FS#63087 - We need better ways to delete spam
Attached to Project:
AUR web interface
Opened by Eli Schwartz (eschwartz) - Wednesday, 03 July 2019, 14:02 GMT
Last edited by Eli Schwartz (eschwartz) - Wednesday, 03 July 2019, 15:39 GMT
Opened by Eli Schwartz (eschwartz) - Wednesday, 03 July 2019, 14:02 GMT
Last edited by Eli Schwartz (eschwartz) - Wednesday, 03 July 2019, 15:39 GMT
|
Details
cf. the current waves of spam comments that are percolating
throughout the AUR, and related to
FS#51319
which asks for ways to report such abuse.
Manually deleting each comment and suspending/deleting the user is unwieldy. We should be able to do better. Proposal: Instead of just having the option to "Click here if you want to permanently delete this account", we should additionally have a TU button "click here to delete this account as spam". The button should also: - delete comments instead of leaving them orphaned as "anonymous" (fully delete, don't leave them in the db to be visible to TUs looking at the package details), - blacklist the IP to prevent more spam from the same IP address, - flag any other account using the same IP for manual review, e.g. displaying account names and comments. |
This task depends upon
think about VPN services, university networks, or provider NATs.
My experience shows that spammers rarely come from the same IPs and EXPECT to get blacklisted, so they move on to new IPs very regularly. My current blacklist counter shows very few return hits from a blacklisted IP after a few days, so the act of blacklisting is only good for a very short period of time, while a blacklisted IP shared by potentially thousands of users (VPN services, for example) should flag messages for review rather than reject them outright.
My $0.02
In addition, you would have a better filter.