[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: spammers closing bugs in BTS

On Wed, Aug 17, 2016 at 06:14:38PM +0200, Daniel Pocock wrote:
> I received a notification that a bug was closed.
> The email that closed the bug was a spam email sent to the address
>   (bug-number)-done@bugs.debian.org
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737921
It was send by an PHP script, probably an abused contact form
X-PHP-Originating-Script: 10006:post.php(5) : regexp code(1) : eval()'d
code(17) : eval()'d code

> Maybe time to start requiring PGP signatures on control emails to the BTS?
what about non-DDs?

1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333

keybase: https://keybase.io/gfa

Attachment: signature.asc
Description: PGP signature

Reply to: