[Owasp-leaders] Watch your project / chapter pages

Mon May 25 23:40:16 EDT 2009

User RacroBocsi added a spam URL too. In this case on the Argentina
chapter page.
I have a Wiki "Watch" and did undo it.

2009/5/22 Adam Muntner <adam.muntner at quietmove.com>:
> User ZelerRacbo defaced the Phoenix page with a spam url.
>
> Who should I notify to squash the acct?
>
> On Fri, May 22, 2009 at 7:11 AM, Jason Li <jason.li at owasp.org> wrote:
>>
>> Larry maintains OWASP's IT infrastructure, but to my knowledge, there
>> isn't anyone specifically designated to handle managing the OWASP
>> website content.
>>
>> Fabio Cerullo, Michael Coates and I made up the working session on the
>> OWASP website at the Summit (see
>>
>> https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc
>> for our results) last November. We were working with Larry to try to
>> push forward some action post-summit and form a working group/
>> committee/project. But after hitting some bureaucratic speed bumps
>> along the way, our group kind of lost steam.
>>
>> -Jason
>>
>> On Fri, May 22, 2009 at 7:31 AM, dinis cruz <dinis.cruz at owasp.org> wrote:
>> > Question: Who is currently responsible for the OWASP.org website?
>> >
>> > Is there a project, committee or Owasp employee with day-to-day
>> > responsibilities & mandate to deal with issues like this?
>> >
>> > Dinis
>> >
>> > 2009/5/22 Serg B <serg at owasp.org>
>> >>
>> >> Just had the same issue... Page watch saved the day.
>> >>
>> >>
>> >>
>> >> On Fri, May 22, 2009 at 9:22 AM, Marco M. Morana
>> >> <marco.m.morana at gmail.com> wrote:
>> >> > I think these 100 spammers should be disabled. reCAPTCHA
>> >> > http://recaptcha.net/plugins/mediawiki/ncould mitigate some
>> >> > automation
>> >> > spam
>> >> > (automated accounts) so I would enabled it by default with the
>> >> > plugin.
>> >> > Also
>> >> > MediaWiki provides for proxy blocking
>> >> > http://www.mediawiki.org/wiki/Anti-spam_features
>> >> >
>> >> > rgds
>> >> >
>> >> > marco m
>> >> >
>> >> > ----- Original Message -----
>> >> > From: "Jim Manico" <jim.manico at aspectsecurity.com>
>> >> > To: <owasp-leaders at lists.owasp.org>
>> >> > Sent: Thursday, May 21, 2009 5:44 PM
>> >> > Subject: Re: [Owasp-leaders] Watch your project / chapter pages
>> >> >
>> >> >
>> >> > I do not think any CAPTCHA could keep our audience at bay. Speed
>> >> > bump!
>> >> >
>> >> > -----Original Message-----
>> >> > From: owasp-leaders-bounces at lists.owasp.org
>> >> > [mailto:owasp-leaders-bounces at lists.owasp.org] On Behalf Of Dan Guido
>> >> > Sent: Thursday, May 21, 2009 4:13 PM
>> >> > To: owasp-leaders at lists.owasp.org
>> >> > Subject: Re: [Owasp-leaders] Watch your project / chapter pages
>> >> >
>> >> > There's likely a large number of legit accounts in a search like
>> >> > that,
>> >> > mine included.
>> >> >
>> >> > It looks like your account registration page doesn't have any captcha
>> >> > tests though. Here's a recaptcha plugin for MediaWiki:
>> >> > http://recaptcha.net/plugins/mediawiki/
>> >> >
>> >> > --
>> >> > Dan Guido
>> >> >
>> >> >
>> >> >
>> >> > On Thu, May 21, 2009 at 4:06 PM, Matteo Meucci
>> >> > <matteo.meucci at gmail.com>
>> >> > wrote:
>> >> >> So we have to find a difference between regolary registrered names
>> >> >> and
>> >> >> automated registered names.
>> >> >> Maybe you can delete all the registrered names that have not an
>> >> >> associated page for the user profile?
>> >> >>
>> >> >> Mat
>> >> >>
>> >> >>
>> >> >> On Thu, May 21, 2009 at 9:56 PM, Laurence Casey
>> >> >> <larry.casey at owasp.org>
>> >> >> wrote:
>> >> >>> This would be the beginning of a long battle that will never be
>> >> >>> won.
>> >> >>> We
>> >> >>> currently probably have several 100 names registered that have
>> >> >>> intentions
>> >> >>> to
>> >> >>> spam. Its best to just trust the community to keep up with spam
>> >> >>> like
>> >> >>> this.
>> >> >>>
>> >> >>> --Larry
>> >> >>>
>> >> >>>
>> >> >>> On 5/21/09 3:28 PM, "Seba" <seba at owasp.org> wrote:
>> >> >>>
>> >> >>> Hi,
>> >> >>>
>> >> >>> I just noticed user DomtrOctrr added a spam URL on the Belgium
>> >> >>> chapter
>> >> >>> page.
>> >> >>>
>> >> >>> Luckily I have a Wiki "Watch" on the Belgium chapter page and did
>> >> >>> undo
>> >> >>> it.
>> >> >>>
>> >> >>> I advise you to add your 'watch' to your chapter / project pages:
>> >> >>> it
>> >> >>> provides you with direct information who is changing what.
>> >> >>>
>> >> >>> regards
>> >> >>>
>> >> >>> Seba
>> >> >>>
>> >> >>> ________________________________
>> >> >>> _______________________________________________
>> >> >>> OWASP-Leaders mailing list
>> >> >>> OWASP-Leaders at lists.owasp.org
>> >> >>> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>> >> >>>
>> >> >>> _______________________________________________
>> >> >>> OWASP-Leaders mailing list
>> >> >>> OWASP-Leaders at lists.owasp.org
>> >> >>> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>> >> >>>
>> >> >>>
>> >> >>
>> >> >>
>> >> >>
>> >> >> --
>> >> >> Matteo Meucci
>> >> >> OWASP-Italy Chair, CISSP, CISA
>> >> >> http://www.owasp.org/index.php/Italy
>> >> >> OWASP Testing Guide lead
>> >> >> http://www.owasp.org/index.php/Testing_Guide
>> >> >> _______________________________________________
>> >> >> OWASP-Leaders mailing list
>> >> >> OWASP-Leaders at lists.owasp.org
>> >> >> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>> >> >>
>> >> > _______________________________________________
>> >> > OWASP-Leaders mailing list
>> >> > OWASP-Leaders at lists.owasp.org
>> >> > https://lists.owasp.org/mailman/listinfo/owasp-leaders
>> >> > _______________________________________________
>> >> > OWASP-Leaders mailing list
>> >> > OWASP-Leaders at lists.owasp.org
>> >> > https://lists.owasp.org/mailman/listinfo/owasp-leaders
>> >> >
>> >> > _______________________________________________
>> >> > OWASP-Leaders mailing list
>> >> > OWASP-Leaders at lists.owasp.org
>> >> > https://lists.owasp.org/mailman/listinfo/owasp-leaders
>> >> >
>> >> _______________________________________________
>> >> OWASP-Leaders mailing list
>> >> OWASP-Leaders at lists.owasp.org
>> >> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>> >
>> >
>> > _______________________________________________
>> > OWASP-Leaders mailing list
>> > OWASP-Leaders at lists.owasp.org
>> > https://lists.owasp.org/mailman/listinfo/owasp-leaders
>> >
>> >
>> _______________________________________________
>> OWASP-Leaders mailing list
>> OWASP-Leaders at lists.owasp.org
>> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>>
>
>
>
> --
> Adam Muntner, CISSP
> Managing Partner
> QuietMove, Inc.
> (602)793-5969
> http://www.quietmove.com
>
> _______________________________________________
> OWASP-Leaders mailing list
> OWASP-Leaders at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>
>
-- 
Martin Tartarelli
Linux User #476492
http://owasp.org/index.php/Argentina
--