Re: [wiki] fake account spam

[Sietse Brouwer <sbbrouwer@gmail.com>]

Hi Taco,

We're getting 3-12 new accounts created per day. If nothing else,
they're cluttering up the recent changes list.

I think it's a good idea to update the security questions --- it's
easy to do, it'll probably work, and we can always move on to stronger
measures that require more work. Below are some replacemetn questions.

* If you have a log of which questions get answered correctly,
perhaps only rotate out the bad question(s);
* If finding the cracked questions is nontrivial (i.e. more work than
'just open the log file and see which ones get answered every day'),
just replace them all.

If this works, hooray; if it stops working, we can either change the
questions again (if the spammers took long to get through) or move on
to e.g. the ConfirmAccount extension [1,2] (if the questions got
cracked quickly, so we are getting 'human' attention from the spammer
instead of his bots).

[1] http://www.mediawiki.org/wiki/Extension:ConfirmAccount
[2] http://www.stargate-wiki.de/wiki/Spezial:Benutzerkonto_beantragen

Cheers,
Sietse

The proposed questions:

* What command indicates 'text starts here'? (Include the backslash.)
  \starttext

* What command is used to setup the bodyfont? (Include the backslash.)
  \setupbodyfont

* What is the last name (starts with K) of the man who created TeX?
  Knuth

* What is the first name (7 letters, starts with H) of Mr Zapf?
  Hermann

* How many letters does 'stoptext' contain? (Please type out the
number as a word.)
  Eight
___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context
webpage  : http://www.pragma-ade.nl / http://tex.aanhet.net
archive  : http://foundry.supelec.fr/projects/contextrev/
wiki     : http://contextgarden.net
___________________________________________________________________________________