
I just found the start page of the Wiki completely replaced with xanax drug spam. I removed the offending content and left a note in its place. Sorry - I'm not sure where the original content is archived or I would go fix it myself right now. Perhaps we need a password mechanism on the Wiki? This seems to work well over at http://www.program-transformation.org/ where you need to register and login to edit. - Chris

On Sat, 4 Dec 2004 07:55:51 -0500, Christopher D. Russell wrote
I just found the start page of the Wiki completely replaced with xanax drug spam. I removed the offending content and left a note in its place. Sorry - I'm not sure where the original content is archived or I would go fix it myself right now.
If you look at the bottom of each page you will see a link "View Other Revisions". If you follow this link you can diff the pages and very easily see the last good version. Then you can view that version, edit and save that version over the spammed version. Once you've learned the process it only takes seconds to do.
Perhaps we need a password mechanism on the Wiki? This seems to work well over at http://www.program-transformation.org/ where you need to register and login to edit.
Well, we have been having a Wiki spam issue for at least the last 5 months. The spam is usually quickly reverted and then I ban the IP / id of the spammer from the wiki. Some whole internet domains are now banned. This has been reasonably effective in cutting off the repeat offenders. I don't think a registration system would be more effective for the 'first-timers' and would cut down on the openess of the Wiki. BTW, I'll take this opportunity to say thanks to all the Boosters that help revert the spam quickly -- I personally try to check about once a day and most of the time when there has been a spammer it has already been wiped out by someone else so all that's left is to ban the spammer... Jeff

Are there any techniques to prevent a Wiki from showing up on a Google search for 'Wiki,' besides banning Google entirely? Are there 'negative metatags'? Aaron W. LaFramboise

On Sun, 05 Dec 2004 17:45:58 -0600, Aaron W. LaFramboise wrote
Are there any techniques to prevent a Wiki from showing up on a Google search for 'Wiki,' besides banning Google entirely?
Under the assumption that this would stop the spamming? I'm not sure it would....
Are there 'negative metatags'?
Not that I know. Jeff

Aaron W. LaFramboise wrote:
Are there any techniques to prevent a Wiki from showing up on a Google search for 'Wiki,' besides banning Google entirely? Are there 'negative metatags'?
Even if there were, do you really want to hide it from people looking for "boost wiki?" I did that several times last week. -- Dave Abrahams Boost Consulting http://www.boost-consulting.com

"David Abrahams" <dave@boost-consulting.com> wrote in message news:cp07h6$g61$2@sea.gmane.org...
Aaron W. LaFramboise wrote:
Are there any techniques to prevent a Wiki from showing up on a Google search for 'Wiki,' besides banning Google entirely? Are there 'negative metatags'?
Even if there were, do you really want to hide it from people looking for "boost wiki?" I did that several times last week.
See also http://www.google.com/search?q=%22Edit+text+of+this+page%22+boost Jonathan

"Jonathan Turkanis" <technews@kangaroologic.com> wrote in message news:cp089p$i9l$1@sea.gmane.org...
"David Abrahams" <dave@boost-consulting.com> wrote in message news:cp07h6$g61$2@sea.gmane.org...
Aaron W. LaFramboise wrote:
Are there any techniques to prevent a Wiki from showing up on a Google search for 'Wiki,' besides banning Google entirely? Are there 'negative metatags'?
Even if there were, do you really want to hide it from people looking for "boost wiki?" I did that several times last week.
See also
http://www.google.com/search?q=%22Edit+text+of+this+page%22+boost
Maybe this wasn't clear. I just meant to point out that it's pretty easy to find Wikis Jonathan

Thanks Jeff - next time I'll simply revert it myself. And given that maintenance is so easy, my suggestion to password the Wiki seems unnecessary now. - Chris ----- Original Message ----- From: "Jeff Garland" <jeff@crystalclearsoftware.com> Newsgroups: gmane.comp.lib.boost.devel Sent: Sunday, December 05, 2004 11:00 AM Subject: Re: ! Wiki Spam
On Sat, 4 Dec 2004 07:55:51 -0500, Christopher D. Russell wrote
I just found the start page of the Wiki completely replaced with xanax drug spam. I removed the offending content and left a note in its place. Sorry - I'm not sure where the original content is archived or I would go fix it myself right now.
If you look at the bottom of each page you will see a link "View Other Revisions". If you follow this link you can diff the pages and very easily see the last good version. Then you can view that version, edit and save that version over the spammed version. Once you've learned the process it only takes seconds to do.
Perhaps we need a password mechanism on the Wiki? This seems to work well over at http://www.program-transformation.org/ where you need to register and login to edit.
Well, we have been having a Wiki spam issue for at least the last 5 months. The spam is usually quickly reverted and then I ban the IP / id of the spammer from the wiki. Some whole internet domains are now banned. This has been reasonably effective in cutting off the repeat offenders. I don't think a registration system would be more effective for the 'first-timers' and would cut down on the openess of the Wiki.
BTW, I'll take this opportunity to say thanks to all the Boosters that help revert the spam quickly -- I personally try to check about once a day and most of the time when there has been a spammer it has already been wiped out by someone else so all that's left is to ban the spammer...
Jeff
_______________________________________________ Unsubscribe & other changes: http://lists.boost.org/mailman/listinfo.cgi/boost

Jeff Garland <jeff@crystalclearsoftware.com> wrote:
Well, we have been having a Wiki spam issue for at least the last 5 months. The spam is usually quickly reverted and then I ban the IP / id of the spammer from the wiki. Some whole internet domains are now banned. This has been reasonably effective in cutting off the repeat offenders. I don't think a registration system would be more effective for the 'first-timers' and would cut down on the openess of the Wiki.
Did you think of integrating some spam detection software (spamassassin and friends) into the wiki? It could be set to refuse posting anything which is detected as spam. I do not think losting the freedom of speaking of wee-agra in the wiki is a problem. Giovanni Bajo

On Mon, 6 Dec 2004 13:41:45 +0100, Giovanni Bajo wrote
Jeff Garland <jeff@crystalclearsoftware.com> wrote:
Did you think of integrating some spam detection software (spamassassin and friends) into the wiki? It could be set to refuse posting anything which is detected as spam. I do not think losting the freedom of speaking of wee-agra in the wiki is a problem.
Since I didn't write the Wiki software, no. But that's an interesting idea, although I'm going to guess that it runs counter to the usual 'Wiki culture'.... Jeff

On Mon, 6 Dec 2004 06:02:15 -0700, Jeff Garland <jeff@crystalclearsoftware.com> wrote:
Since I didn't write the Wiki software, no. But that's an interesting idea, although I'm going to guess that it runs counter to the usual 'Wiki culture'....
A very simple and effective spam-combat tool I have seen employed by beleagured wikis is to password-protect the Edit pages, and to make the password simple and topic-relevant (e.g. "boost") but not in a machine-readable way. See for example the Smarty wiki at: http://tinyurl.com/6f4c9 Another suggestion somenoe made was to only allow registered users to edit pages. I think either of these is a fine, marginally intrusive change (assuming it can be done easily with the Wiki software) that would not stand in the way of legitimate users adding content and will go a long way to stop the spam. -- Caleb Epstein caleb dot epstein at gmail dot com

On Mon, 6 Dec 2004 08:19:41 -0500, Caleb Epstein wrote
On Mon, 6 Dec 2004 06:02:15 -0700, Jeff Garland <jeff@crystalclearsoftware.com> wrote:
Since I didn't write the Wiki software, no. But that's an interesting idea, although I'm going to guess that it runs counter to the usual 'Wiki culture'....
A very simple and effective spam-combat tool I have seen employed by beleagured wikis is to password-protect the Edit pages, and to make the password simple and topic-relevant (e.g. "boost") but not in a machine-readable way.
See for example the Smarty wiki at: http://tinyurl.com/6f4c9
Interesting. Seems like a randomly generated password challenge would be a nice way to foil any 'bots' that are spamming the wiki. That said, from the spam I've seen I think it is mostly being done by hand by humans so a well known password isn't going to stop that.
Another suggestion somenoe made was to only allow registered users to edit pages.
I think either of these is a fine, marginally intrusive change
(assuming it can be done easily with the Wiki software) that would not stand in the way of legitimate users adding content and will go a long way to stop the spam.
Well, the issue is what does it take to get a registration? If it is non-automated it becomes a significant barrier because a person has to approve, might not be available for hours, etc. If it is automated (eg: via email or just the current 'preferences') then you go and get a free bogus email, register, and spam all you like until we detect it (note that at least a few spammers have actually registered on the wiki in the past). So again, I'm skeptical that this will help much. BTW, I've researched and we are already using the best-practices recommended by other folks running other UseMod Wiki's. There may be better Wiki engines out there now, but changing over would be a much bigger project... Jeff

Jeff Garland <jeff@crystalclearsoftware.com> wrote:
Did you think of integrating some spam detection software (spamassassin and friends) into the wiki? It could be set to refuse posting anything which is detected as spam. I do not think losting the freedom of speaking of wee-agra in the wiki is a problem.
Since I didn't write the Wiki software, no.
Though you could evaluate how hard an effort it is. I guess it cannot be too hard.
But that's an interesting idea, although I'm going to guess that it runs counter to the usual 'Wiki culture'....
The usual Wiki culture is that everybody can freely edit without any need to register, signup, or whatever. This does not mean that I am allowed to post an article in the Boost Wiki about Senator Abumagi which is offering you 20 billions dollars. I doubt anyone will be refrained from posting if you run an anti-spam detection on the contents. Giovanni Bajo

Giovanni Bajo wrote:
Jeff Garland <jeff@crystalclearsoftware.com> wrote:
Did you think of integrating some spam detection software (spamassassin and friends) into the wiki? It could be set to refuse posting anything which is detected as spam. I do not think losting the freedom of speaking of wee-agra in the wiki is a problem.
Since I didn't write the Wiki software, no.
Though you could evaluate how hard an effort it is. I guess it cannot be too hard.
I have some experience working with SpamBayes, which I am using very successfully to server-side filter my email. I have basically no fear about allowing my email address to be harvested by anybody who wants it. If someone would like to cooperate on integrating SpamBayes into the Wiki, I'd be happy to lend a hand on it. -- Dave Abrahams Boost Consulting http://www.boost-consulting.com
participants (7)
-
Aaron W. LaFramboise
-
Caleb Epstein
-
Christopher D. Russell
-
David Abrahams
-
Giovanni Bajo
-
Jeff Garland
-
Jonathan Turkanis