[Project_owners] "Notes" are being spammed

[Onno Ekker]

Douglas E. Warner wrote:
> On Tuesday 15 April 2008 15:33:24 Douglas E. Warner wrote:
>   
>> We've disabled NOTES submissions since this has become such a problem after
>> they were repaired.
>>
>> Right now we recommend that you request/upgrade to a Drupal site if you
>> need gather feedback publically so you can setup your own forum.
>>     
>
> An update to the situation:
>
> We found on Friday that the emails were still going to the lists or project 
> owners (or whoever was configured to receive updates).  We disabled the 
> emailing of these messages Friday afternoon (EDT); if you receive any more, 
> let us know.
>
> Today we went through the comments and deleted ones created on or after April 
> 14th.  This should remove the spam comments from this recent attack from your 
> site.
>
> If you come across anything else that looks like it might've been from this 
> attack, let us know.
>
> If anyone would like to help restore functionality to the old notes system let 
> me know; otherwise we will continue to recommend using Drupal for forums and 
> things requiring comments as the tools available there for stopping comment 
> spam are much more robust and can be updated more easily.
>
>   
I didn't use notes on my project page, but I already got spam on my main 
wiki page before I even put content on it myself... Default drupal setup 
allows for unauthenticated comments. So drupal is no safe haven from 
spam :-(