Message-ID: <46B4B2EF.2070308@hagander.net>
Date: Sat, 04 Aug 2007 19:10:07 +0200
From: Magnus Hagander <magnus@hagander.net>
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: Gregory Stark <stark@enterprisedb.com>
CC: Greg Sabino Mullane <greg@turnstep.com>,  pgsql-www@postgresql.org,
	pgsql-advocacy@postgresql.org
Subject: Re: [pgsql-advocacy] We need an Advocacy wiki
References: <a5b9f5a05b5dd032d31c3185669fb093@biglumber.com>
	<87lkcrkzyd.fsf@oxford.xeocode.com>
In-Reply-To: <87lkcrkzyd.fsf@oxford.xeocode.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Gregory Stark wrote:
> "Greg Sabino Mullane" <greg@turnstep.com> writes:
> 
>> Not sure what your definition of normal is; that depends on what you mean by 
>> "registered". If it means just creating an account via web form, that's 
>> harldy an impediment to vandalism. We can certainly give more people the power 
>> to grant write-access to wiki accounts, if that's the perceived hold up.
> 
> Do we have any history of vandalism on the -hackers mailing list? There is no
> approval mechanism for people subscribing to the list. Would people be happy
> if every subscription to -hackers required someone to approve your membership?

No, but we *do* have a history of vandalism/spamming on the website.
This includes the interactive docs, news posts, event posts and
professional services. That's pretty much every single part of the
website that actually has a submit button, except for the bug reporting
form - which goes through the majordomo moderation system so it's still
moderated.

But - it helped significantly when we started requesting community
logins for these forms. It's still not gone - there are people
advertising for UK hotels and a few other things that actually sign up
for a community account with a temp email address and post from there.
This is the main reason why we still have manual verification on all
these things even though they require a login.

That said, allowing people to sign up for an account in an automated way
that does require email verification would work, as long as there is:
1) A way to revoke and ban addresses
2) Somebody to keep track of things, and remove spam and revoke/ban
these users.

(this would be the same level of verification that we have for the
mailinglists - it's not like they're unvalidated)

But the work required for (2) is a lot less than a completely open
system of course. If there are a couple of people who are willing to
take that upon them (which there seems to be, given the activity on the
wiki) we could always give that a try?

//Magnus