> But, given that the proper format for email bugs is unlikely to be present
> in run-of-the-mill spam, one would guess that a fairly simple filter
> might weed out the vast majority of spam sent to the bug-reporting
> address.
There are two problems with this. First, $nnnn@bugs.debian.org accepts absolutely freeform email messages to followup to existing bug reports. So that's hundreds of thousands of email addresses spammers could still send spam to, even if submit@bugs.debian.org has smart filtering.
Secondly, all it takes is a few spammers who set up a targeted spam template with the appropriate headers for submit@, and suddenly we have to deal with not only large volumes of incoming spam, but spam that creates new bug reports that choke up lists of the real bug reports. So I think it's smart to not force the spammers to learn how to do that.
Posted Apr 13, 2012 15:25 UTC (Fri) by giraffedata (subscriber, #1954)
[Link]
all it takes is a few spammers who set up a targeted spam template with the appropriate headers for submit@
It's hard to imagine any spammer doing that. The spammer would be writing special code to target less than a hundred pairs of human eyes. That doesn't even fit the definition of spam.
Bug reports: information or spam?
Posted Apr 13, 2012 15:30 UTC (Fri) by corbet (editor, #1)
[Link]
A lot of spammers don't care about human eyes; they target only the Google web crawler. They are more than willing to bash out a script to get their URLs into public places; trust me on this one.