2 Apr
2009
2 Apr
'09
2:09 p.m.
Lilianne E. Blaze wrote:
Please, take the issue a bit more seriously. As it is,
there's no way to
take a standard XWiki and make it spam-proof. Things like flexible
validation mails, captchas, bad words filters, spam ip filters, they
should be given very high priority, and they should work out-of-the-box,
not treated as fluff. It's 2009, spammers, scammers, hackers, script
kiddies everywhere.
Put yourself in noob's shoes for a minute, try to set up a public-edit
wiki as a typical Joe "I just want it to work" User would, you'd be
ears-deep in spam as soon as it hit the google index.
And don't think mail auth has nothing to do with it - I'm willing to bet
half a year's income that if you randomly choose 10 hosting providers 7
of them will refuse to set up open relays, and 2 out of remaining 3
won't have any security at all.
This is why I reformulated the AntiVandalism project (
http://dev.xwiki.org/xwiki/bin/view/GoogleSummerOfCode/AntiVandalismFilter
) to address these issues (except mail server authentication), and we
have quite a lot of students applying for it. I hope that Ludovic,
Vincent and the other mentors will also consider it important and accept
at least one of the great students that applied for it.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/