[Qgis-psc] spam in Redmine :-(

[Richard Duivenvoorde]

Don't want to be negative, but why would a real spammer, who is really
willing to invest time to create a couple of usernames per day (and let
them sleep for some time), not able to create a script to do this (and
add the user_agent).

Don't invent work if not needed.

If people want the local users, let it be like it is now.
I'll not warn for spam anymore and rest my case.

Richard

On 01-12-17 11:23, Tim Sutton wrote:
> Hi
> 
> Thanks for your comments Nyall, Nathan and Matthias. It seems that the
> user agent is rather easy to do:
> 
> https://wiki.qt.io/How_to_set_user_agent_in_Qt_application
> 
> So it should automatically add QGIS and the current version to the
> header. And for an apache rule we could use a regex like this on the
> redline signup page:
> 
> https://serverfault.com/a/749446
> 
> (Replacing SetEnvIfNoCase with SetEnvIfCase)
> 
> I would propose that we try to build this quickly (sounds like a good
> use of QGIS funds??) and get it done as a feature freeze exception. Then
> we just need something on redline saying that you need to sign up from
> in QGIS.
> 
> Regards
> 
> Tim
> 
>> On 01 Dec 2017, at 11:37, Matthias Kuhn <matthias at opengis.ch
>> <mailto:matthias at opengis.ch>> wrote:
>>
>>
>>> ​OR have users submit bugs easily AND have no spam. In case it wasnt
>>> clear above, my proposal above advocates ditching mantras in favour
>>> of a 'normal' sign up process​ but the process has to happen through
>>> a QGIS browser agent. I reckon that is a pretty low friction approach. 
>>>
>>> WRT Nathan;s comment about GitHub, while I am +1 about using  github
>>> as an option to sign in, my experience is that signing up for github
>>> is just as obscure for 'normal' users as a mantra, so if we are going
>>> to make users sign up for one more thing, hub.qgis.org
>>> <http://hub.qgis.org/> should be that thing.... In summary my
>>> preference is:
>>>
>>> * Make it convenient for *everyone* to file tickets
>>> * Kill the mantra - it is the most un-user friendly experience we
>>> could give people 
>>> * Make the initial sign up happen through a browser embedded in QGIS
>>> to prevent spammers. Within that sign up:
>>>     * Support github authentication if we can to make it easy for geeks
>>>     * Support sign up through local user database in redmine still
>>
>> Thanks Tim,
>> I have the same preferences,
>>
>> Having a painless option to signup through QGIS itself and thus make
>> it less spam-prone sounds great.
>>
>> We probably still need a "classic" signup way through webpages for the
>> "I can't signup because my QGIS crashes on start scenario" and that
>> would be solved by the github, other oAuth or osgeo login.
>>
>> Regards
>> Matthias
>> _______________________________________________
>> Qgis-psc mailing list
>> Qgis-psc at lists.osgeo.org <mailto:Qgis-psc at lists.osgeo.org>
>> https://lists.osgeo.org/mailman/listinfo/qgis-psc
> 
>  
> 
> 
> 
> ---
> 
> *Tim Sutton*
> QGIS Project Steering Committee Chair
> tim at qgis.org <mailto:tim at qgis.org>
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Qgis-psc mailing list
> Qgis-psc at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/qgis-psc
>