SUMO community discussions

[Attn Admin] Too much spam

  1. I thought new users couldn't generate so many posts so quickly? I feel sorry for the unsuspecting users getting such nasty notifications.

    I thought new users couldn't generate so many posts so quickly? I feel sorry for the unsuspecting users getting such nasty notifications.
  2. Hey jscher2000,

    I have already taken care of it. I believe I sent you a PM regarding it.

    Hey jscher2000, I have already taken care of it. I believe I sent you a PM regarding it.
  3. I will mark this as [Attn Admin]

    There is also a related thread in the private moderators forum /forums/forum-moderators/709969 Thanks for flagging the spam for attention.

    The posters concerned are no longer active on the forum.

    I will mark this as [Attn Admin] There is also a related thread in the private moderators forum [/forums/forum-moderators/709969] Thanks for flagging the spam for attention. The posters concerned are no longer active on the forum.
  4. He's back. https://support.mozilla.org/user/1051904
  5. Deactivated. Keep us updated in this thread so we can deactivate him again.

    Will get in touch with Admins.

    Deactivated. Keep us updated in this thread so we can deactivate him again. Will get in touch with Admins.
  6. Hello! How many posts were generated in what time frame and where?

    Thanks!

    Hello! How many posts were generated in what time frame and where? Thanks!
  7. Ricky

    You mean you do not log post deletions ?

    You could look at the user deactivation log and at least see the number of users deactivated.

    Also see comments in the private Mods forum. That may give you some order of magnitude clues.

    Ricky You mean you do not log post deletions ? You could look at the user deactivation log and at least see the number of users deactivated. Also see comments in the private Mods forum. That may give you some order of magnitude clues.
  8. John99 said

    Ricky You mean you do not log post deletions ?

    Correct.

    Also see comments in the private Mods forum. That may give you some order of magnitude clues.

    Will do.

    Thanks.

    ''John99 [[#post-57121|said]]'' <blockquote> Ricky You mean you do not log post deletions ? </blockquote> Correct. <blockquote> Also see comments in the private Mods forum. That may give you some order of magnitude clues. </blockquote> Will do. Thanks.

    Modified by Moses on

  9. Hmm, I read through the posts and I can't tell where the spammers were spamming. Was it here in the discussion forums or in the support forum?

    Hmm, I read through the posts and I can't tell where the spammers were spamming. Was it here in the discussion forums or in the support forum?
  10. Ricky.

    I was the one who took down all the spam posts and deactivated three users, there were probably about 10-15 post each regarding Hitler and blows at current and past Mozilla employees, and Australis' design.

    The posts were in the support forum on various threads. Here is the info from a thread i started in Mods about it:
    If anyone wants to see what they wrote:

    http://pastebin.com/CSsaEys4 belongs to user https://support.mozilla.org/en-US/user/1046723

    http://pastebin.com/vLeD89FW belongs to user https://support.mozilla.org/en-US/user/1051846

    Also, when I last checked, the threads were about 5-10 minutes apart. I could be wrong but that's what I saw before I deleted posts.


    https://support.mozilla.org/en-US/forums/forum-moderators/709969 is the thread I started.

    Ricky. I was the one who took down all the spam posts and deactivated three users, there were probably about 10-15 post each regarding Hitler and blows at current and past Mozilla employees, and Australis' design. The posts were in the support forum on various threads. Here is the info from a thread i started in Mods about it:<br /> If anyone wants to see what they wrote:<br /> <br /> http://pastebin.com/CSsaEys4 belongs to user https://support.mozilla.org/en-US/user/1046723<br /> <br /> http://pastebin.com/vLeD89FW belongs to user https://support.mozilla.org/en-US/user/1051846 Also, when I last checked, the threads were about 5-10 minutes apart. I could be wrong but that's what I saw before I deleted posts. ---- https://support.mozilla.org/en-US/forums/forum-moderators/709969 is the thread I started.

    Modified by Moses on

  11. I saw two replies in one thread within a minute of one another, posts coming in every minute or so. I didn't study it carefully, just flagging them as I saw them.

    I saw two replies in one thread within a minute of one another, posts coming in every minute or so. I didn't study it carefully, just flagging them as I saw them.
  12. In case it helps, here are links to some of these spam posts from one thread I was watching, which are still in my email:

    (Desarallados 2/4/2014 2:10 PM) https://support.mozilla.org/questions/980127?page=5&#answer-529994

    (Desarallados 2/4/2014 2:11 PM) https://support.mozilla.org/questions/980127?page=5&#answer-529997

    (Desarallados 2/4/2014 2:13 PM) https://support.mozilla.org/questions/980127?page=5&#answer-529999

    (Desarallados 2/4/2014 2:19 PM) https://support.mozilla.org/questions/980127?page=5&#answer-530007

    (Exor-zist 2/4/2014 2:53 PM) https://support.mozilla.org/questions/980127?page=5&#answer-530039

    (Content in different languages, "Australis is for children, developed Mozilla UX ...." then a ton of profanity, Mozilla developer names, more profanity) Then the next post in that thread:

    (Calhoun 2/4/2014 3:53 PM) https://support.mozilla.org/questions/980127?page=5&#answer-530039
    (Content: "Hey! I am Gaywin Ass-Harp, one of the Cool Chrome Clone browser Devs of Mozilla!" then "And we love Aldof Hilter! Seig Hiel! Seig Hiel! .....")

    P.S. Here's a post from "Exor-zist" from another thread, from Google's cache, I found searching on ""Australis is for children, developed Mozilla UX". It was the first reply in the thread, posted 2 hours 20 minutes after the OP posted his question: https://support.mozilla.org/en-US/questions/985373#answer-530017 Checking that thread, jscher2000 has since posted a new reply, /questions/985373#answer-530044 and the answer from "Exor-zist" is now gone.

    In case it helps, here are links to some of these spam posts from one thread I was watching, which are still in my email: (Desarallados 2/4/2014 2:10 PM) https://support.mozilla.org/questions/980127?page=5&#answer-529994 (Desarallados 2/4/2014 2:11 PM) https://support.mozilla.org/questions/980127?page=5&#answer-529997 (Desarallados 2/4/2014 2:13 PM) https://support.mozilla.org/questions/980127?page=5&#answer-529999 (Desarallados 2/4/2014 2:19 PM) https://support.mozilla.org/questions/980127?page=5&#answer-530007 (Exor-zist 2/4/2014 2:53 PM) https://support.mozilla.org/questions/980127?page=5&#answer-530039 (Content in different languages, "Australis is for children, developed Mozilla UX ...." then a ton of profanity, Mozilla developer names, more profanity) Then the next post in that thread: (Calhoun 2/4/2014 3:53 PM) https://support.mozilla.org/questions/980127?page=5&#answer-530039 <br> (Content: "Hey! I am Gaywin Ass-Harp, one of the Cool Chrome Clone browser Devs of Mozilla!" then "And we love Aldof Hilter! Seig Hiel! Seig Hiel! .....") P.S. Here's a post from "Exor-zist" from another thread, from Google's cache, I found searching on ""Australis is for children, developed Mozilla UX". It was the first reply in the thread, posted 2 hours 20 minutes after the OP posted his question: https://support.mozilla.org/en-US/questions/985373#answer-530017 Checking that thread, jscher2000 has since posted a new reply, [/questions/985373#answer-530044] and the answer from "Exor-zist" is now gone.

    Modified by AliceWyman on

  13. Ricky Rosario said

    John99 said
    Ricky You mean you do not log post deletions ?

    Correct.

    Open bug:

    • Bug 939938 - Create a log for post and thread deletions

    ...which links to:

    ...which links to:

    ...where cor-el said:

    We now have a log for deactivated users and there will probably other logs created. How about one log for all different log actions that can be filtered via selection check-boxes to show specific actions and possibly a date range selection via a calendar and sortable via column headers.
    Then only one database would have to be maintained and it is easy to expand the log to include more actions and have all logs accessible via one page instead of separate logs and pages for each action. Actions could include:
    • deactivated users
    • deleted threads
    • deleted replies
    • flagged content that has been handled and now longer shows as flagged
    • solutions mutation (solved and undo actions)
    If there are already existing other logs then those could be included as well. How many entries will there be on one page?
    Hundred or less or customizable?
    ''Ricky Rosario [[#post-57123|said]]'' <blockquote> ''John99 [[#post-57121|said]]'' <blockquote> Ricky You mean you do not log post deletions ? </blockquote> Correct. </blockquote> Open bug: *[https://bugzilla.mozilla.org/show_bug.cgi?id=939938 Bug 939938] - Create a log for post and thread deletions ...which links to: *[/forums/contributors/709554] Log who deleted what ...which links to: *[/forums/forum-moderators/709799] Discussion about the new Deactivation log page ... and other actions to log ...where cor-el said: <blockquote> We now have a log for deactivated users and there will probably other logs created. *Bug 907660 - Add log for user deactivations *https://support.mozilla.org/users/deactivation_log How about one log for all different log actions that can be filtered via selection check-boxes to show specific actions and possibly a date range selection via a calendar and sortable via column headers.<br /> Then only one database would have to be maintained and it is easy to expand the log to include more actions and have all logs accessible via one page instead of separate logs and pages for each action. Actions could include: * deactivated users * deleted threads * deleted replies * flagged content that has been handled and now longer shows as flagged * solutions mutation (solved and undo actions) If there are already existing other logs then those could be included as well. How many entries will there be on one page?<br /> Hundred or less or customizable? </blockquote>
  14. There is currently an Older button on the deactivation_log page, so the limit appears to be 50 entries per page.

    Do we need that much padding (padding:10px) on that page?

    #deactivations-log td {padding:1px 10px!important}
    
    There is currently an Older button on the deactivation_log page, so the limit appears to be 50 entries per page. Do we need that much padding (padding:10px) on that page? #deactivations-log td {padding:1px 10px!important}
  15. Latest bug after another mass spamming

    I guess we need Madalina to get behind any new bugs* so they stand a chance of being put in sprints and actioned. At present we seem to have gone in a circle with only some bugs fixed.

    * New bugs Kadir said 30th Jan
    With new features it's usually something that goes through the champion of a certain area. In case of the forums that's Madalina. If you have feature requests, you should talk to her first, then file a bug and I'll take care of making sure it's implemented soon.

    This is thread is currently marked [Attn Admin] so hopefully Madalina will pick this up and comment.

    Latest bug after another mass spamming * [https://bugzilla.mozilla.org/show_bug.cgi?id=970057 Bug 970057 - Option to mass-delete users' posts ] I guess we need Madalina to get behind any new bugs* so they stand a chance of being put in sprints and actioned. At present we seem to have gone in a circle with only some bugs fixed. * The mass delete bug will need to to be put in a sprint. * We have no active bug to log post deletions. (Or better still archive them ) <br /> [https://bugzilla.mozilla.org/show_bug.cgi?id=939938 Bug 939938 - Create a log for post and thread deletions ] is unassigned and no sprint or whiteboard markings. * New bugs Kadir said [https://support.mozilla.org/en-US/forums/contributors/709814?esab=a&s=champion&r=0&as=s#post-56861 30th Jan] <blockquote> With new features it's usually something that goes through the champion of a certain area. In case of the forums that's Madalina. If you have feature requests, you should talk to her first, then file a bug and I'll take care of making sure it's implemented soon. </blockquote> This is thread is currently marked [Attn Admin] so hopefully Madalina will pick this up and comment.
  16. John99 said

    Latest bug after another mass spamming I guess we need Madalina to get behind any new bugs* so they stand a chance of being put in sprints and actioned.<snip>
    I cc:d madalina on those two bugs and posted a comment with a link to this discussion.
    ''John99 [[#post-57292|said]]'' <blockquote> Latest bug after another mass spamming * [https://bugzilla.mozilla.org/show_bug.cgi?id=970057 Bug 970057 - Option to mass-delete users' posts ] I guess we need Madalina to get behind any new bugs* so they stand a chance of being put in sprints and actioned.<snip> *<snip> <br>[https://bugzilla.mozilla.org/show_bug.cgi?id=939938 Bug 939938 - Create a log for post and thread deletions ] is unassigned and no sprint or whiteboard markings.</blockquote> I cc:d madalina on those two bugs and posted a comment with a link to this discussion.
  17. To summarize what I think happened:

    • one ore more users wrote posts that were insulting Mozilla employees or were spam
    • Those posts were (primarily) written as replies to existing questions in the support forum.
    • There were about 25 of those posts within a short time frame.

    If that observation is correct: That's well within our rate limiting. Those limits protect us against bots flooding the forums and making them unusable, but can't prevent individuals from causing damage. Specifically, we are limiting new questions to 5 a day and replies to 4 per minute and 100 total per day. Not enough for a bot to cause big damage, but apparently enough for a driven individual to cause some damage. That's the kind of balance we have to strike to keep the forums open for new contributors. Of course, we can make it easier to clean up the mess these spammers cause.

    To summarize what I think happened: * one ore more users wrote posts that were insulting Mozilla employees or were spam * Those posts were (primarily) written as replies to existing questions in the support forum. * There were about 25 of those posts within a short time frame. If that observation is correct: That's well within our rate limiting. Those limits protect us against bots flooding the forums and making them unusable, but can't prevent individuals from causing damage. Specifically, we are limiting new questions to 5 a day and replies to 4 per minute and 100 total per day. Not enough for a bot to cause big damage, but apparently enough for a driven individual to cause some damage. That's the kind of balance we have to strike to keep the forums open for new contributors. Of course, we can make it easier to clean up the mess these spammers cause.
  18. AliceWyman said

    John99 said
    Latest bug after another mass spamming I guess we need Madalina to get behind any new bugs* so they stand a chance of being put in sprints and actioned.<snip>
    I cc:d madalina on those two bugs and posted a comment with a link to this discussion.

    Just to clarify, I as a forum champion can only comment if I agree on a feature or not and give the green light for it.

    We will still need sumo-dev to decide if something is feasible from a technical point of view (and doesn't break anything) and also Kadir, as a project manager, to assign, prioritize and schedule the sprints.

    So all of us will always need to be in the loop as we cannot do anything one without the other.

    Alice, I see the bugs you mention are essentially both blocked so let's see how that evolves.

    ''AliceWyman [[#post-57293|said]]'' <blockquote> ''John99 [[#post-57292|said]]'' <blockquote> Latest bug after another mass spamming * [https://bugzilla.mozilla.org/show_bug.cgi?id=970057 Bug 970057 - Option to mass-delete users' posts ] I guess we need Madalina to get behind any new bugs* so they stand a chance of being put in sprints and actioned.<snip> *<snip> <br>[https://bugzilla.mozilla.org/show_bug.cgi?id=939938 Bug 939938 - Create a log for post and thread deletions ] is unassigned and no sprint or whiteboard markings.</blockquote> I cc:d madalina on those two bugs and posted a comment with a link to this discussion. </blockquote> Just to clarify, I as a forum champion can only comment if I agree on a feature or not and give the green light for it. We will still need sumo-dev to decide if something is feasible from a technical point of view (and doesn't break anything) and also Kadir, as a project manager, to assign, prioritize and schedule the sprints. So all of us will always need to be in the loop as we cannot do anything one without the other. Alice, I see the bugs you mention are essentially both blocked so let's see how that evolves.

    Modified by Madasan on

  19. Madasan said

    <snip> ... Just to clarify, I as a forum champion can only comment if I agree on a feature or not and give the green light for it.

    We will still need sumo-dev to decide if something is feasible from a technical point of view (and doesn't break anything) and also Kadir, as a project manager, to assign, prioritize and schedule the sprints.

    So all of us will always need to be in the loop as we cannot do anything one without the other.

    Alice, I see the bugs you mention are essentially both blocked so let's see how that evolves.

    Madalina,
    Are you not able to coordinate this effort with other stakeholders and get some action.
    As it stands

    • Things may get sorted within a couple of sprints
    • Or may evolve
      That sounds like a euphemism meaning hang on another for a couple of years again being discussed without any effective action being taken. Then the cycle begins from scratch and repeats the same discussions again.

    At least Bug 939938 although unasigned is now pencilled in for sprint 2014.5

    Evolution requires pressure & selection. Dead bugs do not evolve!

    As I understand it

    • Devs are asking have we
      • identified the problems needing solutions
      • and have we got any metrics.
    • Kadir as project manager has indicated the forum Champion needs to approve and push bugs
    • Blocked bugs are blocked for a specific reason i.e. another outstanding bug
      • In that case the outstanding bug needs addressing urgently, and we need plans for whatever the resulting metrics.
      • OR we re-analyse the situation and find an alternative strategy or solution
        AND then take action to move quickly in that direction filing new bugs if necessary
      • I have already suggested a three tier rate limiting. That avoids the problem of adaptive limiting.
      • Alice has linked to a prior thread suggesting we delay sending email notifications. OR send emails that link back but do not copy potential spam. (In this context spam is any content posted by a spammer. I am NOT suggesting software rules detect and identify spam )

    What are our plans ?


    BUG LIST with comments

    1. Bug 726941 - Add a way to Close SUMO account reopened and assigned sprint 2014.3 IMPORTANT first comment #c1
      Technically, we don't ever delete accounts anymore. It caused a big pile of issues. If a user really wants their data gone we will anonymize it so it's not their data anymore. We'll respect that wish the first time, though.
      (My Comment does that mean & emphasise we do NOT delete posts, or it could cause problems ? )
      Opened Feb 2012 Wontfixed with above comment. Reopened Sept 2013
    2. Bug 783707 - Add feature to disable posting ability of forum users fixed Feb 2013
    3. Bug 928400 - Rate limiting should be based on Karma points not asigned (backlog)
    4. Bug 907660 - Add log for user deactivations fixed Nov2013 links to bug Bug 944344
    5. Bug 944344 - Add links to profiles in deactivation log fixed Dec 2013
    6. Bug 958915 - Kill user session when deactivating users fixed Jan 2014
    7. Bug 969271 - Track whether people are reading forum emails may be heading to wontfix
      The primary purpose of this bug is relating to feedback. Would it also generate metrics useful when evaluating spam impact ?
    8. Bug 939938 - Create a log for post and thread deletions this blocks bug 970057 & bug972830 sprint 2014.5
      We do already have the deactivations logged, and we manually log some thread deletions
    9. Bug 970057 - Option to mass-delete users' posts NOT in sprint/assigned

    RelatedThreads

    1. Email notifications quote spam/offensive content /forums/contributors/708381 May 2012
    2. Allow users to deactivate their own account? /forums/contributors/709597 Aug 2013 links bug726941
    3. [ATTN Admin] user profile of user "onmouse" needs editing (HTML code) Oct 2013 /forums/forum-moderators/709673
      • This is a private forum. includes the following:
        /users/deactivation_log (Mods only link)
        Bug 783707 - Add feature to disable posting ability of forum users
        This would be a interim solution to stopping a massive spam attack when no admins were around. Then on the next working day, a admin could review the blocked users & delete their accounts or issue warnings
        other bugs
        Bug 907660 - Add log for user deactivations
        Bug 944344 - Add links to profiles in deactivation log
        Bug 958915 -Kill user session when deactivating users
    4. [Attn Admin] Mass spam postings (15+ answers total) Feb 2014
      (Private forum) /forums/forum-moderators/709969
      This is a multi page thread currently with 40 replies within a few days
      That alone is an indication of the extent of the spam problem
    ''Madasan [[#post-57446|said]]'' <blockquote> <snip> ... Just to clarify, I as a forum champion can only comment if I agree on a feature or not and give the green light for it. <br /> <br /> We will still need sumo-dev to decide if something is feasible from a technical point of view (and doesn't break anything) and also Kadir, as a project manager, to assign, prioritize and schedule the sprints. <br /><br /> So all of us will always need to be in the loop as we cannot do anything one without the other. <br /><br /> Alice, I see the bugs you mention are essentially both blocked so let's see how that evolves. </blockquote> Madalina, <br />Are you not able to coordinate this effort with other stakeholders and get some action. <br />As it stands *Things may get sorted within a couple of sprints *Or may evolve <br /> That sounds like a euphemism meaning hang on another for a couple of years again being discussed without any effective action being taken. Then the cycle begins from scratch and repeats the same discussions again. At least Bug 939938 although unasigned is now pencilled in for sprint 2014.5 ===Evolution requires pressure & selection. Dead bugs do not evolve! === As I understand it *Devs are asking have we **identified the problems needing solutions **and have we got any metrics. * Kadir as project manager has indicated the forum Champion needs to approve and push bugs * Blocked bugs are blocked for a specific reason i.e. another outstanding bug ** In that case the outstanding bug needs addressing urgently, and we need plans for whatever the resulting metrics. ** OR we re-analyse the situation and find an alternative strategy or solution <br />AND then take action to move quickly in that direction filing new bugs if necessary ** I have already suggested a three tier rate limiting. That avoids the problem of adaptive limiting. ** Alice has linked to a prior thread suggesting we delay sending email notifications. OR send emails that link back but do not copy '''potential''' spam. (In this context spam is any content posted by a spammer. I am NOT suggesting software rules detect and identify spam ) '''What are our plans ?''' ------ ===Related bugs=== BUG LIST with comments #[https://bugzilla.mozilla.org/show_bug.cgi?id=726941 Bug 726941] - Add a way to Close SUMO account reopened and assigned sprint 2014.3 '''IMPORTANT''' first comment #c1 <br /> ''Technically, we don't ever delete accounts anymore. It caused a big pile of issues. If a user really wants their data gone we will anonymize it so it's not their data anymore. We'll respect that wish the first time, though.'' <br /> (My Comment does that mean & emphasise we do NOT delete posts, or it could cause problems ? ) <br /> Opened Feb 2012 Wontfixed with above comment. Reopened Sept 2013 #[https://bugzilla.mozilla.org/show_bug.cgi?id=783707 Bug 783707] - Add feature to disable posting ability of forum users fixed Feb 2013 #[https://bugzilla.mozilla.org/show_bug.cgi?id=928400 Bug 928400] - Rate limiting should be based on Karma points not asigned (backlog) #[https://bugzilla.mozilla.org/show_bug.cgi?id=907660 Bug 907660] - Add log for user deactivations fixed Nov2013 links to bug Bug 944344 #[https://bugzilla.mozilla.org/show_bug.cgi?id=944344 Bug 944344] - Add links to profiles in deactivation log fixed Dec 2013 #[https://bugzilla.mozilla.org/show_bug.cgi?id=958915 Bug 958915] - Kill user session when deactivating users fixed Jan 2014 #[https://bugzilla.mozilla.org/show_bug.cgi?id=969271 Bug 969271] - Track whether people are reading forum emails may be heading to wontfix <br /> The primary purpose of this bug is relating to feedback. Would it also generate metrics useful when evaluating spam impact ? #[https://bugzilla.mozilla.org/show_bug.cgi?id=939938 Bug 939938] - '''Create a log for post and thread deletions this blocks''' bug 970057 & bug972830 sprint 2014.5 <br /> We do already have the deactivations logged, and we manually log some thread deletions #[https://bugzilla.mozilla.org/show_bug.cgi?id=970057 Bug 970057] - Option to mass-delete users' posts NOT in sprint/assigned === RelatedThreads=== #''Email notifications quote spam/offensive content'' [/forums/contributors/708381] May 2012 #''Allow users to deactivate their own account?'' [/forums/contributors/709597] Aug 2013 links bug726941 #[ATTN Admin] user profile of user "onmouse" needs editing (HTML code) Oct 2013 [/forums/forum-moderators/709673] #*This is a private forum. includes the following: <br /> /users/deactivation_log (Mods only link) <br /> Bug 783707 - Add feature to disable posting ability of forum users <br /> This would be a interim solution to stopping a massive spam attack '''when no admins were around. Then on the next working day, a admin''' could review the blocked users & delete their accounts or issue warnings <br /> other bugs <br /> Bug 907660 - Add log for user deactivations <br /> Bug 944344 - Add links to profiles in deactivation log <br /> Bug 958915 -Kill user session when deactivating users #''[Attn Admin] Mass spam postings (15+ answers total)'' Feb 2014 <br />(Private forum) [/forums/forum-moderators/709969] <br /> This is a multi page thread currently with 40 replies within a few days<br /> That alone is an indication of the extent of the spam problem
  20. I see they have been spamming again, and I think we have just missed an easy opportunity to solve this issue.

    I see they have been spamming again, and I think we have just missed an easy opportunity to solve this issue. * [https://bugzilla.mozilla.org/show_bug.cgi?id=972269#c3 Bug972269#c3]
  1. 1
  2. 2