Disable @all pings from Discourse Chat

Feature
1

Help!

Today a user discovered that you can do @all in discourse chat. At first it was like a joke, but a lot of users were actually getting pinged, including me I saw pings coming from the channel even though nobody pinged me

image

Is there a quick mitigation of this possible a lot of users are spamming help.

3 Likes
2

Plus I canā€™t mute people in the chat because of the other bug I discovered :facepalm:

1 Like
3

image
image328Ɨ660 30.8 KB

1 Like
5

Weā€™ll take a look. In the meantime you may want to disable chat on your site for now.

1 Like
6

Thank you I am disabling chat right now until this gets fixed

2 Likes
7

image
image604Ɨ722 58.4 KB

1 Like
8

I also recommend you set SiteSetting.chat_auto_silence_from_flags_duration to 1 day and flag offenders.

2 Likes
9

Yes: suspend them for a period of time for abuse

10

I have already done that, and disabled chat.

3 Likes
11

Yes, I wanted to do this setting, but currently there is a bug with silencing as well:

2 Likes
12

image
image996Ɨ160 32.9 KB

I found out about this option recently, is there a way to enable it for everyone?

2 Likes
13

Itā€™s available to everyone as a per-user setting, so itā€™d be good to let folks know about it.

Still, in your case, silencing and/or suspending the user is the right thing to do.

I think the way forward here is to for us to next get the silencing but fixed (we have it pretty high on our list already)

I think those mitigations should go along way, so thatā€™s what weā€™d like to focus on first.

Beyond that, I think itā€™s worth considering having an option to disable @all or @here globally, or per-channel. But we havenā€™t made a decision on that quite yet.

There is also something on our list to ensure the existing max users notified per group mention applies in chat (it doesnā€™t currently). And maybe @all and @here should be subjected to the same limits.

3 Likes
14

Oh ok cool rn I made it so TL1 and above can talk in chat and itā€™s working pretty well since the higher trust level offenders were already temp suspended

3 Likes
15

Any update on this I think it would be good if they just had an option to disable it globally

1 Like
16

We are planning to make this a per-channel option in the not too distant future, but we havenā€™t started that yet.

4 Likes
17

We now have a per-channel setting to disable @all and @here via his PR from @joffreyjaffeux

7 Likes
19

Youā€™ve got this totally backwards. Enabling @all should be opt-in. Having it be enabled by default is madness.

And disable it on this site ASAP! Iā€™ve never even used chat on this site and I got an email notifying me of someone using @all. Iā€™m astounded you thought this was acceptable to enable by default.

15 Likes
20

I am genuinely sorry about that. There should be a couple of safety guards in place to make sure that didnā€™t happen, and Iā€™m afraid something has gone awry somewhere. I apologise most profusely. :pray:

Weā€™re looking into it now, and hopefully will have more information shortly.

13 Likes
21

The good news is that this has been fixed. :partying_face:

There had been a regression where the channel-wide onsite notifications had been correctly suppressed but the email versions were still sent out. That has been resolved now, and there should be no more issues. :+1: I apologise again to anyone who received that email. :pray:

9 Likes