Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:114339
To: internals@lists.php.net
References: <CAOwTYAtOti3+Tv9Cu5fK6bQ3tjAibRHUWOctnQFfGJyaoQYExw@mail.gmail.com>
 <bbbfa159-405e-2325-f526-c0f30d077da5@kurilo.me>
Message-ID: <addf0977-c650-69a2-a5cb-2956542fc909@heigl.org>
Date: Mon, 10 May 2021 15:39:30 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
 Thunderbird/78.8.1
MIME-Version: 1.0
In-Reply-To: <bbbfa159-405e-2325-f526-c0f30d077da5@kurilo.me>
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="UsZN33VlFT3LIcQGa57GYeGr9UTuwehIk"
Subject: Re: [PHP-DEV] Bugsnet
From: andreas@heigl.org (Andreas Heigl)

--UsZN33VlFT3LIcQGa57GYeGr9UTuwehIk
Content-Type: multipart/mixed; boundary="SaES4YZplfDqnHcqVLq9T0W2V3naj1GHA";
 protected-headers="v1"
From: Andreas Heigl <andreas@heigl.org>
To: internals@lists.php.net
Message-ID: <addf0977-c650-69a2-a5cb-2956542fc909@heigl.org>
Subject: Re: [PHP-DEV] Bugsnet
References: <CAOwTYAtOti3+Tv9Cu5fK6bQ3tjAibRHUWOctnQFfGJyaoQYExw@mail.gmail.com>
 <bbbfa159-405e-2325-f526-c0f30d077da5@kurilo.me>
In-Reply-To: <bbbfa159-405e-2325-f526-c0f30d077da5@kurilo.me>

--SaES4YZplfDqnHcqVLq9T0W2V3naj1GHA
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Hey All

Am 10.05.21 um 14:44 schrieb Alexander Kurilo via internals:
> On 09/05/2021 09:48, Joe Watkins wrote:
>> Morning internals,
>>
>> We have a spam problem on bugsnet, it's not a new problem. Nikita had =
to
>> waste time deleting 20 odd messages from bugsnet yesterday and this is=
 a
>> common, daily occurrence. We clearly don't have time for this.
>>
>> Quite aside from spam problems, bugsnet is hidden away in a dark
>> corner of
>> the internet that requires a special login, doesn't integrate with sou=
rce
>> code or our current workflow (very nicely), and doesn't get updated or=

>> developed.
>=20
>=20
> So, there are 2 distinct issues: spam from bugsnet (this one can be
> mitigated by replacing current "solve a problem" challenge by something=

> more sophisticated) and the bugsnet itself being a burden (which can't
> be solved quickly).
>=20
> Let's separate the two: this way we can have kill the spam in the short=

> term and get enough time to shape out the migration plan if there's a
> consensus on the matter.
>=20
> What about integrating [recaptcha][1] for now? Integration is rather
> simple but there are other concerns, e.g. a third-party JS code on the
> page that accepts security issues.

If so, can we please use something else? Implementing a Honeypot or a
simple math-captcha isn't that complicated (and I assume that a person
that can provide a decent bug description can also solve a riddle like
"Enter the result of 7 plus 2")

Thanks!

Andreas
--=20
                                                              ,,,
                                                             (o o)
+---------------------------------------------------------ooO-(_)-Ooo-+
| Andreas Heigl                                                       |
| mailto:andreas@heigl.org                  N 50=C2=B022'59.5" E 08=C2=B0=
23'58" |
| https://andreas.heigl.org                                           |
+---------------------------------------------------------------------+
| https://hei.gl/appointmentwithandreas                               |
+---------------------------------------------------------------------+


--SaES4YZplfDqnHcqVLq9T0W2V3naj1GHA--

--UsZN33VlFT3LIcQGa57GYeGr9UTuwehIk
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEOHo7et0VdZk8RJK34Ff+SCK3tkUFAmCZN5IACgkQ4Ff+SCK3
tkUmRhAAsFg/2U4rQc3AFJYAMBkwImm+L5si0FZ025Tr2yNg94gKbTjf147KU/UL
wSeBg8q6CX/IID3H+KxyxiUU0w6tOw6KWu8/lEGZpEVexl8PkPawQIcn5DkNmlpr
T2GKzZNni82qsYzOgMnIJE4rafWmEgaVpxh9MH0Bp5vfvSDymgLXsorLRM4UzDsu
q2cNqfh3NgfNpvBf6nGEOEtQI9XN7FXKNdgdJqP7lGbXVHjbX+YUf8RPjZREvFqU
oQOs9qV7AKdjZ0WA2YLr8d+kDfjNi7Tmrf+erWzXEjQvO6WAtn2sZO8IJxgMQAwL
iXHn9pKhQPe/njOo5DfFqBJ2+5bq89h2Y9aVUJ1TDZJ/qclvHhDgf676jjCkQs7+
rgjv0GLkRF3/CVfPVS6yimv2OK9P0Bwm+TiG4QUU8huNpZc1vK1AXL5GkiljzMxt
7xQbqxkPJukzPFqGE3K1+JeJmL6A2zHXAmJP0sP+SNJap30kSD9RCIA4vgne2YLz
rzOYXzv53m/Po++FO8BL/D57QGX+Wsk/LP3sEDW8ovyhdrngb+WLVj3WgV0+vHIv
LUB7jyoghU+NMPyIjLD61AKn/V1/2oSTyuZD+J+UNXsp6b9A3eGvDK92hrrIYmDB
Zz+iFATpTKCCdxNEA0+SJXIayXkGrUFgP53phjlB6AQv9E+hP0U=
=b5p/
-----END PGP SIGNATURE-----

--UsZN33VlFT3LIcQGa57GYeGr9UTuwehIk--