tensorflow/tpu is forwarding tons of spam

[rmlarsen]

As a former member of the TensorFlow team, I am subscribed to tensorflow/tpu issues. My inbox is rapidly filling up with spam forwarded by this github entity. Please do something about it!

[rmlarsen]

They are coming hard and fast:

[Ro-Den]

Late 2024, AI "revolution" ); still can't do anything about SPAM );

That's hilarious!

Let's blame it on MS, though );

[mihaimaruseac]

Tagging @tensorflow/github-owners since this has infected multiple repositories.

I have reported it on GitHub and some of the accounts have been deleted, but this still continues

[learning-to-play]

@rcrowe-google

[rcrowe-google]

We had a similar problem several months ago, but it's been too long and I can't find the thread in email. Here's what I remember:

1. You need to lock down the group settings for who can join and who can post. There is a setting for moderating posts from new members that is pretty useful, but someone needs to monitor it.
2. You need to go through the conversations, identify the users who are posting spam, and ban them.
3. You need to go through the conversations and delete the spam. The sooner the better, because it accumulates fast.

[mihaimaruseac]

Locking the group only works for email, but now the spam is on Github itself.

There is a setting to limit PRs and issues to only members of the organization, but this will make anyone not at Google unable to interact with TensorFlow GitHub repositories.

What was effective in the past was to actually close the spam issues quickly and report the users to GitHub. The longer spam content stays up the more spam content piles up. This is exactly what's mentioned in points 2 and 3 there and works for GitHub too.

[rcrowe-google]

@pradeepkuppla

[mihaimaruseac]

It seems the spam issues have stopped in the last few days, likely GitHub has ramped up detection and deletion of these accounts after they went for too many repos.

Probably we should still look at all new issues in all repos to remove any leftovers, though.

Thank you