openSUSE / open-build-service

Build and distribute Linux packages from sources in an automatic, consistent and reproducible way #obs
https://openbuildservice.org
GNU General Public License v2.0
939 stars 441 forks source link

Limit commenting privileges for new accounts to improve the present, woefully inadequate, spam control #16466

Open badshah400 opened 4 months ago

badshah400 commented 4 months ago

Current spam control methods on build.o.o are unfortunately rather inadequate for treating comment spam and places the burden on project owners and/or moderators. It also serves 0 purpose in deterring future spammers.

As a maintainer of a project (Education) that unfortunately seems to have taken some spammers' fancy, I request that we re-visit moderation on the site. In particular, I suggest imposing a 7-day or 10-day freeze (or the creation of an sr to a develprj, whichever comes first) on newly created accounts before the user can add comments to packages, submit requests, and so on. This is the most straightforward implementation that comes to my mind, but perhaps there are better ways. What is clear is that the current method that burdens already stretched thin prj/pkg maintainers to report obvious spam comments, and burdens prj maintainers or moderators to review said spam is utterly broken, unsustainable, and a nuisance for well meaning maintainers.

Thanks in advance.

hennevogel commented 4 months ago

Just for clarification: The moderation feature is not an anti-spam feature, it's about the spam that is getting through the anti-spam features (that do not exist anywhere and should exist in the identity provider).