duty-machine can be used for at mention spamming users

[cirosantilli]

(intro to duty-machine for those unfamiliar at: https://cirosantilli.com/china-dictatorship/#duty-machine )

Edit: someone actually did the reverse attack: https://cirosantilli.com/china-dictatorship#bot-issue-mention-attack

Hi @duty-machine,

I got a spam once again at: duty-machine/duty-machine#8795 The spammer created an anonymous temporary document at: https://shimo.im/docs/VQJvJgpQ3dVHQQPV/ and then deleted it after archive.

No big deal for me personally, this is only the second one (first one at duty-machine/duty-machine#2683 and it actually taught me about your awesome project). I also wonder if there is any workaround, since comments are made by https://github.com/features/actions so I wonder if I block the duty-machine it might not even stop the spam, and I don't want to block it anyways, I like you :) asked at: isaacs/github#1924

However, to ensure the longevity of the project, I believe you should implement some simple solution, e.g. just add a space character after every single @. E.g., wumaos could attempt to shut the service down temporarily by spamming a lot of people with it.

Cheers.

(it's likely the same user from #191 I gotta say, I respect your creative spam mechanisms, you are actually giving me some good ideas)

[duty-machine]

Sorry about that. Very creative method of spamming though... I have fixed it by your proposal. Thank you and have a good one!

[cirosantilli]

No worries at all duty! Thanks for looking into it and solving it! Keep up your awesome project!