Last modified: 2011-02-08 20:45:10 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T27870, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 25870 - AntiSpoof not working?
AntiSpoof not working?
Status: RESOLVED FIXED
Product: MediaWiki extensions
Classification: Unclassified
AntiSpoof (Other open bugs)
unspecified
All All
: Normal normal (vote)
: ---
Assigned To: X!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-11-10 14:41 UTC by MA
Modified: 2011-02-08 20:45 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description MA 2010-11-10 14:41:58 UTC
Dear developers,

In the mediawiki page "Extension:Antispoof" I can read that AntiSpoof is an extension for preventing confusable usernames from being created; yet spoofed usernames are still being created. Recent examples:

Legitimate user | Spoofed user 
--------------------------------

Laura Fiorucci | Låura Fiorucci

Lucien leGrey | Lucien le6rey 

Poco a poco | Poco a ƿoco 

Comae | Comæ 

Sabbut | ЅаЬЬцт

BetoCG | ВетоС6

etc.

Those usernames above have been part of a recent impersonation campaign at eswiki (all the accounts were created there and tryied to impersonate the above named bureaucrats - see logs/SUL/etc.). Something should be done to prevent this IMHO.

Regards.
Comment 1 Platonides 2010-11-10 23:40:03 UTC
The Låura Fiorucci spoof should have been blocked by the extension (check in r76483)

The others weren't caught by the extension. I updated the list in [1].

Only the æ spoof remains active, since it would need converting one character into two. There exists a function (mergePairs) for converting two codepoints into one, but doesn't seem to exist any easy way for splitting one codepoint into two (everything is done in term of codepoints there).

Note that [2] added a rule for changing Æ and æ to A. I think that at least æ should map to ae. Æ is quite similar to just A, though.

Once that's fixed, the extension at WMF should be updated and the mappings rebuilt.

1- http://www.mediawiki.org/w/index.php?title=Extension%3AAntiSpoof%2FEquivalence_sets%2Fequivset_1&action=historysubmit&diff=362640&oldid=361648
2- http://www.mediawiki.org/w/index.php?title=Extension:AntiSpoof/Equivalence_sets/equivset_1&diff=361646&oldid=251667
Comment 2 MA 2010-11-20 00:28:59 UTC
Please see also [1] Sj <-> Sjª

[1] - https://secure.wikimedia.org/wikipedia/meta/w/index.php?title=Special%3ABlockList&ip=Sj%C2%AA
Comment 3 Mark A. Hershberger 2011-02-08 20:45:10 UTC
Looks like this has been fixed.  Reopen if you think it still needs more work.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links