453652 - improve captcha to reduce spam

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Wayne Mery (:wsmwk)]

minimally, 10-15% of recent postings in mozilla.feedback is spam, based on a 3 day sample

note also, "send feedback" button is enabled when user has not provided the captcha data. could probable be required, even though the captcha is checked server-side

Comment 1

[Wayne Mery (:wsmwk)]

fwiw
mozilla.feedback  looks to be more like 30% check based on additional checking
mozilla.feedback.firefox however looks to be fairly clean, est. <1% junk
mozilla.feedback.thunderbird also looks to be close to zero.

Comment 2

[Gervase Markham [:gerv] (not reading bugmail)]

Attachment: Patch

This patch does the following:

- Adds ReCAPTCHA captcha. Currently, it's only checked if the fields are actually submitted, which makes it very easy to bypass. This is so we don't need to have a flag day updating all the forms which submit through Hendrix. Once we've updated them all to include the client-side CAPTCHA code, we can tighten the check.

- Makes the captcha a required field.

- Removes an unused error.

- Updates for Shiretoko (rather than Gran Paradiso)

- A few wording tweaks to the front page and success page, including a typo fix (reresolves bug 453613)

- Adds a note to each message telling people how to respond to it (bug 453619)

- Allows the default product to be passed in on the URL.

Gerv

Comment 3

[Gervase Markham [:gerv] (not reading bugmail)]

Attachment: Patch v.2

Oops, missed out index.cgi.

Gerv

Comment 4

[Gervase Markham [:gerv] (not reading bugmail)]

Over to website push...

Bug 453816 filed as follow-up to update Hendrix access points.

Gerv

Comment 5

[Wayne Mery (:wsmwk)]

time to remove mozilla suite from the selection list?

Comment 6

[Robert Kaiser]

(In reply to comment #5)
> time to remove mozilla suite from the selection list?

Probably, it's been EOLed for about 3 years or so now, though I guess removing that might be an additional bug. BTW, is there a list of where reports for what product go?

Comment 7

[Gervase Markham [:gerv] (not reading bugmail)]

Wayne: please file another bug about that.

Server Ops: any chance of a cvs update here? Should take about 30 seconds, and correct that embarrassing front page typo.

Thanks,

Gerv

Comment 8

[Dave Miller [:justdave]]

Done.