On Sun, Sep 30, 2012 at 03:00:01PM -0400, Limao Luo wrote:
My package mcobj [1] has been repeatedly been marked out of date 580 times in 10 minutes, with 61 out-of-date marks per minute (picture for proof [2]). Checking through the email, I saw that the user that was doing this was named invented [3]. I'm not really sure what's going on, particularly whether this is malicious or not. I have emailed invented, and am posting this to try to get to the bottom of this. Has invented (or have other users) done this before?
[1] https://aur.archlinux.org/packages.php?ID=49697 [2] http://i49.tinypic.com/8zh0sn.png [3] https://aur.archlinux.org/account.php?Action=AccountInfo&ID=25347
Well they're certainly doing something weird. I found an odd package of their own with a large amount of spam on it, and a rather spammy name, as well. Seems that the AUR doesn't actually check to see if a package is out of date before sending the email, meaning that you can just submit a dummy form with the do_Flag action and get this lovely result. I've already: - suspended the account (not that it's very effective). - deleted the suspcious package. And I'll be filing a bug against the AUR. Thanks for bringing this to our attention. d