Newsgroups: php.internals,php.internals
Path: news.php.net
Xref: news.php.net php.internals:114336 php.internals:114337
To: Joe Watkins <krakjoe@php.net>, PHP internals <internals@lists.php.net>,
 PHP Release Managers <release-managers@php.net>
References: <CAOwTYAtOti3+Tv9Cu5fK6bQ3tjAibRHUWOctnQFfGJyaoQYExw@mail.gmail.com>
Reply-To: Alexander Kurilo <alex@kurilo.me>
Message-ID: <bbbfa159-405e-2325-f526-c0f30d077da5@kurilo.me>
Date: Mon, 10 May 2021 15:44:55 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
 Thunderbird/78.10.0
MIME-Version: 1.0
In-Reply-To: <CAOwTYAtOti3+Tv9Cu5fK6bQ3tjAibRHUWOctnQFfGJyaoQYExw@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US-large
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] Bugsnet
From: internals@lists.php.net ("Alexander Kurilo via internals")

On 09/05/2021 09:48, Joe Watkins wrote:
> Morning internals,
> 
> We have a spam problem on bugsnet, it's not a new problem. Nikita had to
> waste time deleting 20 odd messages from bugsnet yesterday and this is a
> common, daily occurrence. We clearly don't have time for this.
> 
> Quite aside from spam problems, bugsnet is hidden away in a dark corner of
> the internet that requires a special login, doesn't integrate with source
> code or our current workflow (very nicely), and doesn't get updated or
> developed.


So, there are 2 distinct issues: spam from bugsnet (this one can be 
mitigated by replacing current "solve a problem" challenge by something 
more sophisticated) and the bugsnet itself being a burden (which can't 
be solved quickly).

Let's separate the two: this way we can have kill the spam in the short 
term and get enough time to shape out the migration plan if there's a 
consensus on the matter.

What about integrating [recaptcha][1] for now? Integration is rather 
simple but there are other concerns, e.g. a third-party JS code on the 
page that accepts security issues.

If it sounds like a way to go, I can help with the integration. Thanks 
to [Dan Ackroyd's pull request][2], setting up environment for torturing 
bugsnet locally is a no-brainer.

[1]: https://www.google.com/recaptcha/about/
[2]: https://github.com/php/web-bugs/pull/91