Message-ID: <4F8D83C7.2070306@gmail.com>
Date: Tue, 17 Apr 2012 10:52:55 -0400
From: Jay Levitt <jay.levitt@gmail.com>
User-Agent: Postbox 3.0.3 (Macintosh/20120304)
MIME-Version: 1.0
To: Alex Shulgin <ash@commandprompt.com>
CC: Magnus Hagander <magnus@hagander.net>,
	Dimitri Fontaine <dimitri@2ndquadrant.fr>,
	Alvaro Herrera <alvherre@commandprompt.com>,
	Peter Eisentraut <peter_e@gmx.net>,
	Robert Haas <robertmhaas@gmail.com>, Tom Lane <tgl@sss.pgh.pa.us>,
	Greg Smith <greg@2ndquadrant.com>,
	Pg Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Bug tracker tool we need
References: 
 <CA+Tgmoa75QujxzCZC+dj=0+JayGPhJD2kQMDBmbGmmq_HPgHxw@mail.gmail.com>
	<CAEYLb_VUiz57BeDy8d2gWQt_HRn9xpw83gt7MS0+wYmUopasrA@mail.gmail.com>
	<CA+TgmoZLWG=napMA-Fx4u8PTGDkY2CMz84LXAACsvhKRL+D2vg@mail.gmail.com>
	<4F84D3A0.8010808@2ndQuadrant.com>
	<CA+TgmoaN2wi85HVS-xuZkw9O6O_RmF4ovxX+=n6o2x6a1S2b-A@mail.gmail.com>
	<1334165303.25392.9.camel@vanquo.pezone.net>
	<28338.1334168965@sss.pgh.pa.us>
	<1334180206.25392.39.camel@vanquo.pezone.net>
	<CA+TgmoariJzLZ-9CfhF-Xwezk=UbmG_WUk5KydPYb8qFJzgkXw@mail.gmail.com>
	<1334350086.9019.16.camel@vanquo.pezone.net>
	<878vhyeqyq.fsf@commandprompt.com> <4F89ED6C.4030609@gmail.com>
	<87d379mwan.fsf@commandprompt.com>
	<1334540156-sup-2520@alvh.no-ip.org>
	<878vhwnjhv.fsf@hi-media-techno.com>
	<877gxf7ihf.fsf_-_@commandprompt.com> <4F8C93B2.1000503@gmail.com>
	<CABUevEw+9ZCC8eBQmWyjrmEyFFH=oBV270Hv=Cq9qPSLepehJg@mail.gmail.com>
	<4F8D6E37.5090808@gmail.com> <8739821o79.fsf@commandprompt.com>
In-Reply-To: <8739821o79.fsf@commandprompt.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Alex Shulgin wrote:
> Jay Levitt<jay.levitt@gmail.com>  writes:
>> (A quick Google shows redmine and especially Trac having spam issues
>> of their own.)
>
> Ugh, redmine (or trac for that matters) has nothing to with handling
> spam.  I believe a typical bug tracker doesn't handle spam itself, it
> lets the mailing system do that.
>
> Surely you can throw in some captcha plugins to try to reduce the spam
> posted from the web UI.

Maybe I'm confused - Magnus et al, are we talking spammy issues/issue 
comments/etc, or are we talking more about exposed email addresses?

I assumed we meant spammy issues, like blog comments - spammers post issues 
and comments with links, to get PageRank to their sites.  Email defenses 
wouldn't help here.

Captchas are fairly pointless nowadays, assuming you have someone dedicated 
enough to write a spambot against your bug tracker.  Most of them (even 
reCAPTCHA!) can be >80% defeated by software - many 99% - and there are 
millions of humans hanging out on Mechanical Turk who'll solve them for you 
100%.  Modern anti-spam ends up being a machine learning and systems 
exercise.. but that's another mailing list :) I think Google gets more use 
out of reCAPTCHA for OCR tweaking than for anti-spam.

Jay