[Bug 3144] New: new for captcha
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 Summary: new for captcha Product: Koha Version: unspecified Platform: PC OS/Version: All Status: NEW Severity: normal Priority: P5 Component: OPAC AssignedTo: jmf@liblime.com ReportedBy: nicolas.morin@biblibre.com Estimated Hours: 0.0 if the opac-suggestions.pl?op=add page is accessible to anonymous users (AnonSuggestions syspref ON), we should provide a catpcha. Currently we don't, and spam coming through the form quickly forces the library to close down the option. I suggest http://search.cpan.org/dist/Captcha-reCAPTCHA/lib/Captcha/reCAPTCHA.pm It works well and has something to do with libraryland. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 nicomo <nicolas.morin@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|new for captcha |captcha for opac-suggestions -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 MJR <mjr@ttllp.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mjr@ttllp.co.uk Summary|captcha for opac-suggestions|anti-spam for opac- | |suggestions --- Comment #1 from MJR <mjr@ttllp.co.uk> 2009-04-20 13:57:14 --- Please add anti-spam tests like blogspam.net or even simple heuristics to defeat spam. A sample of the spam you're getting would be useful. Please do not add reCAPTCHA. It discriminates against humans with visual or hearing impairments. Retitling bug. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 nicomo <nicolas.morin@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|jmf@liblime.com |jeanandre.santoni@biblibre.c | |om -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 --- Comment #2 from Jean-André Santoni <jeanandre.santoni@biblibre.com> 2009-06-16 14:12:15 --- reCAPTCHA only discriminates against humans with both visual and hearing impairments. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 --- Comment #3 from MJR <mjr@ttllp.co.uk> 2009-06-16 14:20:10 --- Hearing impairments sufficient to prevent reCAPTCHA use are pretty common (estimates over 40% are common). Please implement anti-spam in preference to reCAPTCHA. CAPTCHAs are not anti-spam and I suspect most implementations violate disability discrimination laws. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 --- Comment #4 from Jean-André Santoni <jeanandre.santoni@biblibre.com> 2009-06-17 15:11:37 --- Blogspam.net doesn't seem to work so well. Take a look at my log (I Data::Dumped my request and their result): $VAR1 = 'comment'; $VAR2 = 'La soupe à la fourchette Jean-Angleade 1987 Poche '; $VAR3 = 'ip'; $VAR4 = '88.191.19.91'; SPAM:SpamBayes at /home/kivutar/Workspace/koha30x/C4/Suggestions.pm line 349. According to blogspam.net, "La soupe à la fourchette Jean-Angleade 1987 Poche" is a spam... Do you know another service? Or maybe I just used it wrong. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 --- Comment #5 from MJR <mjr@ttllp.co.uk> 2009-06-18 14:31:58 --- I asked about this and was told it's essentially a result of using French-language data with one of the plugins that's trained with English-language ham data: "I train the bayasian filter using results that are known-good or known-spam, but in both cases the training is with English text. I'd never considered the use of foreign language to be an issue, but I can easily imagine if the corpus is always trained with English that French wouldn't be seen, and is more likely to weigh in as spam. If this is a common occurrence then the caller should disable the bayasian plugin when they submit their comments for testing, see here for details of how to do that: http://blogspam.net/api/testComment.html (You'll want to disable the plugin called "bayasian".)" Alternatively, Francophones may like to run their own spam filter, trained with French-language ham. (By the way, did you know that the documents used for reCAPTCHA are all taken from US sources at the moment? I hear it's great fun for UKUS and NZUS spelling differences.) -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 --- Comment #6 from Jean-André Santoni <jeanandre.santoni@biblibre.com> 2009-06-22 11:36:32 --- Created an attachment (id=840) --> (http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=840) Bugfix Bugfix -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 Jean-André Santoni <jeanandre.santoni@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED Priority|P5 |PATCH-Sent -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 --- Comment #7 from MJR <mjr@ttllp.co.uk> 2009-06-22 11:43:35 --- Mollom seems to discriminate against visually-impaired users with non-CAPTCHA eyetests if not thought to be ham and the free service only allows 100 comments per day - see http://mollom.com/pricing Therefore, integrating this Mollom patch would cause both a new accessibility error and open an obvious denial of service attack opportunity. Please make this a contrib only. Also, it's spelt "anonymous" not "anonimous". -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 --- Comment #8 from Jean-André Santoni <jeanandre.santoni@biblibre.com> 2009-06-22 12:17:43 --- The use I made of Mollom does not discriminate against visually-impaired users. It is just a filter like blogspam.net. Except that it works better. Can you tell me more about the denial of service attack opportunity please? -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3144 Galen Charlton <galen.charlton@liblime.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |galen.charlton@liblime.com --- Comment #9 from Galen Charlton <galen.charlton@liblime.com> 2009-06-29 15:12:46 --- Comment on proposed patch: My main concern with this patch is that there needs to be an abstraction layer, no matter how thin, for spam filtering before we start adding in support for specific services like Mollom. A simple class in C4 that can delegate a spam/ham decision should be sufficient. We have a big enough mess with the current state of support for enhanced content providers without any kind of abstraction layer, so I'd like to take this opportunity for us to not fall into a similar trap. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠liblime.com