Hey all,
I'm sure some of you noticed that last night (GMT) there was a somewhat huge abuse of my pastebot, which is located at http://tools.wikimedia.de/~swhitton/pastebin. Thanks to the ops who dealt with it, and sorry for the trouble.
Originally the bot displayed the IP address of posters so that it could be dealt with and I think it has some kind of banning interface via PM. However, I was asked to remove this for privacy concerns and I agree that this is an issue, so I commented out the code (I don't speak perl, which it is written in). What do people think about re-adding IP addresses, with a warning on the pastebin form page?
Thanks,
Sean
Sean,
I suggest you re-add the IP addresses. Many people on IRC don't mask their IP anyway, so if they're the typical IRC user (which I guess your bot is intended for) they won't mind. If it prevents abuse, it's worthwhile. (Alternatively, you keep a user database and display it to ops on request)
--Draicone
On 8/28/07, Sean Whitton sean@silentflame.com wrote:
Hey all,
I'm sure some of you noticed that last night (GMT) there was a somewhat huge abuse of my pastebot, which is located at http://tools.wikimedia.de/~swhitton/pastebin. Thanks to the ops who dealt with it, and sorry for the trouble.
Originally the bot displayed the IP address of posters so that it could be dealt with and I think it has some kind of banning interface via PM. However, I was asked to remove this for privacy concerns and I agree that this is an issue, so I commented out the code (I don't speak perl, which it is written in). What do people think about re-adding IP addresses, with a warning on the pastebin form page?
Thanks,
Sean
Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
Sean Whitton:
What do people think about re-adding IP addresses, with a warning on the pastebin form page?
i don't really see the point of this bot at all. people can easily enough paste the URL themselves; the bot only adds the potential for abuse.
if you must keep it, i suggest rate-limiting and display of IP. (but displaying IP doesn't always help find the offender, since many people on freenode have spoofs).
- river.
A nice 'off' button would be nice, also :)
On 8/28/07, River Tarnell river@wikimedia.org wrote:
Sean Whitton:
What do people think about re-adding IP addresses, with a warning on the pastebin form page?
i don't really see the point of this bot at all. people can easily enough paste the URL themselves; the bot only adds the potential for abuse.
if you must keep it, i suggest rate-limiting and display of IP. (but displaying IP doesn't always help find the offender, since many people on freenode have spoofs).
- river.
Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
Okay, all these suggestions are great :)
However, I don't speak perl, so really don't know how to implement them. Is anyone willing to volunteer to help?
Thanks,
Sean
On 28/08/07, Dan Collins en.wp.st47@gmail.com wrote:
A nice 'off' button would be nice, also :)
On 8/28/07, River Tarnell river@wikimedia.org wrote:
Sean Whitton:
What do people think about re-adding IP addresses, with a warning on the pastebin form page?
i don't really see the point of this bot at all. people can easily enough paste the URL themselves; the bot only adds the potential for abuse.
if you must keep it, i suggest rate-limiting and display of IP. (but displaying IP doesn't always help find the offender, since many people on freenode have spoofs).
- river.
Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
-- ST47 Administrator, en.wikipedia _______________________________________________ Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
I could set up a log with the IP addresses, if you already have them, and a 'killswitch', and perhaps a mundane rate-limiting mechanism. ~~~~
On 8/28/07, Sean Whitton sean@silentflame.com wrote:
Okay, all these suggestions are great :)
However, I don't speak perl, so really don't know how to implement them. Is anyone willing to volunteer to help?
Thanks,
Sean
On 28/08/07, Dan Collins en.wp.st47@gmail.com wrote:
A nice 'off' button would be nice, also :)
On 8/28/07, River Tarnell river@wikimedia.org wrote:
Sean Whitton:
What do people think about re-adding IP addresses, with a warning on the pastebin form page?
i don't really see the point of this bot at all. people can easily
enough
paste the URL themselves; the bot only adds the potential for abuse.
if you must keep it, i suggest rate-limiting and display of IP. (but displaying IP doesn't always help find the offender, since many people
on
freenode have spoofs).
- river.
Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
-- ST47 Administrator, en.wikipedia _______________________________________________ Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
That's great! I invite you to look at the source in my homedir on the toolserver, and see what you make of it. Let me know if there are any edits you would want uploading.
On 28/08/2007, Dan Collins en.wp.st47@gmail.com wrote:
I could set up a log with the IP addresses, if you already have them, and a 'killswitch', and perhaps a mundane rate-limiting mechanism. ~~~~
On 8/28/07, Sean Whitton sean@silentflame.com wrote:
Okay, all these suggestions are great :)
However, I don't speak perl, so really don't know how to implement them. Is anyone willing to volunteer to help?
Thanks,
Sean
On 28/08/07, Dan Collins < en.wp.st47@gmail.com> wrote:
A nice 'off' button would be nice, also :)
On 8/28/07, River Tarnell < river@wikimedia.org> wrote:
Sean Whitton:
What do people think about re-adding IP addresses, with a warning on the pastebin form page?
i don't really see the point of this bot at all. people can easily
enough
paste the URL themselves; the bot only adds the potential for abuse.
if you must keep it, i suggest rate-limiting and display of IP. (but displaying IP doesn't always help find the offender, since many people
on
freenode have spoofs).
- river.
Toolserver-l mailing list Toolserver-l@lists.wikimedia.org
http://lists.wikimedia.org/mailman/listinfo/toolserver-l
-- ST47 Administrator, en.wikipedia _______________________________________________ Toolserver-l mailing list Toolserver-l@lists.wikimedia.org
http://lists.wikimedia.org/mailman/listinfo/toolserver-l
Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
-- ST47 Administrator, en.wikipedia _______________________________________________ Toolserver-l mailing list Toolserver-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/toolserver-l
toolserver-l@lists.wikimedia.org