eduardoboucas / staticman

💪 User-generated content for Git-powered websites
https://staticman.net
MIT License
2.41k stars 533 forks source link

Sεxυa11y οbscεnε contents published by Statimcan bot #298

Open VincentTam opened 5 years ago

VincentTam commented 5 years ago

First of all, I feel sorry to @einsteinpy, @hashtafak, @FCoulombeau and @skryl for the recent massive spam comments posted by my bot.

Searching "staticman AND field AND content AND ρο®ₙ author:staticmanapp" with
https://github.com/search?o=desc&q=staticman+AND+field+AND+content+AND+porn+author%3Astaticmanapp&s=created&type=Issues,
over 1,200 PR's "made by @staticmanapp" have been found. Replacing "ρο®ₙ" with "fυcκ" gives 400 more such PR's.
https://github.com/search?q=staticman+AND+field+AND+content+AND+fuck+author%3Astaticmanapp&type=Issues
To see that this problem is an ongoing one, you may select "sort: Newest" in the search results.

As a "regular GitHub user", the bot @staticmanapp has to follow GitHub Terms of Service. The same applies to others' bots, including mine. Even though a GitHub App doesn't technically fit into the definition of a "User Account", I believe the same spirit applies.

Spams have been reported in #175 and https://github.com/eduardoboucas/staticman/issues/176#issuecomment-372005906. Here's a question that follows the comment.

First of all, has anyone seen an instance of this where the submission was not sent by a spam bot?

After the use of GitHub Apps in #243, the Staticman App keeps spamming @zinefer's GitHub Pages repo.

I rarely ping @eduardoboucas, but I would like hear what can be done to stop this.

B. Account Terms

3. Account Requirements

  • A machine account is an Account set up by an individual human who accepts the Terms on behalf of the Account, provides a valid email address, and is responsible for its actions. A machine account is used exclusively for performing automated tasks. Multiple users may direct the actions of a machine account, but the owner of the Account is ultimately responsible for the machine's actions. You may maintain no more than one free machine account in addition to your free User Account.

    4. User Account Security

  • You are responsible for all content posted and activity that occurs under your Account (even when content is posted by others who have Accounts under your Account).

    C. Acceptable Use

    2. Content Restrictions

    You agree that you will not under any circumstances upload, post, host, or transmit any content that:

  • is unlawful or promotes unlawful activities;

  • is or contains sexually obscene content;

  • is libelous, defamatory, or fraudulent;

  • is discriminatory or abusive toward any individual or group;

Apart from the legal aspects, we have the moral responsibility to save the bandwidth for better stuff. One might argue that clicking these links in a private area doesn't hurt anyone. Nonetheless, after getting self-gratified by those sexually explicit images, they might lose the sexual drive to interact with (fe)males in real life, who aren't, in general, as attractive as porn stars. Most authorities would not want to see their citizens drained off by illusions.

alexwaibel commented 4 years ago

I'm pretty sure this is a request for better spam filtering. For the time being I would recommend enabling moderation to prevent such posts from reaching your comments sections. Will investigate further in the future once the core staticman functionality is restored.

VincentTam commented 4 years ago

Thanks for your response. I regret that I hadn't squeezed time for this b/c I got addicted to news. I'm thinking of data analysis techniques to tackle this problem, but without using database, the current solution (Akismet) might be the best solution. Perhaps it's time to compromise my idealism to avoid spam.