-
-
Notifications
You must be signed in to change notification settings - Fork 240
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
User spams me by creating and then deleting account multiple times #191
Labels
account-delete-spam
User spams and then deletes account immediately
not-shitpost
https://cirosantilli.com/china-dictatorship#shitpost
Comments
cirosantilli
added
the
not-shitpost
https://cirosantilli.com/china-dictatorship#shitpost
label
Jan 28, 2021
cirosantilli
changed the title
User spams me by creating deleting account
User spams me by creating and then deleting account multiple times
Jan 28, 2021
This was referenced Feb 3, 2021
cirosantilli
added
the
account-delete-spam
User spams and then deletes account immediately
label
Mar 12, 2021
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
account-delete-spam
User spams and then deletes account immediately
not-shitpost
https://cirosantilli.com/china-dictatorship#shitpost
Is it possible for you to see if it they are using the email/IP and ban that email/IP from creating new accounts forever?
Here are some instances which I suspect to be from the same user:
the same user has likely been using the same technique at: https://github.com/sky8964/home/pulls and created 20+ such spams posts there:
ghost563 UID 78134405 created You can't translate Tibetan because Google Translate doesn't have a "Tibetan" option. #190
And it has happened in other China repos too, possibly by the same user or group: vtuber-issues/home#575
BTW, this user also created #189 with the same title "You can't translate Tibetan because Google Translate doesn't have a "Tibetan" option." but the issue was somehow deleted? Wait, how is that possible? I thought users could not delete their own issues! https://webapps.stackexchange.com/questions/124031/how-can-i-delete-my-posted-issue-on-githubThe creation action appears on API, but I don't see any deletion. And I'm sure I didn't accidentally delete because you can see a message for that as admin. Was it a spam filter someone reported it?
I've just enabled the "Limit to existing users" on the repository which I will now see if it helps (the user has already come on multiple separate days) I also recommend allowing increased times on those interactions to help with this use case:
Request on the private GitHub tracker: https://support.github.com/ticket/personal/0/1000570
Just imagine if someone were to make a similar mentioned this issue attack on GitHub repos of the largest Chinese tech companies:
All you would need would be:
Longest possible comment is only 65536 chars, and the above for example has about 6k, so you could attack about 10 repos at a time.
I don't know how to get the number of issues from the API https://stackoverflow.com/questions/33374778/how-can-i-get-the-number-of-github-issues-using-the-github-api but it can be done manually quickly I guess.
Edit: after 2 weeks, they said in the private tracker that they can't block IP addresses (which I understand, obviously because people change IP addresses, and because Tor exists so it won't matter). They did not say if they can block emails from signing up or not, which is the part that truly matters. I give up asking further for now, I cannot get that information out of support.
Spammers, bring it on.
The text was updated successfully, but these errors were encountered: