Spam/possible virus through fire-bot

[scop]

Spam/possible virus (reportedly; haven't tried to verify myself) posted by fire-bot: https://github.com/scop/bash-completion/issues/346

[scop]

More spam:

https://github.com/scop/bash-completion/issues/347 https://github.com/scop/bash-completion/issues/349 https://github.com/scop/bash-completion/issues/350

[marchputt]

I also got a similar thing here. https://github.com/xjtu-wiki/xjtu-wiki.github.io/issues/5 Are there any good ways to prevent this?

[eranrund]

Sorry, I don't think we have a good solution for it. Fire bot is open source so if you have any ideas please feel free to create PR to help.

[austinhuang0131]

Maybe...

• use a list like this?
• validate MX records? (There are DNS lookup APIs so you don't have to DiG stuff)

[eranrund]

I just pushed a change that bans all the disposable email addresses in the list provided. Additionally, since we use SendGrid, I experimented with looking at the spam score (https://sendgrid.com/blog/check-spam-using-parse-webhook/) however so far it seems like it is also flagging non-spam emails so I think more data is needed (I looked for emails with score >=6).

I am not sure what you mean by validating MX records - I can validate an MX record for a given domain exists but I am not sure this would prevent any amount of substantial spam...

Please let me know if you have any other ideas and feel free to submit PRs.

[austinhuang0131]

I guess it can't stop gmail spam...

• austinhuang0131/instagrabber#103
• austinhuang0131/instagrabber#135

Keywords?

[sffc]

More examples of spam:

• https://github.com/sffc/card-creatr-studio/issues/19
• https://github.com/sffc/card-creatr-studio/issues/20
• https://github.com/sffc/card-creatr-studio/issues/21

[austinhuang0131]

• https://github.com/austinhuang0131/barinsta/issues/387
• https://github.com/austinhuang0131/barinsta/issues/1366
• austinhuang0131/barinsta#1505

[sffc]

I stopped using fire-bot because of this issue. The spam was getting to be too much to handle.

[unixfox]

Would it be possible to only create github issues if for example a sentence is included in the email?

I mean if for example please create a github issue is included into the body of the email then firebot create the issue. If not the email is kept in the inbox without any issue created on github.

This sentence would be "advertised" along the email address.