Re: github notification spam

Lists: pgsql-hackers
From: Bruce Momjian <bruce(at)momjian(dot)us>
To: PostgreSQL-development <pgsql-hackers(at)postgreSQL(dot)org>
Subject: github notification spam
Date: 2012-03-17 13:46:14
Message-ID: 20120317134614.GG28340@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

After my pg_upgrade commit yesterday, I started receiving dozens of spam
emails from github. I am not sure if it was because I was the
committer, or because I am subscribed to the github postgres feed.

Anyway, the spam has a URL at the bottom --- if you click on
notifications on that page, you can see the spam, and if you click on
the user name, and then under the tools gear icon, you can block the
user or report them for spam (I recommend both).

Eventually you will get an email stating they are investigating the
user. I assume they will eventually figure out how to block this, but
for now, I thought other github subscribers and committers should know
about the problem.

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ It's impossible for everything to be true. +


From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 14:52:39
Message-ID: CABUevEx2iuzAaU=ec0C9Ltemy3PU3JVooKRaczQrDr7=C8WFwQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 14:46, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> After my pg_upgrade commit yesterday, I started receiving dozens of spam
> emails from github.  I am not sure if it was because I was the
> committer, or because I am subscribed to the github postgres feed.
>
> Anyway, the spam has a URL at the bottom --- if you click on
> notifications on that page, you can see the spam, and if you click on
> the user name, and then under the tools gear icon, you can block the
> user or report them for spam (I recommend both).
>
> Eventually you will get an email stating they are investigating the
> user.  I assume they will eventually figure out how to block this, but
> for now, I thought other github subscribers and committers should know
> about the problem.

I have had this issue for well over a week by now. They don't seem
particularly keen on actually fixing it - they seem mostly happy with
having it removed from their website after the fact.

I find the more efficient solution to go into your own github account
settings under "notification center" and just turn it all off.

--
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/


From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 15:05:44
Message-ID: CABUevExxsrPm0KvXxU34q-meje8DsjArtkNcEyH-rPWjavj9Ag@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 15:52, Magnus Hagander <magnus(at)hagander(dot)net> wrote:
> On Sat, Mar 17, 2012 at 14:46, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
>> After my pg_upgrade commit yesterday, I started receiving dozens of spam
>> emails from github.  I am not sure if it was because I was the
>> committer, or because I am subscribed to the github postgres feed.
>>
>> Anyway, the spam has a URL at the bottom --- if you click on
>> notifications on that page, you can see the spam, and if you click on
>> the user name, and then under the tools gear icon, you can block the
>> user or report them for spam (I recommend both).
>>
>> Eventually you will get an email stating they are investigating the
>> user.  I assume they will eventually figure out how to block this, but
>> for now, I thought other github subscribers and committers should know
>> about the problem.
>
> I have had this issue for well over a week by now. They don't seem
> particularly keen on actually fixing it - they seem mostly happy with
> having it removed from their website after the fact.
>
> I find the more efficient solution to go into your own github account
> settings under "notification center" and just turn it all off.

As a followup since I got a question on IM - it appears to mostly be
"comments on my commits" that's causing the spam.

--
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/


From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 15:05:56
Message-ID: 20120317150556.GH28340@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 03:52:39PM +0100, Magnus Hagander wrote:
> On Sat, Mar 17, 2012 at 14:46, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> > After my pg_upgrade commit yesterday, I started receiving dozens of spam
> > emails from github.  I am not sure if it was because I was the
> > committer, or because I am subscribed to the github postgres feed.
> >
> > Anyway, the spam has a URL at the bottom --- if you click on
> > notifications on that page, you can see the spam, and if you click on
> > the user name, and then under the tools gear icon, you can block the
> > user or report them for spam (I recommend both).
> >
> > Eventually you will get an email stating they are investigating the
> > user.  I assume they will eventually figure out how to block this, but
> > for now, I thought other github subscribers and committers should know
> > about the problem.
>
> I have had this issue for well over a week by now. They don't seem
> particularly keen on actually fixing it - they seem mostly happy with
> having it removed from their website after the fact.
>
> I find the more efficient solution to go into your own github account
> settings under "notification center" and just turn it all off.

Yes, I just did turn it off because it happened again this morning. I
was a little worried I might miss legitmate email,

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ It's impossible for everything to be true. +


From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 15:06:54
Message-ID: 20120317150654.GI28340@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 04:05:44PM +0100, Magnus Hagander wrote:
> On Sat, Mar 17, 2012 at 15:52, Magnus Hagander <magnus(at)hagander(dot)net> wrote:
> > On Sat, Mar 17, 2012 at 14:46, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> >> After my pg_upgrade commit yesterday, I started receiving dozens of spam
> >> emails from github.  I am not sure if it was because I was the
> >> committer, or because I am subscribed to the github postgres feed.
> >>
> >> Anyway, the spam has a URL at the bottom --- if you click on
> >> notifications on that page, you can see the spam, and if you click on
> >> the user name, and then under the tools gear icon, you can block the
> >> user or report them for spam (I recommend both).
> >>
> >> Eventually you will get an email stating they are investigating the
> >> user.  I assume they will eventually figure out how to block this, but
> >> for now, I thought other github subscribers and committers should know
> >> about the problem.
> >
> > I have had this issue for well over a week by now. They don't seem
> > particularly keen on actually fixing it - they seem mostly happy with
> > having it removed from their website after the fact.
> >
> > I find the more efficient solution to go into your own github account
> > settings under "notification center" and just turn it all off.
>
> As a followup since I got a question on IM - it appears to mostly be
> "comments on my commits" that's causing the spam.

How does gihub know that the commit made to the Postgres source is the
same user name as my github account name?

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ It's impossible for everything to be true. +


From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 15:07:34
Message-ID: CABUevExxd87rsWog=TEw_f8R+JKcsOp+sJ+-Kr+-eVe=xeLNOw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 16:05, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> On Sat, Mar 17, 2012 at 03:52:39PM +0100, Magnus Hagander wrote:
>> On Sat, Mar 17, 2012 at 14:46, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
>> > After my pg_upgrade commit yesterday, I started receiving dozens of spam
>> > emails from github.  I am not sure if it was because I was the
>> > committer, or because I am subscribed to the github postgres feed.
>> >
>> > Anyway, the spam has a URL at the bottom --- if you click on
>> > notifications on that page, you can see the spam, and if you click on
>> > the user name, and then under the tools gear icon, you can block the
>> > user or report them for spam (I recommend both).
>> >
>> > Eventually you will get an email stating they are investigating the
>> > user.  I assume they will eventually figure out how to block this, but
>> > for now, I thought other github subscribers and committers should know
>> > about the problem.
>>
>> I have had this issue for well over a week by now. They don't seem
>> particularly keen on actually fixing it - they seem mostly happy with
>> having it removed from their website after the fact.
>>
>> I find the more efficient solution to go into your own github account
>> settings under "notification center" and just turn it all off.
>
> Yes, I just did turn it off because it happened again this morning.  I
> was a little worried I might miss legitmate email,

Yeah, I'd be more worried if I was actually using all the github tools
for development. I just use it for code storage and such. The postgres
method of just using email lets the regular email tools do their job
on the spam that undoubtedly are created ther etoo, but they work much
better.

--
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/


From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 15:08:08
Message-ID: CABUevEyc1c+oc=LchSicSWQ2ZJXmBw08rYqiFe20XRsKq1U3ZA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 16:06, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> On Sat, Mar 17, 2012 at 04:05:44PM +0100, Magnus Hagander wrote:
>> On Sat, Mar 17, 2012 at 15:52, Magnus Hagander <magnus(at)hagander(dot)net> wrote:
>> > On Sat, Mar 17, 2012 at 14:46, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
>> >> After my pg_upgrade commit yesterday, I started receiving dozens of spam
>> >> emails from github.  I am not sure if it was because I was the
>> >> committer, or because I am subscribed to the github postgres feed.
>> >>
>> >> Anyway, the spam has a URL at the bottom --- if you click on
>> >> notifications on that page, you can see the spam, and if you click on
>> >> the user name, and then under the tools gear icon, you can block the
>> >> user or report them for spam (I recommend both).
>> >>
>> >> Eventually you will get an email stating they are investigating the
>> >> user.  I assume they will eventually figure out how to block this, but
>> >> for now, I thought other github subscribers and committers should know
>> >> about the problem.
>> >
>> > I have had this issue for well over a week by now. They don't seem
>> > particularly keen on actually fixing it - they seem mostly happy with
>> > having it removed from their website after the fact.
>> >
>> > I find the more efficient solution to go into your own github account
>> > settings under "notification center" and just turn it all off.
>>
>> As a followup since I got a question on IM - it appears to mostly be
>> "comments on my commits" that's causing the spam.
>
> How does gihub know that the commit made to the Postgres source is the
> same user name as my github account name?

They both have the same email address. Remember that git commit
authors are User Name <email(at)com>, not just userid like back in cvs
days.

--
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/


From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 15:39:49
Message-ID: 20120317153949.GJ28340@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 04:08:08PM +0100, Magnus Hagander wrote:
> On Sat, Mar 17, 2012 at 16:06, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> > On Sat, Mar 17, 2012 at 04:05:44PM +0100, Magnus Hagander wrote:
> >> On Sat, Mar 17, 2012 at 15:52, Magnus Hagander <magnus(at)hagander(dot)net> wrote:
> >> > On Sat, Mar 17, 2012 at 14:46, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> >> >> After my pg_upgrade commit yesterday, I started receiving dozens of spam
> >> >> emails from github.  I am not sure if it was because I was the
> >> >> committer, or because I am subscribed to the github postgres feed.
> >> >>
> >> >> Anyway, the spam has a URL at the bottom --- if you click on
> >> >> notifications on that page, you can see the spam, and if you click on
> >> >> the user name, and then under the tools gear icon, you can block the
> >> >> user or report them for spam (I recommend both).
> >> >>
> >> >> Eventually you will get an email stating they are investigating the
> >> >> user.  I assume they will eventually figure out how to block this, but
> >> >> for now, I thought other github subscribers and committers should know
> >> >> about the problem.
> >> >
> >> > I have had this issue for well over a week by now. They don't seem
> >> > particularly keen on actually fixing it - they seem mostly happy with
> >> > having it removed from their website after the fact.
> >> >
> >> > I find the more efficient solution to go into your own github account
> >> > settings under "notification center" and just turn it all off.
> >>
> >> As a followup since I got a question on IM - it appears to mostly be
> >> "comments on my commits" that's causing the spam.
> >
> > How does gihub know that the commit made to the Postgres source is the
> > same user name as my github account name?
>
> They both have the same email address. Remember that git commit
> authors are User Name <email(at)com>, not just userid like back in cvs
> days.

Yes, but I am surprised they are doing email linking with Postgres
community commits. It is a creative idea, but not something I would
think people would think of.

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ It's impossible for everything to be true. +


From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 15:40:52
Message-ID: CABUevExok7NRmh4dgyW8UOupYjOLDY=KYQDVnBdhFMxhf5UYXQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 16:39, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> On Sat, Mar 17, 2012 at 04:08:08PM +0100, Magnus Hagander wrote:
>> On Sat, Mar 17, 2012 at 16:06, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
>> > On Sat, Mar 17, 2012 at 04:05:44PM +0100, Magnus Hagander wrote:
>> >> On Sat, Mar 17, 2012 at 15:52, Magnus Hagander <magnus(at)hagander(dot)net> wrote:
>> >> > On Sat, Mar 17, 2012 at 14:46, Bruce Momjian <bruce(at)momjian(dot)us> wrote:
>> >> >> After my pg_upgrade commit yesterday, I started receiving dozens of spam
>> >> >> emails from github.  I am not sure if it was because I was the
>> >> >> committer, or because I am subscribed to the github postgres feed.
>> >> >>
>> >> >> Anyway, the spam has a URL at the bottom --- if you click on
>> >> >> notifications on that page, you can see the spam, and if you click on
>> >> >> the user name, and then under the tools gear icon, you can block the
>> >> >> user or report them for spam (I recommend both).
>> >> >>
>> >> >> Eventually you will get an email stating they are investigating the
>> >> >> user.  I assume they will eventually figure out how to block this, but
>> >> >> for now, I thought other github subscribers and committers should know
>> >> >> about the problem.
>> >> >
>> >> > I have had this issue for well over a week by now. They don't seem
>> >> > particularly keen on actually fixing it - they seem mostly happy with
>> >> > having it removed from their website after the fact.
>> >> >
>> >> > I find the more efficient solution to go into your own github account
>> >> > settings under "notification center" and just turn it all off.
>> >>
>> >> As a followup since I got a question on IM - it appears to mostly be
>> >> "comments on my commits" that's causing the spam.
>> >
>> > How does gihub know that the commit made to the Postgres source is the
>> > same user name as my github account name?
>>
>> They both have the same email address. Remember that git commit
>> authors are User Name <email(at)com>, not just userid like back in cvs
>> days.
>
> Yes, but I am surprised they are doing email linking with Postgres
> community commits.   It is a creative idea, but not something I would
> think people would think of.

It's because we push a mirror of our git repository to github. they
don't track our actual community repository, just the mirror.

--
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/


From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: github notification spam
Date: 2012-03-17 15:59:03
Message-ID: 20120317155903.GK28340@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sat, Mar 17, 2012 at 04:40:52PM +0100, Magnus Hagander wrote:
> > Yes, but I am surprised they are doing email linking with Postgres
> > community commits.   It is a creative idea, but not something I would
> > think people would think of.
>
> It's because we push a mirror of our git repository to github. they
> don't track our actual community repository, just the mirror.

Right, but my point is they are linking email addresses from our git
commits to registered github user email addresses. They are sending me
email because I committed to our community tree, and happen to have a
github account with the same email address.

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ It's impossible for everything to be true. +