Re: [cross-project-issues-dev] Are restrictions on Bugzilla worse thansp

[Denis Roy <denis.roy@xxxxxxxxxxx>]

The kind folks at Red Hat have reached out to me several weeks ago and shared their implementation with me.

Set up wasn't necessarily obvious, and I believe Red Hat are running an older, patched/hacked version of Bugzilla, so I'm not sure if their suggestions would apply to our newer, vanilla Bugzilla.

Matt's implementation of a Bugzilla group seemed to be the best compromise with the cycles we had available while we investigate a better, more permanent solution.

Thanks for your patience,

Denis

On 11/14/2016 01:16 PM, Gunnar Wagenknecht wrote:

-- 
Gunnar Wagenknecht
gunnar@xxxxxxxxxxxxxxx, http://guw.io/

On 14 Nov 2016, at 16:22, Denis Roy <denis.roy@xxxxxxxxxxx> wrote:

We're using re-captcha on the sign-up page, but since Bugzilla doesn't have a moderation system it makes it an easy target. Since Bugzilla doesn't have a clean bug deletion process either it makes a messy cleanup.

So it's humans creating accounts and then bots doing the spamming, isn't it? What would prevent those users from following the new process? Are you actually checking their email addresses?

FWIW, Eclipse.org is not the only Bugzilla installation. There are many out there. I know you are really interested in fixing this. We spoke about options in Ludwigsburg. I think I found another one.

I see the RedHat folks have dealt with the same issue. It seems they found a solution to do spam detection on new bug reports before they hit the database. AFAIK, Bugzilla allows extensibility via plug-ins. Maybe they have such a plug-in for sharing?

See comment 2 here:

https://bugzilla.redhat.com/show_bug.cgi?id=1388782#c2

Would it be possible to reach out to the RedHat folks and ask them for help/advice?

-Gunnar

_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev