hey ok what about this: you can't edit the bio, create collections, etc until you affirm the email. and in the affirmation email we but anti-spammer measures
2017-05-23 14353, 2017
CatQuest
we can make it a bit convoluted, since legit users will have to do that maybe *once* but spammers will have to do it dozens of times
we could use black/grey/white lists to check against on account creation
2017-05-23 14336, 2017
ruaok
yes.
2017-05-23 14344, 2017
zas
if the email domain is in grey list -> human validation, if in blacklist deny, if in white list ok
2017-05-23 14326, 2017
CatQuest
+1!
2017-05-23 14311, 2017
ruaok
+1!!
2017-05-23 14330, 2017
ruaok
crowd source the validation of accounts?
2017-05-23 14331, 2017
yvanzo
Could we auto-remove future accounts that would not confirm their email address within two weeks? (with a one-week reminder)
2017-05-23 14340, 2017
ruaok
yes, please!
2017-05-23 14307, 2017
zas
yes, i think all accounts should be email-verified to start with
2017-05-23 14310, 2017
ruaok
make a new line there yvanzo
2017-05-23 14313, 2017
reosarevok
yvanzo: how do we send a reminder if we don't have an email? :p
2017-05-23 14330, 2017
ruaok
reosarevok: confirmed.
2017-05-23 14337, 2017
ruaok
means we've sent them a confirmation email.
2017-05-23 14342, 2017
ruaok
means we have the email.
2017-05-23 14347, 2017
reosarevok
We only store the email if it is confirmed
2017-05-23 14357, 2017
reosarevok
At least right now anyway
2017-05-23 14313, 2017
zas
i dont think we need to send reminders
2017-05-23 14326, 2017
suhas2go[m] joined the channel
2017-05-23 14327, 2017
sagar-kohli[m] joined the channel
2017-05-23 14327, 2017
psolanki joined the channel
2017-05-23 14327, 2017
samj1912_riot[m] joined the channel
2017-05-23 14340, 2017
ruaok
we should add a fat banner to warn people of this.
2017-05-23 14348, 2017
psolanki is now known as Guest9089
2017-05-23 14352, 2017
zas
on account creation, just make it clear the email needs to be verified within a delay
2017-05-23 14309, 2017
CatQuest
+
2017-05-23 14325, 2017
yvanzo
Ok, the reminder should just show up in banner, not by email?
2017-05-23 14341, 2017
reosarevok
I think I agree to make a banner, yeah
2017-05-23 14347, 2017
CatQuest
how do we send an email if we don't have an email
2017-05-23 14300, 2017
reosarevok
Until the user has a verified email, have a big banner that can't be dismissed
2017-05-23 14308, 2017
CatQuest
heh
2017-05-23 14327, 2017
CatQuest
pretty much every other site does this
2017-05-23 14340, 2017
CatQuest
"you need to vertyfy your email"
2017-05-23 14344, 2017
reosarevok
If they miss that somehow, hey, how good would their edits be with that attention to "detail"? :p
2017-05-23 14355, 2017
ruaok
ding.
2017-05-23 14314, 2017
ruaok
so, are we saying that there shall be no editing at all without a confirmed email
2017-05-23 14315, 2017
ruaok
?
2017-05-23 14325, 2017
reosarevok
Well that's already true, no?
2017-05-23 14330, 2017
CatQuest
oh but make sure that it's redable by reading software
2017-05-23 14333, 2017
reosarevok
Or you mean of their profile?
2017-05-23 14342, 2017
ruaok
not sure, that is why I am asking.
2017-05-23 14350, 2017
CatQuest
no email ,no profile
2017-05-23 14352, 2017
reosarevok
You can't edit without an email
2017-05-23 14302, 2017
ruaok
great.
2017-05-23 14306, 2017
reosarevok
I think you can edit your profile without an email but your bio isn't shown
2017-05-23 14335, 2017
CatQuest
but unconfirmed emislisn't the issue for alot of these...
2017-05-23 14341, 2017
ruaok
I think we should disallow editing/adding a bio/link without email
2017-05-23 14303, 2017
reosarevok
CatQuest: it's not just that, it's also to just have less fake users in general IMO
2017-05-23 14309, 2017
ruaok
does "limited user" imply no email verified?
2017-05-23 14314, 2017
CatQuest
reosarevok: ja
2017-05-23 14323, 2017
yvanzo
reosarevok: no
2017-05-23 14324, 2017
CatQuest
.. yes no?
2017-05-23 14327, 2017
yvanzo
oops
2017-05-23 14329, 2017
yvanzo
ruaok: no
2017-05-23 14331, 2017
reosarevok
No, limited user implies less than 10 or 25 accepted edits and/or less than two weeks as a user
2017-05-23 14349, 2017
ruaok
> Do not allow an editor to set bio/link if the user is limited or has no verified email.
2017-05-23 14359, 2017
ruaok
is what I added to the doc.
2017-05-23 14334, 2017
CatQuest
hmm.. as a legit user the first thing i do usually on new sites is set my bio with some stuff.. thoguh
2017-05-23 14312, 2017
reosarevok
Yeah that's a hard one. On one hand it blocks a lot of the spam. On the other it also makes the site less welcoming to new legitimate users to some degree
2017-05-23 14330, 2017
CatQuest
wich we do not want :o
2017-05-23 14318, 2017
ruaok
ok, no setting bio/link without confirmed email.
2017-05-23 14322, 2017
ruaok
that isn't too harsh, no?
2017-05-23 14333, 2017
reosarevok
Ok. Right now you can set it IIRC but it won't be visible until you confirm
2017-05-23 14335, 2017
yvanzo
It depends on how it is presented. It can be hidden to start with and be enabled as an unlocked feature, kind of gamification then. :)
2017-05-23 14340, 2017
reosarevok
I guess just forcing them to wait is ok
2017-05-23 14345, 2017
reosarevok
yvanzo: I was thinking about that
2017-05-23 14307, 2017
ruaok
I want to remove the ability to set it.
2017-05-23 14317, 2017
reosarevok
Yeah, agreed
2017-05-23 14319, 2017
ruaok
we want the scripts that set bios to fail, so they stop trying.
2017-05-23 14325, 2017
yvanzo
Yes, I mean 'hide the ability to set it'.
2017-05-23 14333, 2017
reosarevok
yvanzo: Or if not just explain "you can't set this yet as a spam measure, we'll notify you when it's unlocked"
2017-05-23 14334, 2017
ruaok
ah, ok.
2017-05-23 14344, 2017
reosarevok
And then notify the user with some banner later on
2017-05-23 14352, 2017
reosarevok
(ideally it'd be with a notification, but in the meantime...)
2017-05-23 14311, 2017
Freso
Is someone else going through the list as well?
2017-05-23 14322, 2017
ruaok is not
2017-05-23 14342, 2017
Freso
Just a random name in the middle of the list that didn't resolve.
2017-05-23 14354, 2017
Freso
Ah well. :)
2017-05-23 14342, 2017
reosarevok
yvanzo: actually I like this approach more for limited user stuff too
2017-05-23 14306, 2017
reosarevok
Rather than "LIMITED USER" tell them "you have now unlocked the ability to vote and post on other people's edits!" later on :p
2017-05-23 14325, 2017
reosarevok
Sounds more positive
2017-05-23 14326, 2017
CatQuest has thoguht about that a for a long time too, i agree
2017-05-23 14339, 2017
CatQuest
thisis the sort of "gameification" that's usefull
2017-05-23 14351, 2017
khan____ joined the channel
2017-05-23 14331, 2017
D4RK-PH0ENiX has quit
2017-05-23 14350, 2017
D4RK-PH0ENiX joined the channel
2017-05-23 14303, 2017
D4RK-PH0ENiX has quit
2017-05-23 14352, 2017
D4RK-PH0ENiX joined the channel
2017-05-23 14343, 2017
D4RK-PH0ENiX has quit
2017-05-23 14330, 2017
ruaok
spammers all seem to have email addresses set. that follows, I guess. :)
Late 2015? Early 2016? Ish. I can go look up something more exact if you want to.
2017-05-23 14307, 2017
ruaok
please.
2017-05-23 14330, 2017
Freso
I think we opened for the public early 2016 (opatel did the MusicBrainz OAuth2 Discourse plugin (that we ended up not using) for GCI, so it was after the 15/16 GCI).
2017-05-23 14332, 2017
Freso
Okay.
2017-05-23 14335, 2017
ruaok
I want to see how many accounts we can nuke with the "no confirmed email before discourse" rule
2017-05-23 14358, 2017
Freso
Well, if they don't have a confirmed e-mail, they're not on Discourse either.
2017-05-23 14311, 2017
Freso
They don't get created as a user in Discourse until they've confirmed their e-mail.
2017-05-23 14338, 2017
Freso
(And they're not able to use the SSO to log in to Discourse without a confirmed e-mail either.)
2017-05-23 14351, 2017
ruaok
what date?
2017-05-23 14352, 2017
CatQuest
well that's nice
2017-05-23 14315, 2017
CatQuest
and we can remove non-confirmed oens before critiquebrainz,listenbrainz too
