Grex Coop Conference

Item 39: Member Proposal: Create Three Classes of Grex Accounts: Users, Community Users, Validated Users

Entered by cmcgee on Tue Aug 7 00:12:04 2007:

There would be three classes of accounts:

User Account:  No Internet access.  Can send and receive mail only to
local Grex account, use Unix shell, participate in party and the
conferences.  

Community User Account:  Full E-Mail.  Users can send and receive email
from or to any address.  

Validated User Account:  Full net access.  Full access to the Internet,
including telnet, ssh, ftp and http. 

All new user accounts would be created in the User class.

Promotion from the User class to Community Users class would be by
responding to a email sent by a Grex Helper which asked the user to
identify where or how they found out about Grex.  

Promotion from Community Users to Validated Users would require the same
validation that is currently required for membership, either a photocopy
of a government or school issued ID that contains the person's photo, or
by a $1.00 payment through Paypal.  

Once an account was Validated, it would not need to be revalidated. 
Validated User accounts that had not been active for more than a year
could be reaped at the end of that time.   Becoming a member would be
sufficient, but not necessary for becoming a Validated User.
150 responses total.

#1 of 150 by maus on Tue Aug 7 00:37:22 2007:

I would support that. 


#2 of 150 by cmcgee on Tue Aug 7 00:40:20 2007:

First edit: Change line 1 to read there would be


#3 of 150 by cmcgee on Tue Aug 7 00:43:40 2007:

First Edit:

Replace "There would be" in then first line with "There shall be"


#4 of 150 by nharmon on Tue Aug 7 01:49:08 2007:

I support this.


#5 of 150 by cross on Tue Aug 7 02:09:58 2007:

I support this.


#6 of 150 by unicorn on Tue Aug 7 02:37:24 2007:

May I make a suggestion?  I think access to compilers and interpreters
(except for the shells, of course) should be restricted to validated
users.  This would prevent many of the attacks that come from the inside.
Are there any non-shell scripts (e.g. perl or python) that are essential
for non-validated users?


#7 of 150 by mary on Tue Aug 7 03:19:46 2007:

I'll go a bit further and suggest there be some speed bump to people being 
able to POST to the conferences.  Not necessarily social validation, but 
something that would require Grex sending mail to the user and getting a 
response back.  This is a pretty standard expectation out there for good 
reason.  Sad but true.


#8 of 150 by unicorn on Tue Aug 7 03:28:31 2007:

Along with my suggestion in #6, you might have to prohibit non-validated
users from being able to upload precompiled programs from elsewhere, too.
Or is there a way to prevent programs from running from the user's home
directory that I'm not aware of?


#9 of 150 by maus on Tue Aug 7 03:44:34 2007:

resp: #8 

You could put unvalitated users' home directories in a folder on another
slice, and mount that slice noexec. Part of the "turning up" script that
is run when they are validated would migrate their home directory to
/home (or /users or /export/home or /a or /c or wherever we are putting
users' directories). 


#10 of 150 by maus on Tue Aug 7 03:48:11 2007:

resp: 9 

I forgot a couple of things. Warn users to use ${HOME} instead of
hard-coding something like "/export/home/m/a/maus". 

You could update newuser to only give the choices of party or rksh or a
menu and this would also limit the damage. Maybe part of the validation
email would require the user to pick a shell from a broader list (like
full ksh or bash or tag-c-shell) if they want. 

Or send the two big, mean leather-dykes named Guido (Hi, Guido) to rough
up anyone who intentionally tries to break grexserver. 


#11 of 150 by cmcgee on Tue Aug 7 04:14:39 2007:

Could I have some proposed wording changes here, please?  


#12 of 150 by cmcgee on Tue Aug 7 04:28:30 2007:

The wording changes need to be to the above proposal.  Please
distinguish between policy and what staff would have to do to implement
the policy.  

We do not need to include directions to staff on how to make it happen.
 Only what we want to see as a result of staff actions.  


#13 of 150 by cmcgee on Tue Aug 7 04:48:45 2007:

Mary, I'm with you, and think we should remove the ability to
participate in conferences from User to Community User.

Unicorn, could you give a suggested wording that would put "access to
compilers and interpreters other than shells"  into the Validated User
group.  Is that sufficiently precise that a staff member could implement
it?   How would you word "upload precompiled programs" if it needs to be
a separate policy? Or is there a wording that would give staff the
go-ahead to do what you and maus are suggesting?


#14 of 150 by unicorn on Tue Aug 7 04:53:57 2007:

Well, for my suggestions, the first and third sections could read as
follows:

 User Account:  No Internet access.  May not compile programs or run
 user-written scripts except shell scripts.  Can send and receive mail
 only to local Grex account, use Unix shell, participate in party and
 the conferences.

 Validated User Account:  Full net access.  Full access to the Internet,
 including telnet, ssh, ftp and http.  May compile programs and run
 user-written scripts.


#15 of 150 by unicorn on Tue Aug 7 05:01:00 2007:

cmcgee, your response slipped in ahead of mine.  I think that "May not
compile programs" would imply that uploading precompiled programs is
also forbidden.  Or do you think it needs to be explicitly spelled out?


#16 of 150 by unicorn on Tue Aug 7 06:05:22 2007:

Maybe this would be clearer:

 User Account:  No Internet access.  May not compile programs or run
 user-installed programs or scripts except shell scripts.  Can send
 and receive mail only to local Grex account, use Unix shell,
 participate in party and the conferences.

 Validated User Account:  Full net access.  Full access to the Internet,
 including telnet, ssh, ftp and http.  May compile programs and run
 user-installed scripts.

Changing "user-written" to "user-installed", and adding "programs" in
the first case should make it clear that compiling elsewhere and
uploading is also forbidden.


#17 of 150 by remmers on Tue Aug 7 13:57:49 2007:

I endorse bringing this to a vote.

(And suggest that folks consult the bylaws regarding timelines &
endorsement requirements.)


#18 of 150 by vivekm1234 on Wed Aug 8 03:12:47 2007:

I loved the origianl draft (#0) - don't like the modifications! A LOT of
people use Grex to code and don't want to waste time on party and the BBS.
Our offenders are a few well known pests, why force the large mjaority of shell
users to suffer our community needlessly <g>. In any case noexec won't solve 
the problem, they'd just put the stuff in /tmp.


#19 of 150 by unicorn on Wed Aug 8 03:51:02 2007:

Well, noexec could just as easily be used on /tmp, couldn't it?  And
I'm interested in how you know that a lot of people use grex to code
if they don't spend time in party and the BBS to tell you about it.
Besides, nothing's stopping people who want to code on grex from getting
validated so they can do so.  It won't cost them anything, after all.


#20 of 150 by maus on Wed Aug 8 04:08:40 2007:

A standard practice should be to have /tmp and /var/tmp nosuid,noexec
for precisely this problem. Requiring validation does not introduce an
unreasonable barrier to being able to write and execute custom codes,
but does provide a control to deter pests.


#21 of 150 by cmcgee on Wed Aug 8 04:43:03 2007:

vivek, I'm curious about what impact you think validation would have on
the users you are talking about.


#22 of 150 by vivekm1234 on Wed Aug 8 10:52:01 2007:

This response has been erased.



#23 of 150 by vivekm1234 on Wed Aug 8 12:31:10 2007:

This response has been erased.



#24 of 150 by vivekm1234 on Thu Aug 9 03:50:53 2007:

Re #21: people may leave.


#25 of 150 by cmcgee on Thu Aug 9 03:56:43 2007:

what is causing them to leave?  Is it because they have no way to be validated
(like Paypal)?  Is it because they don't want to be validated even though they
could be?    

Is it because a shell account isn't enough to teach them anything?  

What are they getting out of Grex that would change?


#26 of 150 by vivekm1234 on Thu Aug 9 10:15:21 2007:

Re #25: "Is it because they have no way to be validated (like Paypal)?"

No easy and quick way to validate - college students using credit cards
are more the exception than the norm out here, so they'd have to ask
parents or friends - It's not that they don't want to pay 1$. That's
just 40 Rupees or 4 Pepsi glasses or 4 ball-point pens - nothing! What
makes it messy is the credit-card/parent required bit.

"Is it because a shell account isn't enough to teach them anything?"

Shell access is a convenience the way i see it - most of them will just
download and install Windows/Linux, but what if you want to access Unix
from a college computer in the browsing center? Grex provides a easy,
uncomplicated and quick way to get to Unix without the hassle of
tackling a complicated install. Most people will have Windows and data
taking up the whole drive, so they don't need to repartition when they
use Grex.

"What are they getting out of Grex that would change?"

Right now you get perl, ruby, python, gcc, g++, expect, man, mail, vi,
bash, csh, ksh, mount Gahh! You get everything right now, a whole BSD
box with bells and whistles in less then 1 minute after you hit Grex's
telnet port. If that isn't great I don't know what is! Have you seen the
hoops the other shells make you dance through!

"what is causing them to leave?" - Once they finish their course,
project, loose interest they leave. They aren't a part of this community
- they use the box to learn and they don't want to waste their time with
trolls and clueless noobs . Look at Gina, she left because she wasn't
getting any return on her investment - i can barely scratch out a
program, Chad goes hohoho - what the heck is she going to do on party? 
Same story on the BBS, given that we compete against Google.

WE DON'T HAVE PEOPLE - the only reason new people come here is because
of the shell - raising the entry bar will make things harder for sane
people to get in.

Don't complicate matters for now, 1 easy and small step at a time. Let's
first restore mail for non-troll accounts (Community User Accounts).
Then opening up web access to some of our forums (hardware, science,
unix, kitchen, music, books) would be the best possible advertisement
and should get us some users (Captcha is a must for backtalk).

Then if all else fails, we will be risking less when we ask our regular
hello.c users to validate shell (this would be our very last resort -
death rattle as i see it <g>).


#27 of 150 by cross on Thu Aug 9 14:49:24 2007:

I really don't think we should restrict access to things like compilers and
interpreters.  Honestly, I don't see that it's going to make much of a
difference.


#28 of 150 by pfv on Thu Aug 9 22:13:42 2007:

I do, but the issues remain issues.


#29 of 150 by unicorn on Fri Aug 10 00:44:18 2007:

Okay, maybe requiring validation is too strict, but since it *is* how
much of the abuses are coming about, I think it shouldn't be automatic
for new users.  Being able to use compilers and interpreters is a
privilege, and those who are abusing the privilege need to have it
revoked.  Automatically giving that privilege to new users prevents
that.  Treat it like access to e-mail.  There has to be some way
to ensure that the people who have access to those things are not
likely to abuse it, and maybe one of the things that needs to be
checked is where they're connecting from.  If it's a Tor host,
they shouldn't be given access.


#30 of 150 by cross on Fri Aug 10 01:55:05 2007:

The shell is an interpreter; should we cut off access to that, as well?

I would submit that most of the abuses (a) don't affect the vast majority of
grex users (who never use the conferences or party, etc), and (b) are due to
known issues with software that we have installed, poor or outdated defaults,
etc.

Cutting off access to compilers and interpreters because of a few bad eggs
is like moving your house into a secure vault because a fly got through a
hole in your screendoor.  Ie, it is not an appropriate response given the
level of threat.


#31 of 150 by vivekm1234 on Fri Aug 10 04:12:39 2007:

Re #29: Great points. I agree that anonymous-hosts should be given a
restricted-shell, but it's going to be hard to implement? We'll need to
modify login to change the shell every time it's a anonymous-host? What
if he uses loopback/su/login?

Right now i feel we should push #0 through without delaying that! We can
always discuss the modifications, get some working code and then push
that through as a separate proposal at a later date - if required.



#32 of 150 by denise on Tue Aug 14 01:14:04 2007:

I'm not up on the various shells and such, though I realize that's all
of what apparently  many users only access.  So to what extent they can
or can't provide problems to grex, I  haven't a clue.  But it there ARE
ways to use them easily to cause problems, then I agree  that there
should be different access levels.

The stuff that I do notice, of course, are the people that abuse the
conferences, party,  emailing, that sort of thing.  So I agree with Mary
in her response that we should do some  kind of validation before
newusers are allowed to post.  Of course, by being able to READ  the
conferences, they may be [more?] interested in becoming validated [or
maybe not].


#33 of 150 by mcnally on Tue Aug 14 05:37:51 2007:

> I'm not up on the various shells and such, though I realize that's all
> of what apparently  many users only access.  So to what extent they can
> or can't provide problems to grex, I  haven't a clue.  But it there ARE
> ways to use them easily to cause problems, then I agree  that there
> should be different access levels.

(This response isn't really directed at Denise, she's just the latest
to echo a sentiment that I am strongly opposed to..)

So here's the thing..  I hear people talking about "we must do this"
or "we need to do that" to protect the system, and I hope that before
anything rash gets decided we can step back and take a look at the
problem dispassionately.  That's not always easy when someone keeps
poking at your tender spots, or dancing around going "hey! look at me!"
but it's kind of important to try.

I'm going to tell you a little parable I made up, which I will call
"The Parable of the Vandal."  So without further ado..

--

                           The Parable of the Vandal

Once upon a time there was a happy family who were friendly and
hospitable to everyone who came to visit them.  The doors of their
house were never locked, and they were known far and wide for their
hospitality.  Strangers from faraway would come and stay whenever
they were in the area and the family derived great joy from meeting
new people and making new friends.

But one day, a bad man came along.  "I don't like these happy,
friendly people," he said.  "I'm going to teach them a lesson."
And the bad man took a rock and threw it through the window of
the house, where it broke a vase which was a family heirloom..

When the family saw what had happened, they were saddened.  The mother
said to her son, "Well, I suppose it was inevitable that this would
happen eventually.  Junior, go help your father put these shutters on
the windows so this can't happen again."

The next day, while the family were out shopping, the bad man came
back and pried off the shutters with a crowbar, broke another window,
and threw a rock, breaking a small delicate bowl that had been a gift
from one of their guests.

When the family came home, they said, "Shutters were not enough.
We must put boards over the windows and cover them with iron
bars.  Then nobody will be able to throw things through the windows.
This was true, but then the house was dark and they no longer got
to enjoy their view.

On the next day, while the family was in the back yard, the vandal 
walked right in the open front door and dumped a bag of garbage on
the living room rug, then walked out the way he had come.

"We can no longer leave the door open," said the family.  So they
bought locks and bolts and closed the door tightly.

Unable to enter the house, the next day the bad man slashed the tires
on the family's car.

So they spent their savings and built a garage to lock the car in.

After the garage was built, the bad man came back and spray painted
a rude word on their front door.

So Father got a second job and worked hard to earn money to build a
tall fence around the house.  And when the fence was finished the
family bought a vicious guard dog and set it loose to patrol the yard.
The dog even bit Mother once when she tried to stop it from barking
at Junior.  But at least the bad man couldn't get in any more.

Unfortunately neither could anyone else.  The house was surrounded by
a tall fence, guarded by a vicious dog, the door was locked and bolted,
and the windows were boarded over and covered with iron bars.  Even if
visitors *had* been able to get in, who wants to visit a prison?
Plus, the family no longer had the time and money to entertain guests,
nor did they trust strangers any longer.

And they all lived unhappily ever after, even the vandal, who,
after all, was a miserable person to begin with..



#34 of 150 by mcnally on Tue Aug 14 05:41:46 2007:

 So what's the point of my parable?  If it's not obvious, I guess
 I didn't do a very good job, but what I'm hoping people will take
 away from the story is that (a) the vandal will attack any target
 of opportunity.  Unless you lock things down so as to be hopelessly
 restricted and unattractive to pretty much everybody there will
 practically always be something the vandal can do to annoy you;
 (b) it's much easier (less expensive in terms of resources and
 time spent) for the vandal to attack than it is for you to defend.
 (c) in the end, destroying the things that attract people to the
 system is a poor strategy.


#35 of 150 by nharmon on Tue Aug 14 12:28:37 2007:

Mike, always the voice of reason. :)


#36 of 150 by cyklone on Tue Aug 14 12:51:35 2007:

I thought the parable was very nice, though I thought it would work equally
well as the Parable of the Terrorist and the Lost American Freedoms.


#37 of 150 by mary on Tue Aug 14 14:21:28 2007:

Mike, I like the story.  It's a scary one, for sure.  Good thing nobody is 
talking about doing the same with Grex, eh?



#38 of 150 by cross on Tue Aug 14 14:55:13 2007:

Well, bit in a way, they are.  And *talking* about it isn't necessarily a bad
thing, of course, but *doing* some of it would be.  For instance, I really
think it would be bad to block access to compilers and interpreters, for
exactly the reasons Mike points out: too much effort for too little gain, and
at the end of the day, for what purpose?  Sure, we *could* turn off the
execute bit on any filesystem that the average Joe can write to, but then what
about people's personal "bin" directories?  It's just not worth it.


#39 of 150 by unicorn on Fri Aug 17 22:53:00 2007:

Well, I withdraw the suggestion, then.  If you feel we can deal with
the abuses without that, I respect your judgement.  I would really like
to leave those things enabled, but then I would really like to be able
to leave my house and car unlocked without having to worry about people
stealing my stuff, too.  I was just reacting to the recent abuses, some
of which I know were done with user compiled programs, and at least
one of the perpretrators has been talking openly about doing much more
of the same in the not-so-distant future.

By the way, the reason I felt that interpreters like perl and python
could be treated different from shells was because shells have generally
been less powerful, relying much more on external programs to do a lot
of their work, but thinking about it, that probably isn't so true,
anymore, considering that David Korn has stated that he wants ksh
to be as powerful as perl, and even zsh, which I use, has many more
capabilities than I am even aware of, not having had the time to read
the man pages and other dowumentation for it in their entirety, yet.


#40 of 150 by cmcgee on Mon Aug 20 21:46:09 2007:

Ok, I'm about to submit a revised wording on this.  We've had two+ weeks
of comment.  

(I was waiting to make sure the upgrade was stable).  


#41 of 150 by scholar on Fri Aug 24 06:53:52 2007:

I wholeheartedly support this proposal and will definitely be voting for it.


#42 of 150 by mary on Fri Aug 24 12:47:55 2007:

I support this being brought to a vote.


#43 of 150 by cross on Fri Aug 24 14:14:43 2007:

As do I.  Did I already say that?


#44 of 150 by cmcgee on Sat Sep 1 22:21:13 2007:

Ok, here's my amended version.  I have removed "send local email" from
the User Account, based on the current conversations in Agora and Garage
conferences.  

I considered, but decided against, moving conference participation into
the Community User category.
--------------------------------------

There would be three classes of accounts:

User Account:  No Internet access.  Can receive mail only to
local Grex account, use Unix shell, participate in party and the
conferences.  

Community User Account:  Full E-Mail.  Users can send and receive email
from or to any address.  

Validated User Account:  Full net access.  Full access to the Internet,
including telnet, ssh, ftp and http. 

All new user accounts would be created in the User class.

Promotion from the User class to Community Users class would be by
responding to a email sent by a Grex Helper which asked the user to
identify where or how they found out about Grex.  

Promotion from Community Users to Validated Users would require the same
validation that is currently required for membership, either a photocopy
of a government or school issued ID that contains the person's photo, or
by a $1.00 payment through Paypal.  

Once an account was Validated, it would not need to be revalidated. 
Validated User accounts that had not been active for more than a year
could be reaped at the end of that time.   Becoming a member would be
sufficient, but not necessary for becoming a Validated User.


#45 of 150 by cmcgee on Sat Sep 1 22:22:22 2007:

I don't know if we have a vote admin at the present.  I believe gelinas
ran the last election.  

Could we hear from someone who can set up and run that program, please?

This is ready to be voted on.



#46 of 150 by cross on Sat Sep 1 22:56:39 2007:

Regarding #44; I thought that http access was community?  Perhaps I was
mistaken.  I think we might want to consider doing that with users creating
web pages as well, to cut down on phishing and the like (then we could also
support images...).


#47 of 150 by remmers on Sat Sep 1 23:04:39 2007:

Re #45:  I don't recall that the board appointed a voteadm.  It should.
 In addition to setting up the voting software, the voteadm should check
that a proposal meets the requirements stated in Article 5 of the
bylaws.   At a cursory glance, this one seems to, if 10% of the members
have endorsed bringing it to a vote.


#48 of 150 by keesan on Sun Sep 2 00:13:12 2007:

I think validation should be required to use any type of email including
local.  It is too open to abuse.


#49 of 150 by cross on Sun Sep 2 00:35:50 2007:

I agree in principle, but let's be clear about the definition of validation.
We have proposed two types:

a) Social validation, wherein a user makes a request, is asked a question by
   a volunteer, and is thus `validated.'

b) Formal verification, wherein a user presents a copy of a government-issued
   photo ID or similar some well-defined equivalent to the treasurer or some
   other such person.

I'd say we need (a) for email access, (b) would be overkill.  (b) is used
for complete outbound network access, on the other hand.


#50 of 150 by cmcgee on Sun Sep 2 01:22:17 2007:

As written, the proposal puts local grex email privileges in the
Community User group.  


#51 of 150 by cmcgee on Sun Sep 2 01:23:19 2007:

Dan, would unicorn be able to set up and run the vote admin program?  





#52 of 150 by cmcgee on Sun Sep 2 01:24:21 2007:

As written, the proposal puts http access in the Validated Users group.


#53 of 150 by cross on Sun Sep 2 01:54:07 2007:

Regarding #51; I think that would be great!


#54 of 150 by unicorn on Sun Sep 2 03:16:16 2007:

#44: "Can receive mail only to local Grex account"

Do you mean "from local Grex account"?

 "Promotion from the User class to Community Users class would be by
 responding to a email sent by a Grex Helper which asked the user to
 identify where or how they found out about Grex."

How will they respond if they don't have local e-mail access?  Maybe
we need some kind of script that allows communication with helpers
without going through e-mail.  Is that what you had in mind?


#55 of 150 by cross on Sun Sep 2 03:21:44 2007:

Regarding #54; I think the idea is that they can only receive local mail. 
That is, a validated user can send an unvalidated user an email, but not the
opposite.

As for how they will respond, I was envisioning some kind of web based form
thing wrapped in a script, perhaps integrating with our existing RT database.


#56 of 150 by cmcgee on Sun Sep 2 13:31:58 2007:

Yes, I'm suggesting that new accounts be able to receive mail, but not
send it.

I was thinking that they could receive both local and outside mail, but
am willing to eliminate "outside" if I hear good reasons.



#57 of 150 by remmers on Sun Sep 2 14:38:29 2007:

Isn't spam just about the only kind of outside mail that a new user
would be likely to receive?  Becoming an instant spam target doesn't
strike me as the the best first impression for Grex to make on a newcomer.


#58 of 150 by cmcgee on Sun Sep 2 16:24:08 2007:

Sometimes signing up for a web-based service requires that you provide a
valid email address to which they can send email.  

I can see allowing a person to set up such an address.  It is not
necessarily true that the mailbox will automatically be filled with
spam.  


#59 of 150 by cross on Sun Sep 2 16:34:20 2007:

For technical reasons, it would be better if Internet mail were withheld until
requested.  In particular, if we *don't* do that, there's nothing preventing
another seabass from creating a .forward file with everyone on grex in it,
and then sending himself mail from, say, a hotmail account and having it go
to everyone on the system once again.


#60 of 150 by keesan on Sun Sep 2 16:39:58 2007:

New users could be asked to provide an email address outside grex to which
some questionnaire could be sent.


#61 of 150 by cmcgee on Sun Sep 2 16:48:19 2007:

No, that's exactly what I'm trying to avoid.  I don't want people to have to
have an email account somewhere else in order to get one here.  

Dan, are you saying that having in bound email only (not outbound  to the
internet, and not outbound to Grex) would still allow that particular
exploitation?  


#62 of 150 by cross on Sun Sep 2 17:15:52 2007:

Yes.  Inbound mail from the Internet would allow that attack.


#63 of 150 by scholar on Mon Sep 3 21:05:56 2007:

This response has been erased.



#64 of 150 by cmcgee on Tue Sep 4 13:59:02 2007:

------------------
User Account:  No Internet access.  Can use Unix shell, participate in
party and the conferences.    

Community User Account:  Full E-Mail.  Users can send and receive email
from or to any address.
-------------------

Amended to eliminate even local email from the initial user account.  

I am told that we can allow social validation without requiring a
different email address (at least for now), so my main concern has been
answered.  



#65 of 150 by cmcgee on Tue Sep 4 19:26:15 2007:

Complete Text, Third Version: 

There would be three classes of accounts:

User Account:  No Internet access.  Can use Unix shell, participate in
party and the conferences.  

Community User Account:  Full E-Mail.  Users can send and receive email
from or to any address.  

Validated User Account:  Full net access.  Full access to the Internet,
including telnet, ssh, ftp and http. 

All new user accounts would be created in the User class.

Promotion from the User class to Community Users class would be by
responding to a email sent by a Grex Helper which asked the user to
identify where or how they found out about Grex.  

Promotion from Community Users to Validated Users would require the same
validation that is currently required for membership, either a photocopy
of a government or school issued ID that contains the person's photo, or
by a $1.00 payment through Paypal.  

Once an account was Validated, it would not need to be revalidated. 
Validated User accounts that had not been active for more than a year
could be reaped at the end of that time.   Becoming a member would be
sufficient, but not necessary for becoming a Validated User. 



#66 of 150 by tsty on Tue Sep 4 20:39:31 2007:

pretty good ... still the problem of user email response for validation.
and promotion.  is is sit feasible fo ruser to ahve local-eamial onluy?
  
both send and receive inside grex  but nothing from outside grex at all?
  
i;'m assuiming somewher above that vailidated includes those-who-are-aleready
-known. ... ?


#67 of 150 by cross on Tue Sep 4 20:57:10 2007:

Regarding #66; We'll rig something up for validation, but no, we can no longer
afford to give totally anonymous email accounts out anymore.  :-(


#68 of 150 by cross on Tue Sep 4 21:16:56 2007:

Regarding #65; I endorse bringing this to a vote.


#69 of 150 by cmcgee on Tue Sep 4 21:17:51 2007:

No, this proposal will not allow new users to have any kind of email,
inside or outside of Grex.  You will have to be in the Social Validation
group to get any email access at all.

Staff has said that there will be a way for new users to request social
validation without supplying an off-Grex email address.  


#70 of 150 by gelinas on Wed Sep 5 01:01:58 2007:

I support bringing this to a vote.


#71 of 150 by scholar on Wed Sep 5 01:37:11 2007:

I reiterate my endorsement and suggest others endorse as well.


#72 of 150 by maus on Wed Sep 5 04:37:52 2007:

As a user interested in the wellbeing of Grexserver and Cyberspace
Communications, I support this, but as a non-member, I cannot formally
endorse this. I would like to see this happen, and hope it will curb the
abuse.



#73 of 150 by rcurl on Wed Sep 5 05:00:24 2007:

"Promotion from the User class to Community Users class would be by
 responding to a email sent by a Grex Helper which asked the user to
 identify where or how they found out about Grex."

What kind of response? Anything? Even f... you? It doesn't say that the 
User has to say "where or how they found out about Grex" - only that they 
respond (nor that they respond truthfully). 

(I'm also not sure what utility this has - but I have not read the whole 
item.)


#74 of 150 by cmcgee on Wed Sep 5 12:49:36 2007:

We have deliberately left this up to the discretion of the Grex Helper. 




#75 of 150 by sholmes on Wed Sep 5 14:26:29 2007:

off topic but would it help if  staf mails the staff on other similar systems
like sdf etc and ask how they are tackling the spam problem?


#76 of 150 by kingjon on Wed Sep 5 18:43:21 2007:

erm ... If the user does not have the ability to send even local email, how is
he or she going to respond to the email asking how he or she found out about
Grex? (As specified as the method for validation.)


#77 of 150 by cmcgee on Wed Sep 5 18:48:25 2007:

Staff has a plan.  I'm not sure what it involves, but that was a
critical component in the way I wrote this.  

It is clear that vandals have made use of local email access, so there
really is no way to remain a good net citizen and allow that.  

If the staff plan doesn't work, we will then have to have an off-site
email address in order for the validation to occur.  



#78 of 150 by mcnally on Wed Sep 5 19:24:44 2007:

 Can I make what I hope is a fairly common-sense suggestion -- which is
 that you come up with whatever procedures, implement them in a kind of
 practice or test mode first (e.g. creation through a "newnewuser" 
 account creation process..), have some people try to use them, make sure
 the limitations work, make sure the "promotion" procedures work, etc..

 In other words, work all this out, including the procedures, using 
 volunteers first, and only THEN change newuser to make this the new 
 standard (assuming that this scheme is even approved in the first place.)


#79 of 150 by cross on Wed Sep 5 19:26:03 2007:

Sure, but we need to have the policy in place before we can do anything.


#80 of 150 by denise on Wed Sep 5 20:01:17 2007:

And how and when do we get to sign up those of us that want to be
helpers [and get the  basic 'training']?  Is this going to be discussed
at one of the upcoming board meetings?


#81 of 150 by cross on Wed Sep 5 20:38:07 2007:

Yes, I think we can certainly add an agenda item for the next board meeting
to formalize the process a bit more.


#82 of 150 by cmcgee on Thu Sep 6 00:32:52 2007:

McNally, unless staff can come up with a workable solution, we will have
exactly what is posted in this item:  A Grex where you cannot get social
validation without an offsite email address.  

I'm really really hoping staff can make that work.  But I'm not willing
to leave us in suspended animation any longer waiting for that to
happen.  

People are currently exploiting our openness to vandalize individuals,
Grex, and other systems.  We need to stop that.  


#83 of 150 by slynne on Thu Sep 6 00:44:31 2007:

I support bringing this to a vote


#84 of 150 by cross on Thu Sep 6 21:04:54 2007:

Folks, there's email, and there's Email.  We can certainly create some way
to send messages to someone that *look* like email, and to get a response
back.  Perhaps, ``cut and paste this into the grex terminal'' sorts of things
that run some kind of script.


#85 of 150 by gelinas on Mon Sep 10 00:47:47 2007:

This item was originally posted on August 6, 2007.  The final text was posted
on September 4, 2007.  By the end of September 6, 2007, 6 members had endorsed
bringing the proposal to a vote.  As of today, we have 56 members, so 6
members constitutes more than 10% of the membership.  

I've been asked to run the election.  Unfortunately, I don't have enough time
right now to set up the election.  I will make time to set it up tomorrow,
to run for 10 days.  The voting booth will open at or about 00:01, Tuesday,
September 11, 2007.


#86 of 150 by slynne on Mon Sep 10 03:11:17 2007:

Thanks Joe!


#87 of 150 by gelinas on Tue Sep 11 02:34:16 2007:

If I did everything correctly, the voting should start at midnight.  Both 
terminal and web access should work.  If not, someone who knows how should
give me a call, when the/a problem is discovered.


#88 of 150 by tsty on Tue Sep 11 02:53:51 2007:

waht about CURRENT well-knowns? or is this *solely* new loginids?


#89 of 150 by cmcgee on Tue Sep 11 04:34:59 2007:

The voting booth is available if you use www.cyberspace.org

For some reason www.grex.org shows me the older webpage.  Perhaps it's a
browser cache problem.

Telnetting in to vote does not work.  I've informed Gelinas of the
problem, and he will take care of it in the morning.


#90 of 150 by cmcgee on Tue Sep 11 04:40:31 2007:

TS, no one who currently has email access will lose it because of this
proposal.  

Logins that currently do not have email access will automatically be in
the User group, and will need to go through the process to be promoted
to the Community User group.  


#91 of 150 by cmcgee on Tue Sep 11 04:45:27 2007:

Yep, browser cache issue. Refreshing the page gave me access to the
voting booth.


#92 of 150 by remmers on Tue Sep 11 15:54:15 2007:

(Could I suggest making the voting booth link on the main page "secure"
(i.e. https) to that login and password won't be sent in the clear.)


#93 of 150 by remmers on Tue Sep 11 15:55:49 2007:

Also, the web voting form should contain the full wording of the proposal.


#94 of 150 by cmcgee on Tue Sep 11 16:04:06 2007:

John, has the complete voteadmin procedure been documented?  Apparently
what Joe has access to isn't easily understandable.


#95 of 150 by remmers on Tue Sep 11 16:19:27 2007:

Vote program installation and configuration is documented on the
"Grexdoc" CVS server; see e.g. ~remmers/grexdoc/vote/doc.  I guess
conventions of a non-technical nature like "what to put on the voting
form" aren't spelled out.  What I always did was to put the full wording
of the proposal and a link to the Coop discussion item.  Those can
easily be added by editing the relevant files that reside in the
/var/spool/vote directory.



#96 of 150 by denise on Tue Sep 11 17:07:49 2007:

I know this doesn't have to do with the voting but I'm not sure which
item  to ask in--and this is the closest one I see about members...  I
read  somewhere here [on one of the links or something?] that there is a
grex ' handbook'. Is that still around somewhere, and if so, how can I
get ahold  of one?  Thanks.


#97 of 150 by cross on Tue Sep 11 18:17:32 2007:

The voting programs were installed as per the grexdoc documentation (by me).
I think the questions are about the softer side of running a poll.


#98 of 150 by cross on Tue Sep 11 21:58:27 2007:

FYI, I don't think the vote is properly configured (or maybe I'm just
confused):

: grex 1169; vote

          *** Welcome to the Grex Voting Booth, cross! ***

Improper format in candlist
: grex 1170; 


#99 of 150 by gelinas on Wed Sep 12 02:09:32 2007:

cross, that is the problem cmcgee mentioned in *89 above.  It's fixed now.
I've also secured the web voting booth and added the full text of the
proposal, as suggested by remmers.  I'll add a link to the discussion
when I figure out "peek."


#100 of 150 by fuzzball on Wed Sep 12 02:12:26 2007:

so would it be a one time payment of a dollar?
how would this affect the users that create tons of accounts only to 
harass and abuse other grexers and such?


#101 of 150 by gelinas on Wed Sep 12 02:24:41 2007:

I added the link, but not by using 'peek.'


#102 of 150 by maus on Wed Sep 12 05:11:36 2007:

resp:100 I believe that since they would have to use something like
Paypal, it would tie a real-world identity (i.e. one that can have its
internet access revoked by its IAP or one that can have criminal charges
leveled against it). Additionally, if a person made and activated a
whole bunch of accounts with the same Paypal ID, it would raise red
flags, and remedial action could be taken when the accounts are
activated, rather than waiting until they start being used for abusive
purposes. 




#103 of 150 by cmcgee on Wed Sep 12 11:28:18 2007:

Chad, there is no requirement that anyone pay  anything.

The paypal $1.00 option is only if you do not choose to submit the other
photo ID options.

Paypal accounts are tied to real people, that can be traced.  If any
account was used to violate our Terms of Service, all accounts tied to
that person would be blocked and no new ones issued. Spamming
conferences, individuals, and other denial of service attacks are
sufficient to get your accounts blocked.    

Criminal activity would be prosecuted.  All accounts tied to that person
would be blocked and no new ones issued.  

The point of validation is to give us access to the identity of the
person creating the accounts.  The initial validation will also be
sufficient to recognize a personality behind the facade, and will evolve
to meet our needs to achieve that recognition. 

 If we can't do that reliably, I will suggest we remove the intermediate
class and only allow verified accounts. If we continue to experience our
current levels of user harassment and destruction of the community, it
will be our best option.  


#104 of 150 by keesan on Wed Sep 12 12:13:19 2007:

The voting program is somewhat confusing.  Choose between candidates no (y/n)
and yes (y/n).  For instance, vote n for no and y for yes.  I tried to vote
'y' twice and was scolded.


#105 of 150 by cmcgee on Wed Sep 12 13:03:30 2007:

That sounds right.  You are only able to cast a vote for passage (yes)
or defeat (no).  You can't vote yes on both.  


#106 of 150 by remmers on Wed Sep 12 14:57:14 2007:

Yes, the terminal-based version of the vote program is a bit confusing,
and I'm afraid it's my fault.  There are actually two separate "vote"
programs, one for board elections and one for member proposals.  I
thought I had documented how to install and configure both, but upon
looking at grexdoc, I see that I only included instructions for the
board election program, so that's what's running.  It's usable for
voting on proposals too, but the interface is more tuned for voting on
candidates in an election.  Hence if you want to vote for the proposal,
you have to vote "y" for Yes and "n" for No, which works but is
definitely weird.

I suggest we live with the strange interface for this election, and I'll
update the docs so that future proposal votes get a more suitable
interface.  Apologies.


#107 of 150 by mary on Wed Sep 12 15:00:58 2007:

I'm going to support this proposal, but, upon closer
inspection, I do have a concern.  The wording is overly
specific for a membership vote.  If the board or staff
should want to change what specific question is asked 
during the social validation, they are pretty locked in
by this vote.  Likewise for when accounts get reaped
or even what is considered a minimum PayPal payment.  Too
much detail is hard coded to allow for tweaking.

The board could, of course, vote to change any of the 
stated details, But they'd be overriding a membership 
vote. We've been pretty darn careful to avoid setting up 
that situation up until now.

I'm sorry to mention this so late in the process.  My
fault for not reading response #66 as the final wording.


#108 of 150 by cmcgee on Wed Sep 12 16:35:25 2007:

*sigh* 
I understand.  But let's get this passed, and tweak it later.

My suspicion is that it will need to be revised after we have a bit more
experience with the "Community User" class and process anyway.  


#109 of 150 by cross on Wed Sep 12 17:50:13 2007:

Regarding #107; Valid concerns.  I agree with Colleen; let's get it passed,
and then amended with another membership vote.  I think that's probably the
cleanest solution.


#110 of 150 by mary on Wed Sep 12 19:22:02 2007:

No, it's not clean.  It's more quick and dirty. ;-)


#111 of 150 by scholar on Wed Sep 12 19:38:05 2007:

This motion cannot be voted on because there are only five members who support
bringing it to vote.  My guess is gelinas counted nharmon's response 4 ("I
support this") as an endorsement of bringing the motion to vote, but section
5.c. of the bylaws makes it very clear that for an endorsement to be
considered, it must consist of a statement to the effect that the motion
should be voted on.


#112 of 150 by cross on Wed Sep 12 20:17:17 2007:

Regarding #110; You're right, but it's cleaner than the board modifying a
member proposal after the fact....

Regarding #111; Check out the legal definition of, ``reasonable
interpretation.''  Nate, would you care to clarify your statements?


#113 of 150 by scholar on Wed Sep 12 21:04:59 2007:

I also add that I should not be counted as endorsing bringing this motion to
vote.  While I support the motion and have made statements to that affect,
I do not believe there is enough support among the membership to make this
a worthwhile vote.


#114 of 150 by scholar on Wed Sep 12 21:09:10 2007:

I also contest cmcgee's statements being construed as an endorsement to bring
this to vote.  While she she did state that the motion was ready to be voted
on, that does not imply she AGREED the motion should be voted on.


#115 of 150 by cmcgee on Wed Sep 12 21:09:54 2007:

Well to be clear, *I* do support bringing this motion to vote.  Since it
is a board initiative, I believe that, as an individual, I can support
this proposal.



#116 of 150 by scholar on Wed Sep 12 21:13:18 2007:

You didn't make an endorsement before the deadline.


#117 of 150 by cmcgee on Wed Sep 12 21:14:26 2007:

you can certainly interpret my asking to bring it to a vote as an
endorsement to bring it to a vote.


#118 of 150 by cmcgee on Wed Sep 12 21:21:17 2007:

My preferred alternative is to finish this vote.

Another option would be for the board to pass this as policy, and
implement it immediately.  

Then we can patiently wait until such time as the membership can get its
act together, and vote it up or down.  

While that's not a better alternative, it is one I'm willing to
entertain.  


#119 of 150 by scholar on Wed Sep 12 21:22:56 2007:

No, you can't.

The bylaws are very clear:
          Endorsement shall consist of a statement by the
          member in the discussion item agreeing that the motion should
          be voted on.

In response #45, you stated "This is ready to be voted on."  This is simply
a statement that in your opinion the appropriate conditions had been met for
the motion to be voted on, but it cannot be construed as an endorsement.


#120 of 150 by cmcgee on Wed Sep 12 21:26:03 2007:

I say that that's what I meant.  Are you telling me I don't know what I
was meant?


#121 of 150 by scholar on Wed Sep 12 21:27:55 2007:

It's possible that's what you meant, but it doesn't meet the very clear
criteria for an endorsement required by the by-laws.


#122 of 150 by cross on Wed Sep 12 21:31:30 2007:

David, knock it off.


#123 of 150 by scholar on Wed Sep 12 21:39:05 2007:

Knock what off?  Making sure Cyberspace, Inc. follows its own by-laws?  People
were told repeatedly in this very item to make sure they followed the
requirements for endorsements and not many of them did.  That should tell you
something.

I'd appreciate it if gelinas could post a list of the people he considered
to be endorsing this proposal as well as the statements they made that which
he considered to be their endorsements.  According to a post he made, there
were six such people -- only one more than the minimum required to bring a
motion to vote.


#124 of 150 by cross on Wed Sep 12 21:41:52 2007:

You're being pedantic in arguing semantics; why?


#125 of 150 by scholar on Wed Sep 12 21:54:30 2007:

This response has been erased.



#126 of 150 by cross on Wed Sep 12 21:55:06 2007:

please do.


#127 of 150 by scholar on Wed Sep 12 21:57:54 2007:

I think the way people are trying to railroad this through, especially
cmcgee's threat to do it even with the anaemic support we're receiving
from the members, is a disturbing departure from the way Grex has
functioned since its inception.

That's the short of it, and I'll post the long of it, including better
solutions to the problems Grex is facing, in another item when I have a
bit more time.


#128 of 150 by nharmon on Thu Sep 13 00:39:51 2007:

When I said "I support this", I meant I supported this measure to be
voted upon by the membership. I'm sorry I was not clearer.


#129 of 150 by cmcgee on Thu Sep 13 00:59:14 2007:

Let's be clear here.  Mark Conger first raised this issue in this
conference on March 31, 2007, for inclusion in the April 1 board agenda.
 A through explanation of the board discussion was posted on April 2nd. 

We have also had more than a month of discussion since I posted the
initial draft on August 6th. This seems to be a fairly traditional
pacing for discussions and decisions on Grex.  If anything, it may be
overly slow.

You, scholar, have visited this conference frequently since then.  You
have had numerous chances to contribute to the final shaping of this
proposal.

Now you get to vote on it.  It may pass, it may fail.  If it passes, the
Board will implement it to the best of its ability.  If it fails, the
Board will try to solve the problems some other way.  

Stopping the vote will not stop the problems, nor the Board's duty to
try to solve them.  


#130 of 150 by scholar on Thu Sep 13 06:28:09 2007:

Hey, guess what, the membership wants the Board to follow the by-laws.


#131 of 150 by scholar on Mon Sep 17 00:50:04 2007:

I can see Grex is continuing with its illegal vote...


#132 of 150 by unicorn on Mon Sep 17 03:00:07 2007:

And why are you getting so excited about what you perceive to be an
"illegal vote"?  Are you not the one who tried in vain to convince
me to forge a message in someone else's name to support the proposal,
and got all upset because I refused to do it?  And are you not the
one who then suggested that if I was unwilling to do that, that I
should go ahead and set up the vote anyway (under the assumption
that because it was suggested by cmcgee that I take that responsibility,
that the responsibility was mine)?  And again, are you not the one
who got all upset because I refused to do so?  And now you're pretending
to be the ethical one who insists on doing everything by the book?
Why is that?


#133 of 150 by krj on Mon Sep 17 03:24:26 2007:

I support bringing this proposal to a vote.  Sorry, I hadn't been 
paying attention and forgot about that requirement.


#134 of 150 by krj on Mon Sep 17 03:30:08 2007:

((   MOTD announcement about the election should be updated to include
     the END of the voting period, which is now of more concern to 
     voters than the BEGINNING of the voting period.   I'd do it myself
     but I don't know when the end is...   ))


#135 of 150 by cmcgee on Mon Sep 17 03:32:40 2007:

krj, try refreshing your browser cache.  gelinas fixed that on Saturday.


#136 of 150 by cmcgee on Mon Sep 17 03:35:59 2007:

I see.  The MOTD is not changed, but the Backtalk page is.



#137 of 150 by scholar on Mon Sep 17 22:12:49 2007:

re. 133:  it's too late for your support to be valid.

re. 132:  it's not too late for you to start making some sense here.


#138 of 150 by gelinas on Wed Sep 19 13:49:31 2007:

I finally got onto the machine today.  I've now updated the motd.

I re-counted the endorsements; I found, in addition to nharmon, support for
voting from remmers, mary, cross, scholar, gelinas and slynne, all seven of
whom are members.


#139 of 150 by scholar on Wed Sep 19 21:08:12 2007:

At no point did I endorse taking this motion to vote.


#140 of 150 by remmers on Wed Sep 19 23:12:03 2007:

Assuming the online member list is up-to-date, there are 56 members, so
6 is a sufficient number of endorsements.


#141 of 150 by denise on Thu Sep 20 00:24:19 2007:

If you want/need another, I endorse the vote...


#142 of 150 by gelinas on Thu Sep 20 02:35:59 2007:

"I wholeheartedly support this proposal and will definitely be voting for it"
(scholar, response 41 above).

"I reiterate my endorsement and suggest others endorse as well" (scholar,
response 71 above).


#143 of 150 by scholar on Thu Sep 20 21:02:55 2007:

Right.  I was endorsing the proposal, NOT endorsing taking it to vote.

Same with Nate (He said something like 'I support this').


#144 of 150 by scholar on Thu Sep 20 21:04:17 2007:

It should also be noted that my interpretation is the one set out as correct
by the by-laws, and that hcmsgee didn't endorse taking the proposal to vote
either.


#145 of 150 by gelinas on Sun Sep 23 00:58:40 2007:

The Treasurer has certified the list of voters, and I have counted the votes.
Twenty-four people, fifteen members and nine non-members, voted.  The members
voted 14 to 1 in favor of the proposal, so the proposal passed.  The
non-members voted 6 to 3 in favor of the proposal.


#146 of 150 by krj on Mon Oct 1 21:00:24 2007:

Party-land has a couple of returning long-time users who "we"
would like to get  tel  and  mail  privileges added for.
Their old accounts were reaped, so they appear as newbies 
under the new rules.

How're the implementation details on this coming along?


#147 of 150 by cmcgee on Mon Oct 1 21:20:31 2007:

As I understand it:  cross finished the "add first class (new) users to
the second class group" script before he left; unicorn and gelinas are
each looking at how to put second class people back into first class"
script.

Board created the "porters" group at last board meeting; gelinas
populated that group with the board members.  

Next board meeting we need to add any other members to the porters
group, and decide how to handle inter-group communication for the
porters.  Then we can start adding first-class users to the second-class
group.  

Primarily we're waiting on the completion of the script.  Right now, you
can send mail to help@grex.org asking staff to add specific userIDs to
the 2nd group.  As always, staff will be the ones to decide whether to
block a user ID.  Porters will only be able to move IDs between the two
groups.  


#148 of 150 by gelinas on Tue Oct 2 01:19:36 2007:

(I see that the group "porters" exists and has been populated as cmcgee
described, but I didn't do it.)


#149 of 150 by cmcgee on Tue Oct 2 01:21:12 2007:

uhhh, ok, it was unicorn then.


#150 of 150 by gelinas on Tue Oct 2 01:36:12 2007:

(Credit where it is due, Ma'am. ;)


There are no more items selected.

You have several choices: