Welcome your new wiki overlord (?)

Discussion about the site's wikis, including bugs/issues encountered.

Moderator: Moderators

Post Reply
User avatar
Banshaku
Posts: 2417
Joined: Tue Jun 24, 2008 8:38 pm
Location: Japan
Contact:

Welcome your new wiki overlord (?)

Post by Banshaku »

The user creation spam seems to be trendy these days. Since we are a small community and we need to authorize one user at a time, I want to propose a new rule that will stop the spamming completely: normal user creation is removed and becomes on invite only.

Some people may thing that it may be drastic but if you really think about it, we are a small community and if you don't have a nesdev account, you cannot write on the wiki. Which mean usually the relationship with the BBS and the wiki is 1 to 1.

If people are fine with it, this is just one simple setup to change. After that, users that want an account request the wiki admins and we will create the account with a temporary password.

Are you ready to welcome your new wiki overlord? ;)
User avatar
Zepper
Formerly Fx3
Posts: 3262
Joined: Fri Nov 12, 2004 4:59 pm
Location: Brazil
Contact:

Post by Zepper »

I tried to alert everyone... :(

Absolutely agreed.
tepples
Posts: 22705
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Post by tepples »

As long as there's more than one admin responsible for creating accounts. I've seen too many cases where a wiki or forum that I want to join has closed sign-up and no obvious way to contact an administrator.

There are MediaWiki extensions to use phpBB login, but with two problems: 1. most of them require phpBB 3, and 2. I don't know if any of them support a minimum post count.

I'm going to do an experiment on my own wiki over the next week, involving the AbuseFilter extension, to see if I can figure out how to thin out the new user spam in Recent Changes.
User avatar
Banshaku
Posts: 2417
Joined: Tue Jun 24, 2008 8:38 pm
Location: Japan
Contact:

Post by Banshaku »

@Zepper

I saw this thread, I was just too busy to comment on the subject. Sorry about that. Now I want to do something about it.
tepples wrote:As long as there's more than one admin responsible for creating accounts. I've seen too many cases where a wiki or forum that I want to join has closed sign-up and no obvious way to contact an administrator.
I see your point but in our current state, we need to put new users in the trusted group,which mean if all admin disappear, the problem you mention would still occur. If all 4 of us are gone, that would be a major blow to nesdev ;) You shouldn't worry too much about that scenario. Worst case, people can extract the xml and start a new wiki.
User avatar
Zepper
Formerly Fx3
Posts: 3262
Joined: Fri Nov 12, 2004 4:59 pm
Location: Brazil
Contact:

Post by Zepper »

Banshaku wrote:@Zepper

I saw this thread, I was just too busy to comment on the subject. Sorry about that. Now I want to do something about it.
Thank you. It's incredible how futile my warning was... :|
User avatar
Banshaku
Posts: 2417
Joined: Tue Jun 24, 2008 8:38 pm
Location: Japan
Contact:

Post by Banshaku »

Since there is not that much activity in this thread, I guess people don't mind about it. I will see what I can do with Tepples.
Karatorian
Posts: 76
Joined: Sun Sep 30, 2007 9:54 pm
Location: Corneria
Contact:

Post by Karatorian »

The angle Tepples mentioned of automagically tying wiki accounts to BB accounts would be the best solution if it can be made to work.
tepples
Posts: 22705
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Post by tepples »

Until we can replace the phpBB 2 board with a phpBB 3 board so that we can unify login, I have a short list of extensions I'd like installed: SpecialInterwiki, AntiSpoof, and AbuseFilter. I've been using these extensions to help control spam on my own wiki, and I've been working on an ABUSE filter rule that cuts user creation log pollution in half.

Another question: Do we want to block all users in Asia? I've been told that a user living in Japan can no longer edit.
User avatar
Banshaku
Posts: 2417
Joined: Tue Jun 24, 2008 8:38 pm
Location: Japan
Contact:

Post by Banshaku »

@Tepple

You misunderstood my pm: I cannot access the SSH server for updating the wiki application from a non static asian IP because of the current security rule to protect the server. When I need to do so, I ask Koitsu to allow my current IP.

Filter won't be of any help since we have a rule of nobody can create contents until they are approved. So "approving a user on the bbs then creating an account by the wiki admin" or the "user ask us to be in the trusted group then the admin add him to that group" is the same thing, just written differently. The first way, there is no possible way to make spam at all. I just don't want to go back to the recapcha thing again.

Until we have phpBB 3 installed AND some rule to avoid spammer in the first place, my solution in the simplest and can be effective right away. Adding a single sign-on is nice but without proper spamming rule we are just going to open the Wiki to spamming again and I don't want to go back to that since these days I don't have much time to admin it, thus the current issue at hand.
User avatar
Banshaku
Posts: 2417
Joined: Tue Jun 24, 2008 8:38 pm
Location: Japan
Contact:

Post by Banshaku »

Update:

Because of the current spam trend, the wiki registration has been disabled until we find a more appropriate solution.

If you need an account, please ask one of the wiki admin (in no particular order) which mean Tepples, Memblers or me.

Welcome to your new wiki overlords!... ;)
User avatar
Zepper
Formerly Fx3
Posts: 3262
Joined: Fri Nov 12, 2004 4:59 pm
Location: Brazil
Contact:

Post by Zepper »

Thank you! You did my first suggestion. :)
User avatar
Banshaku
Posts: 2417
Joined: Tue Jun 24, 2008 8:38 pm
Location: Japan
Contact:

Post by Banshaku »

You're welcome. I should have acted earlier, I was just too busy with life. Sorry about that. You need to thanks Tepples for updating the setting on the server since I cannot access the wiki SSH for now.

In the future we need to think about a better solution, like the proposed single sign-on for phpBB 3. Right now, since not many real users are created on the wiki, I guess we can still cope with the extra work.
User avatar
koitsu
Posts: 4201
Joined: Sun Sep 19, 2004 9:28 pm
Location: A world gone mad

Post by koitsu »

Banshaku wrote:... since I cannot access the wiki SSH for now.
Let me know privately what your IP is and I'll add exceptions like last time. (I should note we now have a server admin who's in Japan for 3 months, so I'm probably going to have to add more exceptions of this nature soon anyway)
User avatar
Banshaku
Posts: 2417
Joined: Tue Jun 24, 2008 8:38 pm
Location: Japan
Contact:

Post by Banshaku »

No problem. It just I was not able to get in touch with you this time. Tepples could update so everything is fine.
Post Reply