Last modified: 2008-05-26 02:39:47 UTC
I was a bit playing with SUL functionality and tried to register my account on projects which I never registered before. I could login instantly, but I tried to create an account the old-fashioned way. I did use different passwords etc. If I quote http://meta.wikimedia.org/w/index.php?title=Help:Unified_login/en&uselang=en "" The greatest advantages are single sign-up (...) consistent identity (your username now always means you; no one else can take your name on another project). "" As far I can see for now, this isn't the case. I am still able to create accounts (though I didn't try this with other usernames) I don't know whether this is done intentionally (I couldn't find any statement about this), some IP-check is performed, or this is really a bug.
Today this bug was brought to my attention by Pill. We did some tests on http://so.wiktionary.org/wiki/Special:RecentChanges Pills SUL was not complete (1 wiki was left open) but his SUL was activated but he was able to create an account with the name Pill (he used another password another (or no) mail) We wanted to test with someone whoses SUL was completet too. The SUL of Baisemain was complete (I checked before with CentralAuth), she too was able to create a totally new account with the name Baisemain on so.wiktionary.org! http://so.wiktionary.org/wiki/Special:Log/newusers This looks quite serious to me. Many thanks for Your help, Elisabeth Anderl [[:wikt:is:Notandi:Spacebirdy]]
Looks quite serious to me, too; therefor I changed Priority from normal to high and Severity from normal to major (feel free to revert this though, I am no expert).
Please make sure that this bug gets fixed *before* enabling SUL for all. Otherwise we will get tons of complains by community members facing new fake accounts. (And, seeing the recent cross-wiki activity, fake-accounting seems to be a major issue these days...) BR, Th.
Just checked out http://af.wikipedia.org/w/index.php?title=Spesiaal%3ALog&user=Platonides This should be blocking further SUL expansion.
This bug was also reported on Meta: see http://meta.wikimedia.org/wiki/Help_talk:Unified_login#Bug.2C_or_misunderstanding.3F
Regression due to r34124, fixed in r35340.
