On 12/16/2015 07:38 PM, Stefan Kaltenbrunner wrote:
> On 12/16/2015 07:12 PM, Stefan Kaltenbrunner wrote:
>> On 12/16/2015 06:29 PM, Bruce Momjian wrote:
>>> On Wed, Dec 16, 2015 at 06:28:18PM +0100, Magnus Hagander wrote:
>>>> On Wed, Dec 16, 2015 at 6:27 PM, Joshua D. Drake <jd@commandprompt.com> wrote:
>>>>
>>>> On 12/16/2015 09:22 AM, Andres Freund wrote:
>>>>
>>>> On 2015-12-16 18:21:47 +0100, Magnus Hagander wrote:
>>>>
>>>> Either they've found a way to script-generate gmail addresses, or
>>>> they have
>>>> found a way to break the django hashes.
>>>>
>>>>
>>>> Or they just hired somebody to do that kind of thing manually. There's
>>>> sites for that...
>>>>
>>>>
>>>>
>>>>
>>>> In the interim, let's just disable edits.
>>>>
>>>>
>>>> New account signups have been temporarily disabled at least. But yes, they
>>>> still have all those accounts against the wiki as well.
>>>
>>> What is the plan for undoing the spam edits?
>>
>> we are working on that, but we have no final answer yet...
>
> we are currently working on reverting the entire wiki back to a state
> before the attack from system backups because it does not seem sensible
> to try to revert this in piece meal style.
we have now restored a backup from ~2015-12-15 05:00:37 UTC (later
backups already had spam traces in it) - th wiki is live again, user
account signup for the entire community account system is still disabled
until we have a better plan to deal with this crap.
Stefan
