Anonymous SPAM in issues on redmine.org

Added by Bernhard Rohloff about 1 month ago

Hi all,

I'm following the Redmine project for nearly 4 years and I crawl the issues and forums quite often.
What regularly catches my eyes is the fairly high amount of spam messages arriving the forums and issues.
And it's not only this stupid "Ey yo fella, view my crap HERE" bullshit. There are also guys adding political propaganda in issues as seen as a photo upload in #27122. In the forums its quite easy to track the modifications in threads, but in the issues module it's fairly untrackable. This shit stays there for THREE days right now. I'm very sad that a great open source community like Redmine has to deal with such sort of brain farts today.

I know that you are all hard working men and that nobody has it's eyes on everything, so is it really a great advantage to let "anonymous" users create or edit issues? It would be very interesting to see the number of how many "anonymous" users contribute to issues on redmine.org or if it would make sense to add a "report" button to the issues history. Was something like this discussed in the past?

As always, thanks for the great work!
You guys rock!

Bernhard

Replies (2)

RE: Anonymous SPAM in issues on redmine.org - Added by Mischa The Evil about 1 month ago

Bernhard Rohloff wrote:

[...]
What regularly catches my eyes is the fairly high amount of spam messages arriving the forums and issues.

In my view it is not that much, but it also seems to differ from time-to-time.

[...] as seen as a photo upload in #27122. In the forums its quite easy to track the modifications in threads, but in the issues module it's fairly untrackable. This shit stays there for THREE days right now. I'm very sad that a great open source community like Redmine has to deal with such sort of brain farts today.

I agree. Thanks for reporting this particular image. I'll delete it.

I know that you are all hard working men and that nobody has it's eyes on everything, [...]

Your're right. Sometimes things slip through. We're all just doing what we can.

[...] so is it really a great advantage to let "anonymous" users create or edit issues? It would be very interesting to see the number of how many "anonymous" users contribute to issues on redmine.org or if it would make sense to add a "report" button to the issues history. Was something like this discussed in the past?

AFAIK, anonymous users on redmine.org don't have the create or edit issues permissions. Anonymous contributions on redmine.org are probably left-overs from users a.) who have deleted their own account/profile b.) who were deleted by redmine.org admins. Though, I'm not aware of redmine.org's actual permissions set.
The exact (total) number of anonymous contributions are AFAICS not very much. In my view something around 10-20 per month. I'm not sure if anyone within the team is actually counting them.
A report function could be a handy feature I think. We can even use issues as a backend for such a feature, where the button links to the new issue form with the category pre-filled with redmine.org (website). This would also be my current suggestion if you want to report spam and/or other nasty stuff that needs to removed by the team members.
I can't remember any specific discussions about this subject in the past. But I might be wrong.

Kind regards,

Mischa.

RE: Anonymous SPAM in issues on redmine.org - Added by Bernhard Rohloff about 1 month ago

Hi Mischa,

thank you for your answer. The fact that the spam could be a leftover from a deleted user didn't came to my mind.
I will follow your advice and use the "website" category for future incidents.

Kind regards,

Bernhard

(1-2/2)