X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 2EE6F383981F
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1628788046;
	bh=UckcZr2g9KixQsSVTHgTnSUp+T19DqBx3v07uRirr5I=;
	h=Date:To:Subject:References:In-Reply-To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	From;
	b=l8iso2PETtrQcwyCeU+CRsBLuldndoNxKOl/IwlWB4O/acY2a5pivIYU6ddJZ4Hjg
	0xQh7zk7LBinKeJ23boFry78rTH8W5SOQc6GzUpe7p8jJUBj/YXUfjYF6WEY3Tk2Il
	enLSh0Xxmk37UltId0VIvFigxGV6Lw6nd04BRqr8=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 052CC3947C0C
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
DKIM-Filter:	OpenDKIM Filter v2.11.0 cgf.cx B3F5A42235
X-Spam-Level:
X-Spam-CGF-Status:	No, score=-3.0 required=5.0 tests=ALL_TRUSTED,BAYES_00,
	TXREP autolearn=ham autolearn_force=no version=3.4.4 spammy=H*M:cgf,
	hear, who, button
Date:	Thu, 12 Aug 2021 13:05:57 -0400
To:	cygwin <cygwin AT cygwin DOT com>
Subject:	Re: META: Fix the signup procedure?
Message-ID:	<20210812170557.GA1128@cgf.cx>
Mail-Followup-To:	cygwin <cygwin AT cygwin DOT com>
References:	<CANV2+nXG7dm9Lab+wb0=3Efd_rLqQd7YsdqzLXJz6VL1XUgLQQ AT mail DOT gmail DOT com>
	<f6ddede5-4e09-5d77-eabf-bd2060e57de9 AT iol DOT it>
MIME-Version:	1.0
In-Reply-To:	<f6ddede5-4e09-5d77-eabf-bd2060e57de9@iol.it>
User-Agent:	Mutt/1.5.20 (2009-06-14)
X-Spam-Status:	No, score=1.2 required=5.0 tests=BAYES_40,
	HEADER_FROM_DIFFERENT_DOMAINS, KAM_DMARC_STATUS, SPF_HELO_PASS, SPF_PASS,
	TXREP autolearn=no autolearn_force=no version=3.4.4
X-Spam-Level:	*
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Christopher Faylor via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Christopher Faylor <cgf-use-the-mailinglist-please AT cygwin DOT com>
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Thu, Aug 12, 2021 at 12:36:12PM +0200, Valerio Messina wrote:
>On 8/11/21 1:26 PM, Russell VT via Cygwin wrote:
>>Can one of you powerful folks, please, fix the signup approvals and make it
>>a bit more difficult to signup and account that is "allowed" to post on
>>this list?
>
>as now the subscribe procedure is a simple:
>0) open the web page: https://cygwin.com/mailman/listinfo/cygwin/
>1) fill form with name, email and pass
>2) press the Subscribe button
>3) receive a confirmation mail
>4) follow the link in the mail
>5) press the subscribe button in the new web page
>all steps are easily script-able with 'curl'
>So in my opinion first thing to do is to add a CAPTCHA [1] in the step 1

You can post to this list without subscribing so this wouldn't
accomplish anything besides annoying people who want to subscribe.

>I tried to contact the list admin sent from IP: 8.43.85.97
>that is <noc AT redhat DOT com> asking for removal of spammers once we
>received every spam, but spamming continue.

That email address has nothing (or at least very little) to do with
cygwin.com / sourceware.org.  The right address is "postmaster", which
is monitored by me.  That said, I sure do not want to hear from
"helpful" people pointing out spam.  I monitor multiple lists for spam,
block offending parties, and generate rules for spamassassin to stop
similar messages from coming through.  I see a lot more spam than anyone
here and there's no reason to have someone add to the load by pointlesly
showing me more.

>I also noted a big increase in spam directed to my email, once I made
>a post to the list. This is probably related to the fact the list
>archive is freely available to web spiders at:
>https://cygwin.com/pipermail/cygwin/
>with email sender visible as first line once you open an mail.
>So second action to do is report the 'name' of sender but not the
>email in those pages, or at least blacken the domain part @domain.tld

We used to munge email addresses in a previous version of the mailing
list but it was decided to stop doing so a couple of years ago when we
moved to a new server / new mailing list software.

The bottom line is that we're all volunteers here.  It's unlikely that
anyone is going to offer up more of their time to customize the
tried-and-true mailing list software used by sourceware.org / cygwin.com /
gcc.gnu.org.

If the small amount of spam seen here bothers you then please don't
contribute to it by publicly remarking on it.  Unsubscribing is the
best way to not see any more spam from the cygwin mailing list.


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -