Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [] Concern about the Helios+1 voting process ...

I don't suppose there is any way to strip out the bogus user-agents and find out what the numbers would have looked like from the first vote? I agree with Tom that if we have no way to determine real votes we'll have to throw both sets of polling results out. How disappointing that someone would try to game the system on a community input poll and ruin it for everyone else!

David M Williams <david_williams@xxxxxxxxxx>
Sent by:

04/30/2010 05:22 PM

Please respond to
""        <>

"" <>
[] Concern about the Helios+1 voting        process ...

Planning Council,

I don't know if any of you watch the naming votes on a regular basis, ...  

But I became suspicious,  asked our webmasters if there were unusual request patterns, and it turns out there have been many http requests made from just a few IP addresses, that have some obvious non-browser user-agent headers ... strongly suggesting some "ballot stuffing" with some kiddie scripts. While this voting system and process was always meant to be informal (and not especially secure) I'm afraid I was naive and it has just been too tempting for some not to play with it, to the point of manipulation. And, the problem is, there's no way to tell how extensive the problem is. There's not that much tracing or logging done ... and it'd be pretty easy for someone to write scripts that were just a little bit more sophisticated,  spoof the user agent, and we'd not be able to detect those as fake.

So, what to do? Denis said he could (probably on Monday) add some logic to the polling mechanism to require a bugzilla login, so we'd be a little more confident that people voted just once. And I don't think it'd be bad restrict to only those with bugzilla accounts. But, if we did that, should we start over? Just give a few days for re-voting or extend the period for a few more weeks? Or, should we, the planning council, just ignore the votes and decide a good name ourselves? I don't think moving to doodle is much help, if I understand doodle's system, since that just required the user to enter a name, and we never did check that those names are "real" in any way.

I don't much like any of the alteratives, so I'm hoping some of you have a clear idea or opinion of what the best course of action would be.


_______________________________________________ mailing list

IMPORTANT: Membership in this list is generated by processes internal to the Eclipse Foundation.  To be permanently removed from this list, you must contact emo@xxxxxxxxxxx to request removal.

Back to the top