On 2015-12-16 18:21:47 +0100, Magnus Hagander wrote:
Either they've found a way to script-generate gmail addresses, or they have found a way to break the django hashes.
Or they just hired somebody to do that kind of thing manually. There's sites for that...
In the interim, let's just disable edits.
New account signups have been temporarily disabled at least. But yes, they still have all those accounts against the wiki as well.
New account signups have been re-enabled, now requiring a captcha. Hopefully that will be enough to stop the new spam signups. We'll keep an eye on it and disable them again if it seems to happen again.