[om-infra] Wiki page with spam or...

Jean-Claude Vanier jclvanier at gmail.com
Sat Feb 20 14:38:43 EST 2016


Hi,
-- the linked site is commercial and has nothing to see with us.
-- the wiki page seems to have been modified on 1 February 2016‎ for
the last time
-- MandrMan seems to have been created on 28 December 2015 at 23:14
-- He has no special permission
-- His password hash is strange:
:pbkdf2:sha256:10000:128:9ee6ECosuGslxFuL3LN9Hg==:TivWzleamusf3TbESjAq4yprpTr2auoXOuPOevDtos4hioBRJ9KRARDmoiVQ3J0QrFSiqVYUX73UdCPpoHp4khQoTp+P+wp1CothwoTDoxd32gX6sdh4Lw2sxn9MlUAhCwFdP7MpxaseSCNeRnFf1XZOwrWoxjhWw8QPlPkmBz8=
-- his email is: jordan.sanders at devart.com


==>
We could:
-- safely delete the page
-- safely delete this "user"
We should also analyze the logs to get a clue on how the registration
has been done. My guess is that he simply used a direct link like this
one:
index.php?title=Special:UserLogin&type=signup
that enables anyone to register. But maybehe used other parameters
that give the right to edit a page. I didn't test yet.

==> though the release we use (1.25.3) is maintained till June, we
should upgrade media wiki to the current version : 1.26.2

2016-02-20 16:10 GMT+01:00 Wayne Sallee <Wayne at waynesallee.com>:
> The information was also not put in any of the sub-categories, which make it
> look like a bot.
>
> Wayne Sallee
> Wayne at WayneSallee.com
>
> On 02/19/2016 08:45 AM, rugyada wrote:
>>
>> Hello,
>>
>> Please have a look to our wiki page here
>> https://wiki.openmandriva.org/en/Systemconnectivity
>>
>> I'm wondering if it's spam or something useful (uhm... this linked
>> site has a big "BUY" button which made me mistrustful:P )
>>
>>
>
> _______________________________________________
> OM-Infra mailing list
> OM-Infra at ml.openmandriva.org
> http://ml.openmandriva.org/mailman/listinfo/om-infra_ml.openmandriva.org



More information about the OM-Infra mailing list