[FFmpeg-devel] TRAC Spam

[FFmpeg-devel] TRAC Spam

[Michael Koch]

Ticket / Comment
1920 / 12




_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Paul B Mahol]

On Wed, Sep 20, 2023 at 1:46 PM Michael Koch <astroelectronic@t-online.de>
wrote:

> Ticket / Comment
> 1920 / 12
>
Remove that nick once and for all.

>
>
>
>
> _______________________________________________
> ffmpeg-devel mailing list
> ffmpeg-devel@ffmpeg.org
> https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
>
> To unsubscribe, visit link above, or email
> ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".
>
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 476 bytes --]

On Wed, Sep 20, 2023 at 02:30:20PM +0200, Paul B Mahol wrote:
> On Wed, Sep 20, 2023 at 1:46 PM Michael Koch <astroelectronic@t-online.de>
> wrote:
> 
> > Ticket / Comment
> > 1920 / 12
> >
> Remove that nick once and for all.

No user with the nick "that" has been found

sorry

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Republics decline into democracies and democracies degenerate into
despotisms. -- Aristotle

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Paul B Mahol]

On Wed, Sep 20, 2023 at 4:33 PM Michael Niedermayer <michael@niedermayer.cc>
wrote:

> On Wed, Sep 20, 2023 at 02:30:20PM +0200, Paul B Mahol wrote:
> > On Wed, Sep 20, 2023 at 1:46 PM Michael Koch <
> astroelectronic@t-online.de>
> > wrote:
> >
> > > Ticket / Comment
> > > 1920 / 12
> > >
> > Remove that nick once and for all.
>
> No user with the nick "that" has been found
>

Bad joke, I obviously meant nick that wrote such comments.
As apparently this is not first comment by that nick.


>
> sorry
>
> [...]
> --
> Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
>
> Republics decline into democracies and democracies degenerate into
> despotisms. -- Aristotle
> _______________________________________________
> ffmpeg-devel mailing list
> ffmpeg-devel@ffmpeg.org
> https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
>
> To unsubscribe, visit link above, or email
> ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".
>
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1318 bytes --]

On Wed, Sep 20, 2023 at 05:28:29PM +0200, Paul B Mahol wrote:
> On Wed, Sep 20, 2023 at 4:33 PM Michael Niedermayer <michael@niedermayer.cc>
> wrote:
> 
> > On Wed, Sep 20, 2023 at 02:30:20PM +0200, Paul B Mahol wrote:
> > > On Wed, Sep 20, 2023 at 1:46 PM Michael Koch <
> > astroelectronic@t-online.de>
> > > wrote:
> > >
> > > > Ticket / Comment
> > > > 1920 / 12
> > > >
> > > Remove that nick once and for all.
> >
> > No user with the nick "that" has been found
> >
> 
> Bad joke, I obviously meant nick that wrote such comments.
> As apparently this is not first comment by that nick.

I cant delete unspecified nicks. And i cant check what nick wrote
a comment thats no longer there.

Best is to simply spell the nick out to be deleted next time.

But i expect her to come back once shes deleted, this is not her first
nick, i have already deleted her a few days ago, so iam not sure deleting it helps.
ATM i suspect she will give up and go away when her spam doesnt stick
or the bayesian filter / akismet will catch on to this style of spam
if not we can take a closer look and find another solution to block this

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Avoid a single point of failure, be that a person or equipment.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Koch]

The last username was "sharselune".
Can't we also delete the spam from the archive?
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067004.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067006.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067058.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067060.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067061.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067062.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067074.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067200.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067201.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067202.html
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067210.html

Possible filtering rules:
-- Message is from a new user
-- and contains a link to a *.com domain
-- and message is not longer than 3 lines


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1963 bytes --]

Hi

On Thu, Sep 21, 2023 at 08:52:42AM +0200, Michael Koch wrote:
> The last username was "sharselune".
> Can't we also delete the spam from the archive?
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067004.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067006.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067058.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067060.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067061.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067062.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067074.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067200.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067201.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067202.html
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-September/067210.html

ENOVOLUNTEER


> 
> Possible filtering rules:
> -- Message is from a new user
> -- and contains a link to a *.com domain
> -- and message is not longer than 3 lines

We have bayesian filtering
trac/admin/spamfilter/bayes

we have regex filtering
trac/wiki/BadContent

we have ip filtering
trac/wiki/BadIP

we have akismet, captchas, DNS based blacklists, some custom code

You should have the power to adjust the regex / ip and bayes stuff
if you want me to add a DNS blacklist, say which
or some more custom code, post a patch

The complex rule you suggest above is work and the spammer is
likely human not a bot so she will adapt her spam if she has to
So i would suggest you try with whats easy in the python regex
syntax

thx

PS: example regex rules: https://trac-hacks.org/wiki/BadContent

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Those who are too smart to engage in politics are punished by being
governed by those who are dumber. -- Plato 

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Koch]

I'm not sure if I understood that right. If I add a keyword to the list 
on this page
https://trac.ffmpeg.org/wiki/BadContent
then any posting which contains this keyword will get a negative score?
And if the score exceeds a threshold, then the posting will be rejected?
Is this only for changes in the wiki, or also for comments in tickets?

By the way, in the above page the link to "Python syntax" is dead.

Michael



_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 800 bytes --]

On Fri, Sep 22, 2023 at 10:00:39AM +0200, Michael Koch wrote:
> I'm not sure if I understood that right. If I add a keyword to the list on
> this page
> https://trac.ffmpeg.org/wiki/BadContent
> then any posting which contains this keyword will get a negative score?
> And if the score exceeds a threshold, then the posting will be rejected?

yes


> Is this only for changes in the wiki, or also for comments in tickets?

should be for everything


> 
> By the way, in the above page the link to "Python syntax" is dead.

you should be able to edit it
i dont know where to link to either without searching

thx

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Why not whip the teacher when the pupil misbehaves? -- Diogenes of Sinope

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Koch]

(?i)customer.?support
(?i)customer.?care
(?i)customer.?service

What's the meaning of (?i) and .?
I can't find that in Python syntax description.

Michael



_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Diederick C. Niehorster]

On Fri, Sep 22, 2023 at 10:39 AM Michael Koch
<astroelectronic@t-online.de> wrote:
>
> (?i)customer.?support
> (?i)customer.?care
> (?i)customer.?service
>
> What's the meaning of (?i) and .?
> I can't find that in Python syntax description.
>

This is regular expression syntax, not python syntax. There are some
nice online tools that show you what your regular expression will
match.

Cheers,
Dee
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Koch]

Is it ok if I remove the dead link to Python syntax, and replace it by 
this link to Wikipedia?
https://en.wikipedia.org/wiki/Regular_expression

Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Hendrik Leppkes]

On Fri, Sep 22, 2023 at 11:14 AM Michael Koch
<astroelectronic@t-online.de> wrote:
>
> Is it ok if I remove the dead link to Python syntax, and replace it by
> this link to Wikipedia?
> https://en.wikipedia.org/wiki/Regular_expression
>

A more accurate page would probably to just point to the correct
python regex docs, eg:
https://docs.python.org/2.7/library/re.html
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Koch]

I just updated the dead link, also added the link to Wikipedia, added 
some keywords for our favourite spammer, and added short descriptions 
what (?i) and .? means.

Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 369 bytes --]

On Thu, Sep 21, 2023 at 08:52:42AM +0200, Michael Koch wrote:
> The last username was "sharselune".

she has been terminated

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Freedom in capitalist society always remains about the same as it was in
ancient Greek republics: Freedom for slave owners. -- Vladimir Lenin

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 464 bytes --]

On Wed, Sep 20, 2023 at 01:46:45PM +0200, Michael Koch wrote:
> Ticket / Comment
> 1920 / 12

The ticket comment 12 on ticket #1920 has been deleted.

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Rewriting code that is poorly written but fully understood is good.
Rewriting code that one doesnt understand is a sign that one is less smart
than the original author, trying to rewrite it will not make it better.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

[FFmpeg-devel] trac spam

[Michael Koch]

please delete:
comment 14 in ticket 2104
comment 6 in ticket 2776
user "bristleback"

Thanks,
Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

Please have a look at the Spam Filtering / Monitoring page.
One of the spammer's postings was rejected, because it contained a 
blacklisted pattern in Regex filter and got -10 points.
But 20 seconds later the same posting was accepted, because the spammer 
was successfully verified by Captcha and got +20 points.
Does that make sense? Can we change that a successful capcha gives +20 
points?

Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

I've just tested the regex filter with a posting in ticket 2776. This 
test was not successful.
I thought that the second entry from the end of the list should have 
matched:

(?i)regards.{0,5}http

In words: Switch to case insensitive, search for "regards" followed by 0 
to 5 of any characters, followed by "http".

What's wrong with the search string?

Michael

P.S. please delete comment 7 in ticket 2776


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

When I edit the BadContent list, do the new search strings immediately 
become effective, or must I wait some time?

Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 426 bytes --]

On Thu, Oct 19, 2023 at 04:21:44PM +0200, Michael Koch wrote:
> When I edit the BadContent list, do the new search strings immediately
> become effective, or must I wait some time?

Iam not aware of any delay, did you see a delay ?

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

The educated differ from the uneducated as much as the living from the
dead. -- Aristotle 

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

> Iam not aware of any delay, did you see a delay ?

I did change the search string (2nd from end of list) and 19 minutes later I made a test posting in ticket 2776.
I have no idea why the pattern wasn't found.

Michael


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 769 bytes --]

On Thu, Oct 19, 2023 at 07:05:28PM +0200, Michael Koch wrote:
> 
> > Iam not aware of any delay, did you see a delay ?
> 
> I did change the search string (2nd from end of list) and 19 minutes later I made a test posting in ticket 2776.
> I have no idea why the pattern wasn't found.

You would have to read the trac source probably and maybe do local tests
tracing through the code what happens
but a non spammer posting spam

setting up trac locally is easy, it comes with its own deamon you dont
even need a webserver

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

"Nothing to hide" only works if the folks in power share the values of
you and everyone you know entirely and always will -- Tom Scott


[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

> You would have to read the trac source probably and maybe do local tests
tracing through the code what happens
but a non spammer posting spam
setting up trac locally is easy, it comes with its own deamon you dont
even need a webserver

That sounds too complicated for me.

What about my other question? Can it be changed that the spammer gets +20 points from successful captcha?
The regex filter is useless if a pattern match gives only -10 points, but 20 seconds later the spammer gets +20 points from captcha.

Michael


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 2145 bytes --]

On Thu, Oct 19, 2023 at 07:49:10PM +0200, Michael Koch wrote:
> 
> > You would have to read the trac source probably and maybe do local tests
> tracing through the code what happens
> but a non spammer posting spam
> setting up trac locally is easy, it comes with its own deamon you dont
> even need a webserver
> 
> That sounds too complicated for me.
> 
> What about my other question? Can it be changed that the spammer gets +20 points from successful captcha?
> The regex filter is useless if a pattern match gives only -10 points, but 20 seconds later the spammer gets +20 points from captcha.

IIRC each regex give -10 so multiple matches give more.

The problem is more fundamental do we allow users to override
spam mis identification ?
we can reduce the captcha score but then someone will hit a case where
she cannot post valid content
That means we then need a method to catch these and do something about them

Its not as if 20 fails and 18 is going to work, the captcha score would
have to be dropped to 8 for this one case you talk about here.

I think the captcha works as intended. It adds cost to the spammer
I doubt its economic for spammers to solve a captcha for having some spam
up for a few hours.

Again we can change all these scores but theres a minimum where its least
work and deleting spam is work as much as dealing with users who cannot post

So if you have some argument that a change in scores would reduce spam with
no valid users lost in the last 12months thats a much stronger argument
Another way would be to try a change and monitor what happens, do you
want to monitor all failed submissions for a few months ?
either way tuning these numbers requires some form of feedback mechanism
otherwise we would not truly know if we did something smart or stupid

thx

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Rewriting code that is poorly written but fully understood is good.
Rewriting code that one doesnt understand is a sign that one is less smart
than the original author, trying to rewrite it will not make it better.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

> IIRC each regex give -10 so multiple matches give more.

So far, the search strings contain only combinations of keywords, for example "concretevictoria".
False positives are almost impossible.

I could add shorter keywords, for example "concrete" and "victoria".
Then we would get multiple matches, but also a few false positives.
Especially for people from Canada. Keywords would be:
"ottawa", "halifax", "victoria", "moncton", "nanaimo", "vancouver",
"concrete", "excavating", "fabricators", "lawncare", "landscapedesign", "retainingwalls"
Shall I do that?

I agree with you that the problem is not trivial.

> I think the captcha works as intended. It adds cost to the spammer
I doubt its economic for spammers to solve a captcha for having some spam
up for a few hours.

It's not only for a few hours. We have the spammer's links in our archives forever.
http://ffmpeg.org/pipermail/ffmpeg-trac/2023-October/067523.html
Search engines can find the links, and that's what the spammer probably wants.

Michael


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[epirat07]

On 19 Oct 2023, at 21:05, Michael Koch wrote:

>> IIRC each regex give -10 so multiple matches give more.
>
> So far, the search strings contain only combinations of keywords, for example "concretevictoria".
> False positives are almost impossible.
>
> I could add shorter keywords, for example "concrete" and "victoria".
> Then we would get multiple matches, but also a few false positives.
> Especially for people from Canada. Keywords would be:
> "ottawa", "halifax", "victoria", "moncton", "nanaimo", "vancouver",
> "concrete", "excavating", "fabricators", "lawncare", "landscapedesign", "retainingwalls"
> Shall I do that?
>
> I agree with you that the problem is not trivial.
>
>> I think the captcha works as intended. It adds cost to the spammer
> I doubt its economic for spammers to solve a captcha for having some spam
> up for a few hours.
>

From my experience looking over Xiph infrastructure, we had a lot of spammers
in the past able to solve captchas to post spam on our various services.

Captcha only really helped for low-effort automated spam.

> It's not only for a few hours. We have the spammer's links in our archives forever.
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-October/067523.html
> Search engines can find the links, and that's what the spammer probably wants.
>
> Michael
>
>
> _______________________________________________
> ffmpeg-devel mailing list
> ffmpeg-devel@ffmpeg.org
> https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
>
> To unsubscribe, visit link above, or email
> ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1549 bytes --]

On Thu, Oct 19, 2023 at 09:05:07PM +0200, Michael Koch wrote:
> > IIRC each regex give -10 so multiple matches give more.
> 
> So far, the search strings contain only combinations of keywords, for example "concretevictoria".

> False positives are almost impossible.

strings that are certain spam, you can just add that twice for double the points lost


> 
> I could add shorter keywords, for example "concrete" and "victoria".
> Then we would get multiple matches, but also a few false positives.
> Especially for people from Canada. Keywords would be:
> "ottawa", "halifax", "victoria", "moncton", "nanaimo", "vancouver",
> "concrete", "excavating", "fabricators", "lawncare", "landscapedesign", "retainingwalls"
> Shall I do that?

no


> 
> I agree with you that the problem is not trivial.
> 
> > I think the captcha works as intended. It adds cost to the spammer
> I doubt its economic for spammers to solve a captcha for having some spam
> up for a few hours.
> 
> It's not only for a few hours. We have the spammer's links in our archives forever.
> http://ffmpeg.org/pipermail/ffmpeg-trac/2023-October/067523.html
> Search engines can find the links, and that's what the spammer probably wants.

should i add /pipermail/ffmpeg-trac to robots.txt ?
is there anyone who googles in these ffmpeg trac archives ?

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

During times of universal deceit, telling the truth becomes a
revolutionary act. -- George Orwell

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

> strings that are certain spam, you can just add that twice for double the points lost

done.


> should i add /pipermail/ffmpeg-trac to robots.txt ?
is there anyone who googles in these ffmpeg trac archives ?

I don't.

Michael


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Cosmin Stejerean via ffmpeg-devel]

> On Oct 20, 2023, at 10:53 AM, Michael Koch <astroelectronic@t-online.de> wrote:
> 
>> should i add /pipermail/ffmpeg-trac to robots.txt ?
> is there anyone who googles in these ffmpeg trac archives ?
> 
> I don't.

I'd imagine anyone wanting to search would search trac itself rather than the mailing list archive. If it has to stay publicly searchable though, is there a way to add rel="nofollow" to the links when they appear in the trac archive? That should remove the appeal of this vector for stuffing links in to the trac archive. 

- Cosmin
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1073 bytes --]

On Fri, Oct 20, 2023 at 06:24:14PM +0000, Cosmin Stejerean via ffmpeg-devel wrote:
> 
> 
> > On Oct 20, 2023, at 10:53 AM, Michael Koch <astroelectronic@t-online.de> wrote:
> > 
> >> should i add /pipermail/ffmpeg-trac to robots.txt ?
> > is there anyone who googles in these ffmpeg trac archives ?
> > 
> > I don't.
> 
> I'd imagine anyone wanting to search would search trac itself rather than the mailing list archive. If it has to stay publicly searchable though, is there a way to add rel="nofollow" to the links when they appear in the trac archive? That should remove the appeal of this vector for stuffing links in to the trac archive. 

The mailing list archives should contain no html as thats filtered
out by mailman already
I see only raw urls in text. In fact i wonder how much that affects
search engines

thx

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Does the universe only have a finite lifespan? No, its going to go on
forever, its just that you wont like living in it. -- Hiranya Peiri

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

> IIRC each regex give -10 so multiple matches give more.


Let's assume we have a long keyword like "concretevictoria". Nobody uses 
this keyword in a normal text. A false positive is almost impossible.

I could search for "concretevictoria", "concretevictori." and 
"concretevictor.." and get -30 points.
Or possibly it would also work if I search for "concretevictoria" three 
times?
The idea is to give long keywords a higher weight.

I'm not sure if this idea is acceptable, that's why I'd like to ask for 
your opinions before I do it.

Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 339 bytes --]

On Wed, Oct 18, 2023 at 07:28:33PM +0200, Michael Koch wrote:
> please delete:
> comment 14 in ticket 2104
> comment 6 in ticket 2776
> user "bristleback"

done

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Democracy is the form of government in which you can choose your dictator

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

please delete:
comment 12 in ticket 1920
user ""willow"

I have updated the regex filter so that it should match all combinations 
of two keywords, in both orders.

Michael

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 371 bytes --]

On Thu, Oct 26, 2023 at 04:37:00PM +0200, Michael Koch wrote:
> please delete:
> comment 12 in ticket 1920
> user ""willow"

done

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

No human being will ever know the Truth, for even if they happen to say it
by chance, they would not even known they had done so. -- Xenophanes

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

Is it possible to make the "Bad Content" page invisible? It would be 
better if the spammer can't see the filtering rules.

Michael

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 706 bytes --]

On Fri, Oct 27, 2023 at 02:44:10PM +0200, Michael Koch wrote:
> Is it possible to make the "Bad Content" page invisible? It would be better
> if the spammer can't see the filtering rules.

everything is possible but its not a standard feature of trac that
i know of.

you would have to change trac, do a trac plugin or something else
i guess

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Old school: Use the lowest level language in which you can solve the problem
            conveniently.
New school: Use the highest level language in which the latest supercomputer
            can solve the problem without the user falling asleep waiting.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Anton Khirnov]

Quoting Michael Niedermayer (2023-10-27 19:53:08)
> On Fri, Oct 27, 2023 at 02:44:10PM +0200, Michael Koch wrote:
> > Is it possible to make the "Bad Content" page invisible? It would be better
> > if the spammer can't see the filtering rules.
> 
> everything is possible but its not a standard feature of trac that
> i know of.
> 
> you would have to change trac, do a trac plugin or something else
> i guess

I'd expect it to be doable rather easily on the gateway webserver (seems
to be Apache for trac.ffmpeg.org).

-- 
Anton Khirnov
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1179 bytes --]

On Mon, Nov 06, 2023 at 10:06:10AM +0100, Anton Khirnov wrote:
> Quoting Michael Niedermayer (2023-10-27 19:53:08)
> > On Fri, Oct 27, 2023 at 02:44:10PM +0200, Michael Koch wrote:
> > > Is it possible to make the "Bad Content" page invisible? It would be better
> > > if the spammer can't see the filtering rules.
> > 
> > everything is possible but its not a standard feature of trac that
> > i know of.
> > 
> > you would have to change trac, do a trac plugin or something else
> > i guess
> 
> I'd expect it to be doable rather easily on the gateway webserver (seems
> to be Apache for trac.ffmpeg.org).

ive added an account on the trac server for you, same username and
ssh keys as main server.

feel free to send me a patch to the config files or say if you
need more permissions

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Awnsering whenever a program halts or runs forever is
On a turing machine, in general impossible (turings halting problem).
On any real computer, always possible as a real computer has a finite number
of states N, and will either halt in less than N cycles or never halt.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

Please delete:
Comment 14 in ticket 2104
Comment 2 in ticket 5154
User "ballid"

The duplicated search patterns in regex filter did work as expected (-20 
points), but the spammer got +20 points from captcha.

I've updated the search patterns.

Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 816 bytes --]

On Mon, Nov 06, 2023 at 09:25:02AM +0100, Michael Koch wrote:
> Please delete:
> Comment 14 in ticket 2104
> Comment 2 in ticket 5154
> User "ballid"
> 
> The duplicated search patterns in regex filter did work as expected (-20
> points), but the spammer got +20 points from captcha.
> 
> I've updated the search patterns.

trac-admin ffmpeg session delete bunnylid
trac-admin ffmpeg session delete ballid
trac-admin ffmpeg ticket remove_comment 2104 14
The ticket comment 14 on ticket #2104 has been deleted.
trac-admin ffmpeg ticket remove_comment 5154 2
The ticket comment 2 on ticket #5154 has been deleted.


[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

I am the wisest man alive, for I know one thing, and that is that I know
nothing. -- Socrates

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

Please delete also user "bunnylid". He did not yet write anything, but 
he did register with the same IP adress as the other spammer, only a few 
minutes earlier.

Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 475 bytes --]

On Mon, Nov 06, 2023 at 10:03:38AM +0100, Michael Koch wrote:
> Please delete also user "bunnylid". He did not yet write anything, but he
> did register with the same IP adress as the other spammer, only a few
> minutes earlier.

done

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Complexity theory is the science of finding the exact solution to an
approximation. Benchmarking OTOH is finding an approximation of the exact

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

please delete:

comment 14 in ticket 2104
comment 6 in ticket 2776
user "bunnybellid"

I have updated the regex search patterns.

Michael
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

Am 03.12.2023 um 09:39 schrieb Michael Koch:
> please delete:
>
> comment 14 in ticket 2104
> comment 6 in ticket 2776
> user "bunnybellid"
>
> I have updated the regex search patterns.

Does anybody know why the last regex seach pattern in the list doesn't work?
I thought it should match if any of the keywords is followed by "http" 
in the same line, with any number of any characters before, between and 
after the keywords.

(?i)^.*(appreciate|amazing|great|regards|thank).*http.*$

Michael

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Masaru Nomiya]

Hello,

In the Message; 

  Subject    : Re: [FFmpeg-devel] trac spam
  Message-ID : <b2b9e89d-d156-8ff1-77ee-a05434118134@t-online.de>
  Date & Time: Sun, 3 Dec 2023 09:49:55 +0100

[MH] == Michael Koch <astroelectronic@t-online.de> has written:

MH>  Am 03.12.2023 um 09:39 schrieb Michael Koch:
MH>  > please delete:
MH>  > 
MH>  > comment 14 in ticket 2104
MH>  > comment 6 in ticket 2776
MH>  > user "bunnybellid"
MH>  > 
MH>  > I have updated the regex search patterns.

MH>  Does anybody know why the last regex seach pattern in the list doesn't work?
MH>  I thought it should match if any of the keywords is followed by "http" in the
MH>  same line, with any number of any characters before, between and after the
MH>  keywords.

MH>  (?i)^.*(appreciate|amazing|great|regards|thank).*http.*$

I haven't seen the original email so I don't know, but I think it
might be a character code issue.

In other words, does this filter work on UTF-8 emails?

Kind Regards.

---
┏━━┓彡 野宮  賢                             mail-to: nomiya @ lake.dti.ne.jp
┃＼／彡
┗━━┛  "Companies have come to view generative AI as a kind of monster that
	  must be fed at all costs―even if it isn’t always clear what exactly
	  that data is needed for or what those future AI systems might end up
	  doing."
	  
        -- Generative AI Is Making Companies Even More Thirsty for Your Data --
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

> I haven't seen the original email so I don't know, but I think it
might be a character code issue.

Example:
Comment 14 in ticket 2104 contains "Great" and "amazing" and "http" in 
the same line.
But the regex filter didn't match.

Michael

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Masaru Nomiya]

Hello,

野宮です．

In the Message; 

  Subject    : Re: [FFmpeg-devel] trac spam
  Message-ID : <bc7a0d08-fe32-f584-2e27-7c7e608d5ef4@t-online.de>
  Date & Time: Sun, 3 Dec 2023 10:57:40 +0100

[MK] == Michael Koch <astroelectronic@t-online.de> has written:

MN>> I haven't seen the original email so I don't know, but I think it
MN>>  might be a character code issue.

MK>  Example:
MK>  Comment 14 in ticket 2104 contains "Great" and "amazing" and
MK>  "http" in the same line.
MK>  But the regex filter didn't match.

Are you talking based on the source of the email message?

I don't think so, do you?

Regards.

---
┏━━┓彡 野宮  賢                       mail-to: nomiya @ lake.dti.ne.jp
┃＼／彡
┗━━┛		"Bill!
	       		You married with Computer.
               		Not with Me!"
               		"No....., with money."
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

> Are you talking based on the source of the email message?

I don't have the messages as email. I see only the comments in the trac timeline:
https://trac.ffmpeg.org/timeline

Michael

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Frank Plowman]

On 03/12/2023 08:49, Michael Koch wrote:

> Does anybody know why the last regex seach pattern in the list doesn't 
> work?
> I thought it should match if any of the keywords is followed by "http" 
> in the same line, with any number of any characters before, between 
> and after the keywords.
>
> (?i)^.*(appreciate|amazing|great|regards|thank).*http.*$
>
Perhaps the regex search is performed on the rendered text as opposed to 
the source text?  Taking the spam comment on #2104 as an example, the 
spammer appears to be using the `[<URI> <Display Text>]` or 
`[[<URI>|<Display Text>]]` markup, therefore `http` does not appear in 
the rendered text.

-- 
https://www.frankplowman.com/

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

> Perhaps the regex search is performed on the rendered text as opposed to 
> the source text?  Taking the spam comment on #2104 as an example, the 
> spammer appears to be using the `[<URI> <Display Text>]` or 
> `[[<URI>|<Display Text>]]` markup, therefore `http` does not appear in 
> the rendered text.

But on the other hand, the regex filter did match two times in the spam comment in ticket 2776.
Why?
This comment was only accepted after the spammer solved the captcha.

Michael


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 349 bytes --]

On Sun, Dec 03, 2023 at 09:39:50AM +0100, Michael Koch wrote:
> please delete:
> 
> comment 14 in ticket 2104
> comment 6 in ticket 2776
> user "bunnybellid"

deleted

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

No great genius has ever existed without some touch of madness. -- Aristotle

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

[FFmpeg-devel] TRAC Spam

[Michael Koch]

Ticket / Comment
2104 / 14
2776 / 6
3720 / 9



_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] TRAC Spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 483 bytes --]

On Tue, Sep 19, 2023 at 07:44:03AM +0200, Michael Koch wrote:
> Ticket / Comment
> 2104 / 14
> 2776 / 6
> 3720 / 9

The ticket comment 14 on ticket #2104 has been deleted.
The ticket comment 6 on ticket #2776 has been deleted.
The ticket comment 9 on ticket #3720 has been deleted.


[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

It is dangerous to be right in matters on which the established authorities
are wrong. -- Voltaire

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

[FFmpeg-devel] Trac spam

[Michael Koch]

new spammer in ticket 2104
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1327 bytes --]

On Sun, Sep 10, 2023 at 11:20:23AM +0200, Michael Koch wrote:
> new spammer in ticket 2104

i added you to the spam fighters group
that gives you the following powers:
SPAM_CHECKREPORTS SPAM_MONITOR SPAM_REPORT SPAM_TRAIN SPAM_USER TICKET_EDIT_COMMENT WIKI_ADMIN

permissions sadly are not as fine grained as i would like, iam not sure
these are enough to effectively remove spam but maybe some are still useful

also the following may or may not work:
1. To monitor submissions to trac
trac ffmpeg org/admin/spamfilter/monitor
    (each report should have a "Delete as spam" and "Remove registered user" button
    Note the "Delete as spam" ONLY seems to delete the report and probably submit to
    spam tracking services like akismet and update bayesian not delete the user nor her comments
    so you want to delete the user before the report

2. To see all changes a user has done:
trac ffmpeg org/admin/spamfilter/user?mode=user&user=EVILSPAMMER

3. To see user submitted spam reports
trac ffmpeg org/admin/spamfilter/report

thx
[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Take away the freedom of one citizen and you will be jailed, take away
the freedom of all citizens and you will be congratulated by your peers
in Parliament.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Trac spam

[Michael Koch]

I see the "Delete selected as Spam" button, but no "Remove registered 
user" button.

Michael

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 921 bytes --]

On Mon, Sep 11, 2023 at 02:20:58PM +0200, Michael Koch wrote:
> I see the "Delete selected as Spam" button, but no "Remove registered user"
> button.

I guess deleting users requires full admin rights, so i guess, just make a list
of users which are in need of a deletion and post that and i or less likely
some other admin will disable/delete them. You and everyone else in the spam fighter group
can still do all other steps whenever you like.
Maybe we can find a easier solution at some point
also the absence of a single "delete everything a user did and delete her"
function seems like something trac should have but then spam has not been a
big issue previously

thx

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Its not that you shouldnt use gotos but rather that you should write
readable code and code with gotos often but not always is less readable

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1192 bytes --]

On Tue, Sep 12, 2023 at 01:11:56AM +0200, Michael Niedermayer wrote:
> On Mon, Sep 11, 2023 at 02:20:58PM +0200, Michael Koch wrote:
> > I see the "Delete selected as Spam" button, but no "Remove registered user"
> > button.
> 
> I guess deleting users requires full admin rights, so i guess, just make a list
> of users which are in need of a deletion and post that and i or less likely
> some other admin will disable/delete them. You and everyone else in the spam fighter group
> can still do all other steps whenever you like.
> Maybe we can find a easier solution at some point
> also the absence of a single "delete everything a user did and delete her"
> function seems like something trac should have but then spam has not been a
> big issue previously

Btw we can automate this with SQL if needed.
In case someone has a known to be safe and working command to clean out all
changes a user has made.
Otherwise i guess for now i leave the cleaning out to volunteers and
just do the user deletion.

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

No great genius has ever existed without some touch of madness. -- Aristotle

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Trac spam

[Michael Koch]

> I guess deleting users requires full admin rights, so i guess, just make a list
of users which are in need of a deletion and post that and i or less likely
some other admin will disable/delete them.

Please delete user "selune" in ticket 2104


> You and everyone else in the spam fighter group
can still do all other steps whenever you like.

I'm not sure if it makes any sense to use the "Delete selected as Spam" button,
if it only deletes the entry in the monitoring page (I have already done that).

Michael


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1137 bytes --]

On Tue, Sep 12, 2023 at 07:03:33AM +0200, Michael Koch wrote:
> > I guess deleting users requires full admin rights, so i guess, just make a list
> of users which are in need of a deletion and post that and i or less likely
> some other admin will disable/delete them.
> 
> Please delete user "selune" in ticket 2104

user selune and the ticket comment where deleted using:
trac-admin ffmpeg session delete selune
trac-admin ffmpeg ticket remove_comment 2104 14

(happy i figured these out as it faster than using a web browser)

Removing a user does not remove her comments

I think you should have the power to edit comments, if you want.
seperate comment deletion powers i think need a future trac version
otherwise, please provide ticket number + comment number pairs in the future
as thats what the tools want

thx for your spam fighting!

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Many things microsoft did are stupid, but not doing something just because
microsoft did it is even more stupid. If everything ms did were stupid they
would be bankrupt already.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

[FFmpeg-devel] Trac spam

[Michael Koch]

new spammer in ticket 2776
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 381 bytes --]

On Thu, Sep 07, 2023 at 06:20:07AM +0200, Michael Koch wrote:
> new spammer in ticket 2776

spammer killed and also everything else he did

thx

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Does the universe only have a finite lifespan? No, its going to go on
forever, its just that you wont like living in it. -- Hiranya Peiri

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

[FFmpeg-devel] Trac spam

[Michael Koch]

please remove the spammers from tickets 1920, 2104, 2776, 3720, 4748 and 
5154.

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 416 bytes --]

On Sun, Sep 03, 2023 at 02:39:54PM +0200, Michael Koch wrote:
> please remove the spammers from tickets 1920, 2104, 2776, 3720, 4748 and
> 5154.

removed what i found, not sure had the feeling someone else was also already
deleting them

thx

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Democracy is the form of government in which you can choose your dictator

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

[FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 900 bytes --]

Hi all

thilo pointed me to some spam on trac today, investigating i found a spammer
with 4 accounts who spammed ~6 tickets

thanks to the last update the permission for the admin page to delete users
seems to got a new name which slightly slowed me down.

I think i deleted all that spam.
If you see more spam, please report it. We do have a few people who
had spam filtering powers but iam not sure they are still aware of it
as there wasnt much previously. Iam also not sure if all the previosuly
needed permission names still are effective. So if you where previously
able to cleanup spam and it doesnt work anymore, say something!

Thx
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

In fact, the RIAA has been known to suggest that students drop out
of college or go to community college in order to be able to afford
settlements. -- The RIAA

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Thilo Borgmann]

Am 24.04.23 um 22:23 schrieb Michael Niedermayer:
> Hi all
> 
> thilo pointed me to some spam on trac today, investigating i found a spammer
> with 4 accounts who spammed ~6 tickets
> 
> thanks to the last update the permission for the admin page to delete users
> seems to got a new name which slightly slowed me down.
> 
> I think i deleted all that spam.
> If you see more spam, please report it. We do have a few people who
> had spam filtering powers but iam not sure they are still aware of it
> as there wasnt much previously. Iam also not sure if all the previosuly
> needed permission names still are effective. So if you where previously
> able to cleanup spam and it doesnt work anymore, say something!

Thank you, Michael!

-Thilo

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Koch]

please have a look at ticket 2104


_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] trac spam

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 389 bytes --]

On Mon, May 15, 2023 at 08:02:42AM +0200, Michael Koch wrote:
> please have a look at ticket 2104

cleaned up
thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Many things microsoft did are stupid, but not doing something just because
microsoft did it is even more stupid. If everything ms did were stupid they
would be bankrupt already.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".