't solve the problem, it only pushes it back. The spambots are just as good at creating accounts as they are at making IP/anonymous edits. This is why i suggest getting a small group of people to focus on the problem and recommend a solution. With MediaWiki there is no magic bullet that we just haven't gotten around to implementing -- it will take a careful consideration of a combination of a number of options, and assessing how effective they are at the current date -- because this stuff evolves rather rapidly. Basically, I'd describe it as a design problem, not a binary "lock down or do not lock down". What *combination* of various policies, extensions, and settings is right for meeting Sudo Room's needs? Pete

Captchas might or might not be a worthwhile tool -- definitely something worth considering. But unless there are some people who want to sit down and map out a comprehensive approach, I'm going to bow out -- I don't think we're going to get very far suggesting ideas piecemeal on an email list. If there *are* folks who'd like to work on it, let me know! I'll be out of town for a bit, but can either call/skype/IRC in, or get together in person after the 27th. In the meantime maybe we could divide up some questions to research, about what has worked well on other sites... Pete On Mon, Feb 10, 2014 at 12:54 PM, David Keenan &lt;dkeenan44(a)gmail.com&gt; wrote: