Bug 139314 - Bugzilla / account registration too vulnerable for spammers
Summary: Bugzilla / account registration too vulnerable for spammers
Status: RESOLVED WONTFIX
Alias: None
Product: QA Tools
Classification: Unclassified
Component: General (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-12-30 09:44 UTC by Matthijs
Modified: 2020-12-30 23:27 UTC (History)
3 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matthijs 2020-12-30 09:44:00 UTC
See https://bugs.documentfoundation.org/show_bug.cgi?id=35092 for example - comments 19-64 (and counting) are ALL spam. Apparently, the current state of the Bugzilla implementation allows spammers to automatically create fake accounts (or use compromised accounts) and start spamming away. Please implement additional anti-spam and / or security measures to prevent this as much as possible.
Comment 1 Buovjaga 2020-12-30 13:52:23 UTC
Bugzilla 6 will have antispam functionality
Comment 2 Matthijs 2020-12-30 20:53:41 UTC
(In reply to Buovjaga from comment #1)
> Bugzilla 6 will have antispam functionality

Thanks Buovjaga for your response. Great that Bugzilla 6 will have antispam functionality. Any idea when Bugzilla 6 will be implemented?
Comment 3 Buovjaga 2020-12-30 23:27:53 UTC
(In reply to Matthijs from comment #2)
> (In reply to Buovjaga from comment #1)
> > Bugzilla 6 will have antispam functionality
> 
> Thanks Buovjaga for your response. Great that Bugzilla 6 will have antispam
> functionality. Any idea when Bugzilla 6 will be implemented?

It's a long and painful story (at least how I feel after all this waiting). BZ 6 has been ready for a long time, but tangled in Mozilla's fork. Now, thanks to the  harmonising efforts of very dedicated individuals over the years, both in hired & volunteer capacity, it is close to a release.

The release is basically waiting for the final polish and validation of this database schema migration code: https://github.com/bugzilla/harmony/pull/52