Suspicious subscriptions from aol.com

List overview All Threads
Download

newer

older

aol.com continues, yahoo.com...

Dutch mailing list Moderators-nl...

KuboF Hromoslav

7 May 2018 7 May '18

12:07 p.m.

Hi there. On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, we have received suspicious mass subscriptions (several tens in several hours). They came from nowhere, all with @aol.com address (very unusual for our target group) and all declared only first name. Most certainly some bot. Provisionally I have set them all for moderation. Eventually I could block subscriptions from @aol.com addresses (no too big deal, because hardly someone real in our audience is using them) but I prefer systemic solutions and not to cure symptoms. And possibly someone else here is running into the same problem. Any suggestions? Regards! KuboF Hromoslav

Attachments:

attachment.htm (text/html — 982 bytes)

Show replies by date

Ragib Hasan

7 May 7 May

12:09 p.m.

Just noticed the same on the Wikimedia-bd list. -- Ragib On Mon, May 7, 2018 at 5:08 AM KuboF Hromoslav <kubof.hromoslav(a)gmail.com> wrote:

...

Анатолій Гончаров

12:14 p.m.

Wikimediaua has similar problem - 35 subscription requests from AOL 2018-05-07 13:09 GMT+03:00 Ragib Hasan <ragibhasan(a)gmail.com>om>:

...

Just noticed the same on the Wikimedia-bd list. -- Ragib On Mon, May 7, 2018 at 5:08 AM KuboF Hromoslav <kubof.hromoslav(a)gmail.com> wrote:

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

-- Анатолій Гончаров mailto:Ahonc.ua@gmail.com

12:11 p.m.

Hi there, I was about to complain about this because the mailing lists I administer (metawiki-admins and meta-oversight) are also suffering from this flood. I've set ^aol\.com as banned (not sure if that's right?) to stop them as I've got few dozens of requests like that already. Thanks for your help. Regards, M. 2018-05-07 12:07 GMT+02:00 KuboF Hromoslav <kubof.hromoslav(a)gmail.com>om>:

...

Željko Filipin

12:12 p.m.

I am admin of a couple of mailing lists, I have noticed the same suspicious activity from aol addresses. Only subscriptions for now. Željko On Mon, May 7, 2018 at 12:07 PM, KuboF Hromoslav <kubof.hromoslav(a)gmail.com> wrote:

...

Dhaval S. Vyas

12:14 p.m.

Thank you KuboF for posting it. We have noticed the same on wikipedia-gu l8st as well. I was thinking to where to start this communication. Regards, Dhaval Vyas On Mon, 7 May 2018, 12:08 KuboF Hromoslav, <kubof.hromoslav(a)gmail.com> wrote:

...

Gergo Tisza

12:15 p.m.

On Mon, May 7, 2018 at 12:08 PM KuboF Hromoslav <kubof.hromoslav(a)gmail.com> wrote:

...

On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, we have received suspicious mass subscriptions (several tens in several hours). They came from nowhere, all with @aol.com address (very unusual for our target group) and all declared only first name. Most certainly some bot. Provisionally I have set them all for moderation. Eventually I could block subscriptions from @aol.com addresses (no too big deal, because hardly someone real in our audience is using them) but I prefer systemic solutions and not to cure symptoms. And possibly someone else here is running into the same problem.

Yeah, I saw (and did) the same for multimedia-l. Unfortunately there is no sender filter for members. I think setting "From: .*(a)aol\.com" in the spam filters would have the same result though and that one does affect members. Maybe there is a way to do that globally instead of one-by-one for every mailing list?

Tomasz Sienicki

12:21 p.m.

F: KuboF Hromoslav

...

Same on wikipl-l and wikinews-pl. I have unsubscribed these addresses and blocked further subscriptions from @aol.com. tsca

masti

12:21 p.m.

Samuel Guebo

12:25 p.m.

Hello, Facing the same issue in wikimedia-ci On Mon, May 7, 2018 at 10:21 AM, masti <mastigm(a)gmail.com> wrote:

...

same thing on wikinews-pl masti On 07.05.2018 12:07, KuboF Hromoslav wrote: Hi there. On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, we have received suspicious mass subscriptions (several tens in several hours). They came from nowhere, all with @aol.com address (very unusual for our target group) and all declared only first name. Most certainly some bot. Provisionally I have set them all for moderation. Eventually I could block subscriptions from @aol.com addresses (no too big deal, because hardly someone real in our audience is using them) but I prefer systemic solutions and not to cure symptoms. And possibly someone else here is running into the same problem. Any suggestions? Regards! KuboF Hromoslav _______________________________________________ Listadmins mailing listListadmins@lists.wikimedia.orghttps://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

-- *_______________________________________________________* *Samuel Guebo * *Creative Director **at E-voir <http://e-voir.net/> * *Social entrepreneur / designer / apps developer* *(225) 77 34 17 21 / **04 85 16 77* *Join me on : Facebook <http://facebook.com./samuel.guebo> / Twitter <http://twitter.com/samuelguebo> / Linkedin <http://linkedin.com/in/samuelguebo>*

Gitartha Bordoloi

12:27 p.m.

Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote:

...

Axel Pettersson

12:31 p.m.

Hi, +1 for wiki loves public art. Hoping for a global solution. Bästa hälsningar, /Axel Den mån 7 maj 2018 12:28Gitartha Bordoloi <gitartha.bordoloi(a)gmail.com> skrev:

...

Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote:

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

Andre Klapper

1:43 p.m.

Hi, I don't think more confirmations / "me too" are needed. :) On Mon, 2018-05-07 at 10:31 +0000, Axel Pettersson wrote:

...

+1 for wiki loves public art. Hoping for a global solution.

If wanted (I don't know if it is technically feasible though), please feel free to create a task in Phabricator under the "#Wikimedia- Mailing-lists" project for such a 'global' request: https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=Wiki… https://www.mediawiki.org/wiki/Phabricator/Help#Creating_your_account Thanks! andre -- Andre Klapper | ak-47(a)gmx.net https://blogs.gnome.org/aklapper/

Andre Klapper

1:56 p.m.

On Mon, 2018-05-07 at 13:43 +0200, Andre Klapper wrote:

...

On Mon, 2018-05-07 at 10:31 +0000, Axel Pettersson wrote:

+1 for wiki loves public art. Hoping for a global solution.

If wanted (I don't know if it is technically feasible though), please feel free to create a task in Phabricator under the "#Wikimedia- Mailing-lists" project for such a 'global' request: https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?project s=Wikimedia-Mailing-lists https://www.mediawiki.org/wiki/Phabricator/Help#Creating_your_account

Sudhanwa Jogalekar

2:13 p.m.

Same with the list Wikimedia-IN-PUN. However, because the subscription needs approval, all these are pending. Either have to clean up the queue or it will clean up automatically later on. Instead of blocking domain, setting up for approval is easier solution. Regards Sudhanwa On Mon, May 7, 2018, 5:26 PM Andre Klapper <aklapper(a)wikimedia.org> wrote:

...

On Mon, 2018-05-07 at 13:43 +0200, Andre Klapper wrote:

On Mon, 2018-05-07 at 10:31 +0000, Axel Pettersson wrote:

+1 for wiki loves public art. Hoping for a global solution.

If wanted (I don't know if it is technically feasible though), please feel free to create a task in Phabricator under the "#Wikimedia- Mailing-lists" project for such a 'global' request: https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?project s=Wikimedia-Mailing-lists https://www.mediawiki.org/wiki/Phabricator/Help#Creating_your_account

In the meantime, Tgr was kind enough to create https://phabricator.wikimedia.org/T194032 (which is not public) about the aol.com subscription problem and asking for a global solution. andre -- Andre Klapper | Wikimedia Bugwrangler https://blogs.gnome.org/aklapper/ _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

Luca Martinelli

2:15 p.m.

I think is fair to say that all MLs are under attack, so let's discuss the countermeasures. Do we want to temporarily global ban all AOL accounts, at least those who try to subscribe? Is it possible? L. Il lun 7 mag 2018, 12:31 Axel Pettersson <axel.pettersson(a)wikimedia.se> ha scritto:

...

Hi, +1 for wiki loves public art. Hoping for a global solution. Bästa hälsningar, /Axel Den mån 7 maj 2018 12:28Gitartha Bordoloi <gitartha.bordoloi(a)gmail.com> skrev:

Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote:

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

Ashwin Baindur

6:51 p.m.

Same for Wikimedia-In-En. On Mon, May 7, 2018 at 5:45 PM, Luca Martinelli <martinelliluca(a)gmail.com> wrote:

...

Hi, +1 for wiki loves public art. Hoping for a global solution. Bästa hälsningar, /Axel Den mån 7 maj 2018 12:28Gitartha Bordoloi <gitartha.bordoloi(a)gmail.com> skrev:

Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote:

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

-- Warm regards, Ashwin Baindur ------------------------------------------------------

Pharos

6:54 p.m.

I have seen the same suspicious pattern for lists I help administer. Thanks, Pharos On Mon, May 7, 2018 at 12:51 PM, Ashwin Baindur <ashwin.baindur(a)gmail.com> wrote:

...

Same for Wikimedia-In-En. On Mon, May 7, 2018 at 5:45 PM, Luca Martinelli <martinelliluca(a)gmail.com> wrote:

Hi, +1 for wiki loves public art. Hoping for a global solution. Bästa hälsningar, /Axel Den mån 7 maj 2018 12:28Gitartha Bordoloi <gitartha.bordoloi(a)gmail.com> skrev:

Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote: > same thing on wikinews-pl > > masti > > On 07.05.2018 12:07, KuboF Hromoslav wrote: > > Hi there. > > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am > admin, we have received suspicious mass subscriptions (several tens in > several hours). They came from nowhere, all with @aol.com address > (very unusual for our target group) and all declared only first name. Most > certainly some bot. > > Provisionally I have set them all for moderation. Eventually I could > block subscriptions from @aol.com addresses (no too big deal, because > hardly someone real in our audience is using them) but I prefer systemic > solutions and not to cure symptoms. And possibly someone else here is > running into the same problem. > > Any suggestions? > > Regards! > KuboF Hromoslav > > > _______________________________________________ > Listadmins mailing listListadmins@lists.wikimedia.orghttps://lists.wikimedia.org/mailman/listinfo/listadmins > > > _______________________________________________ > Listadmins mailing list > Listadmins(a)lists.wikimedia.org > https://lists.wikimedia.org/mailman/listinfo/listadmins > _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

-- Warm regards, Ashwin Baindur ------------------------------------------------------ _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

Yishen Miao

6:55 p.m.

Same for unblock-zh and otrs-zh. Best, Mys_721tx

...

On May 7, 2018, at 12:54, Pharos <pharosofalexandria(a)gmail.com> wrote: I have seen the same suspicious pattern for lists I help administer. Thanks, Pharos On Mon, May 7, 2018 at 12:51 PM, Ashwin Baindur <ashwin.baindur(a)gmail.com> wrote: Same for Wikimedia-In-En. On Mon, May 7, 2018 at 5:45 PM, Luca Martinelli <martinelliluca(a)gmail.com> wrote: I think is fair to say that all MLs are under attack, so let's discuss the countermeasures. Do we want to temporarily global ban all AOL accounts, at least those who try to subscribe? Is it possible? L. Il lun 7 mag 2018, 12:31 Axel Pettersson <axel.pettersson(a)wikimedia.se> ha scritto: Hi, +1 for wiki loves public art. Hoping for a global solution. Bästa hälsningar, /Axel Den mån 7 maj 2018 12:28Gitartha Bordoloi <gitartha.bordoloi(a)gmail.com> skrev: Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote: same thing on wikinews-pl masti On 07.05.2018 12:07, KuboF Hromoslav wrote:

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins -- Warm regards, Ashwin Baindur ------------------------------------------------------ _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

Yishen Miao

6:57 p.m.

Additionally, we should let security team know about this in case it is related to the brute force attack on English Wikipedia. <https://phabricator.wikimedia.org/T193769> Best, Mys_721tx

...

On May 7, 2018, at 12:55, Yishen Miao <mys721tx(a)gmail.com> wrote: Same for unblock-zh and otrs-zh. Best, Mys_721tx

Andy Cruz y Corro

7:39 p.m.

Same thing happening on Volunteer Supporters On Mon, May 7, 2018, 11:57 AM Yishen Miao <mys721tx(a)gmail.com> wrote:

...

Additionally, we should let security team know about this in case it is related to the brute force attack on English Wikipedia. < https://phabricator.wikimedia.org/T193769> Best, Mys_721tx

On May 7, 2018, at 12:55, Yishen Miao <mys721tx(a)gmail.com> wrote: Same for unblock-zh and otrs-zh. Best, Mys_721tx > On May 7, 2018, at 12:54, Pharos <pharosofalexandria(a)gmail.com> wrote: > > I have seen the same suspicious pattern for lists I help administer. > > Thanks, > Pharos > > On Mon, May 7, 2018 at 12:51 PM, Ashwin Baindur <

ashwin.baindur(a)gmail.com> wrote:

> Same for Wikimedia-In-En. > > On Mon, May 7, 2018 at 5:45 PM, Luca Martinelli <

martinelliluca(a)gmail.com> wrote:

> I think is fair to say that all MLs are under attack, so let's discuss

the countermeasures. Do we want to temporarily global ban all AOL accounts, at least those who try to subscribe? Is it possible?

> > L. > > Il lun 7 mag 2018, 12:31 Axel Pettersson <axel.pettersson(a)wikimedia.se>

ha scritto:

> Hi, > +1 for wiki loves public art. Hoping for a global solution. > > Bästa hälsningar, > /Axel > > Den mån 7 maj 2018 12:28Gitartha Bordoloi <gitartha.bordoloi(a)gmail.com>

skrev:

> Same issue in wikipedia-as. Can anyone please tell me how to block

subscriptions from @aol.com?

> > On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote: > same thing on wikinews-pl > > masti > > On 07.05.2018 12:07, KuboF Hromoslav wrote: >> Hi there. >> >> On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am

admin, we have received suspicious mass subscriptions (several tens in several hours). They came from nowhere, all with @aol.com address (very unusual for our target group) and all declared only first name. Most certainly some bot.

>> >> Provisionally I have set them all for moderation. Eventually I could

block subscriptions from @aol.com addresses (no too big deal, because hardly someone real in our audience is using them) but I prefer systemic solutions and not to cure symptoms. And possibly someone else here is running into the same problem.

Any suggestions? Regards! KuboF Hromoslav ______________________________ _________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

Sergey Leschina

7:58 p.m.

Guys, please stop writing that you have the same problem in the your mailing list. I have already counted 17 such letters. Stop, please! 2018-05-07 20:39 GMT+03:00 Andy Cruz y Corro <andycyca(a)gmail.com>om>:

...

Same thing happening on Volunteer Supporters On Mon, May 7, 2018, 11:57 AM Yishen Miao <mys721tx(a)gmail.com> wrote:

Additionally, we should let security team know about this in case it is related to the brute force attack on English Wikipedia. < https://phabricator.wikimedia.org/T193769> Best, Mys_721tx

ashwin.baindur(a)gmail.com> wrote:

> Same for Wikimedia-In-En. > > On Mon, May 7, 2018 at 5:45 PM, Luca Martinelli <

martinelliluca(a)gmail.com> wrote:

> I think is fair to say that all MLs are under attack, so let's discuss

the countermeasures. Do we want to temporarily global ban all AOL accounts, at least those who try to subscribe? Is it possible?

> > L. > > Il lun 7 mag 2018, 12:31 Axel Pettersson <axel.pettersson(a)wikimedia.se>

ha scritto:

> Hi, > +1 for wiki loves public art. Hoping for a global solution. > > Bästa hälsningar, > /Axel > > Den mån 7 maj 2018 12:28Gitartha Bordoloi <gitartha.bordoloi(a)gmail.com>

skrev:

> Same issue in wikipedia-as. Can anyone please tell me how to block

subscriptions from @aol.com?

>> >> Provisionally I have set them all for moderation. Eventually I could

> > Any suggestions? > > Regards! > KuboF Hromoslav > > > ______________________________ > _________________ > Listadmins mailing list > > Listadmins(a)lists.wikimedia.org > https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins -- Warm regards, Ashwin Baindur ------------------------------------------------------ _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

-- Sergey Leschina

Patrick Rother

9 May 9 May

9:55 a.m.

Hello. Am 07.05.18 um 19:58 schrieb Sergey Leschina:

...

Guys, please stop writing that you have the same problem in the your mailing list. I have already counted 17 such letters. Stop, please!

I've got nearly 100 subscription requests last night on the more than a dozen OTRS lists. Could anybody please install any filter? Thank you.

Andre Klapper

10:56 a.m.

On Wed, 2018-05-09 at 09:55 +0200, Patrick Rother wrote:

...

Hello. Am 07.05.18 um 19:58 schrieb Sergey Leschina:

Guys, please stop writing that you have the same problem in the your mailing list. I have already counted 17 such letters. Stop, please!

I've got nearly 100 subscription requests last night on the more than a dozen OTRS lists. Could anybody please install any filter?

gulu

12:42 p.m.

Hello. Sorry, cannot see the content from underways, but, my message was about we‘re not having any solution yet, since that time. We‘re currently burning listmod time, which is perhaps the most limited good in our universe. Anybody should do something. I‘m happy to assist if you let me know how.

...

Am 09.05.2018 um 10:56 schrieb Andre Klapper <aklapper(a)wikimedia.org>rg>:

On Wed, 2018-05-09 at 09:55 +0200, Patrick Rother wrote: Hello.

Am 07.05.18 um 19:58 schrieb Sergey Leschina: Guys, please stop writing that you have the same problem in the your mailing list. I have already counted 17 such letters. Stop, please!

I've got nearly 100 subscription requests last night on the more than a dozen OTRS lists. Could anybody please install any filter?

Please see my message from two days ago: "In the meantime, Tgr was kind enough to create https://phabricator.wikimedia.org/T194032 (which is not public) about the aol.com subscription problem and asking for a global solution." andre -- Andre Klapper | Wikimedia Bugwrangler https://blogs.gnome.org/aklapper/ _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

Huji Lee

11 May 11 May

12:24 a.m.

On the list for which I am a moderator, the trend is now shifting towards @ yahoo.com accounts (but there is still a fair share of @aol.com ones stoo) On Wed, May 9, 2018 at 6:42 AM, gulu <krd(a)gulu.net> wrote:

...

Am 09.05.2018 um 10:56 schrieb Andre Klapper <aklapper(a)wikimedia.org>rg>:

On Wed, 2018-05-09 at 09:55 +0200, Patrick Rother wrote: Hello.

Am 07.05.18 um 19:58 schrieb Sergey Leschina: Guys, please stop writing that you have the same problem in the your mailing list. I have already counted 17 such letters. Stop, please!

I've got nearly 100 subscription requests last night on the more than a dozen OTRS lists. Could anybody please install any filter?

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

Andre Klapper

8 May 8 May

12:04 p.m.

On Mon, 2018-05-07 at 12:57 -0400, Yishen Miao wrote:

...

Additionally, we should let security team know about this in case it is related to the brute force attack on English Wikipedia. <https://phabricator.wikimedia.org/T193769>

Thanks! Security team has been made aware already yesterday. andre -- Andre Klapper | Wikimedia Bugwrangler https://blogs.gnome.org/aklapper/

Dario Taraborelli

10:46 p.m.

Quick heads up that the proposed solution to add the following: Privacy options -> in ban_list window add ^.*aol\.com doesn't seem to block subscription *requests*, which I am getting tons of on two private lists I run. On Tue, May 8, 2018 at 3:10 AM Andre Klapper <aklapper(a)wikimedia.org> wrote:

...

On Mon, 2018-05-07 at 12:57 -0400, Yishen Miao wrote:

Additionally, we should let security team know about this in case it is related to the brute force attack on English Wikipedia. <https://phabricator.wikimedia.org/T193769>

Thanks! Security team has been made aware already yesterday. andre -- Andre Klapper | Wikimedia Bugwrangler https://blogs.gnome.org/aklapper/ _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

-- *Dario Taraborelli *Director, Head of Research, Wikimedia Foundation research.wikimedia.org • nitens.org • @readermeter <http://twitter.com/readermeter>

10:53 p.m.

Hello, I have added the same regex and while I test, I get the 'this address is banned etc.' message, but fact is that I too am receiving lots of requests from aol.com addresses as well. 14 in the last hours on two ML I administer. Regards, M. 2018-05-08 22:46 GMT+02:00 Dario Taraborelli <dtaraborelli(a)wikimedia.org>rg>:

...

On Mon, 2018-05-07 at 12:57 -0400, Yishen Miao wrote:

Additionally, we should let security team know about this in case it is related to the brute force attack on English Wikipedia. <https://phabricator.wikimedia.org/T193769>

-- *Dario Taraborelli *Director, Head of Research, Wikimedia Foundation research.wikimedia.org • nitens.org • @readermeter <http://twitter.com/readermeter> _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

masti

7 May 7 May

1:14 p.m.

Dennis Tobar

1:25 p.m.

I see the same issue in @wikimedia-cl. I'll apply the recommend privacy setting. Kindly. On Mon, May 7, 2018 at 8:14 AM masti <mastigm(a)gmail.com> wrote:

...

Privacy options -> in ban_list window add ^.*aol\.com masti On 07.05.2018 12:27, Gitartha Bordoloi wrote: Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com? On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote:

_______________________________________________ Listadmins mailing listListadmins@lists.wikimedia.orghttps://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

-- Dennis Tobar Calderón Ingeniero en Informática UTEM

Dhaval S. Vyas

1:38 p.m.

Can there be a global rule applied? On Mon, 7 May 2018, 13:14 masti, <mastigm(a)gmail.com> wrote:

...

Yongmin H.

1:44 p.m.

You’ll probably need to file a task in https://phabricator.wikimedia.org/ with tag Wikimedia-mailing-lists. (I dunno if this should be security stuff) -- Yongmin Sent from my iPhone https://reviwiki.info/ Text licensed under CC BY ND 2.0 KR Please note that this address is list-only address and any non-mailing list mails will be treated as spam. Please use https://encrypt.to/0x947f156f16250de39788c3c35b625da5beff197a 2018. 5. 7. 20:38, Dhaval S. Vyas <dsvyas(a)gmail.com> 작성:

...

Can there be a global rule applied?

On Mon, 7 May 2018, 13:14 masti, <mastigm(a)gmail.com> wrote: Privacy options -> in ban_list window add ^.*aol\.com masti

On 07.05.2018 12:27, Gitartha Bordoloi wrote: Same issue in wikipedia-as. Can anyone please tell me how to block subscriptions from @aol.com?

On Mon 7 May, 2018, 3:51 PM masti, <mastigm(a)gmail.com> wrote: same thing on wikinews-pl masti > On 07.05.2018 12:07, KuboF Hromoslav wrote: > Hi there. > > On the lists "wikimedia-sk" and "wikimedia-sk-oznamy", where I am admin, we have received suspicious mass subscriptions (several tens in several hours). They came from nowhere, all with @aol.com address (very unusual for our target group) and all declared only first name. Most certainly some bot. > > Provisionally I have set them all for moderation. Eventually I could block subscriptions from @aol.com addresses (no too big deal, because hardly someone real in our audience is using them) but I prefer systemic solutions and not to cure symptoms. And possibly someone else here is running into the same problem. > > Any suggestions? > > Regards! > KuboF Hromoslav > > > _______________________________________________ > Listadmins mailing list > Listadmins(a)lists.wikimedia.org > https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

_______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

2177

days inactive

2180

days old

listadmins@lists.wikimedia.org

Manage subscription

32 comments

26 participants

tags (0)

participants (26)

Andre Klapper
Andy Cruz y Corro
Ashwin Baindur
Axel Pettersson
Dario Taraborelli
Dennis Tobar
Dhaval S. Vyas
Gergo Tisza
Gitartha Bordoloi
gulu
Huji Lee
KuboF Hromoslav
Luca Martinelli
MA
masti
Patrick Rother
Pharos
Ragib Hasan
Samuel Guebo
Sergey Leschina
Sudhanwa Jogalekar
Tomasz Sienicki
Yishen Miao
Yongmin H.
Željko Filipin
Анатолій Гончаров