Last modified: 2012-03-11 22:01:05 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T21963, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 19963 - Make CheckUser log IPs for all account creations
Make CheckUser log IPs for all account creations
Status: RESOLVED FIXED
Product: MediaWiki extensions
Classification: Unclassified
CheckUser (Other open bugs)
unspecified
All All
: Normal enhancement with 2 votes (vote)
: ---
Assigned To: Aaron Schulz
:
: 17930 29019 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2009-07-28 02:27 UTC by Mike.lifeguard
Modified: 2012-03-11 22:01 UTC (History)
10 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Mike.lifeguard 2009-07-28 02:27:18 UTC
Currently, when one makes an account using an account, there is no IP for the 2nd account. By chaining account creation along in this manner, users can make it cumbersome to figure out which was the first account, and then check that to get the IP. When dealing with fast-moving IP-hopping (personal-information-revealing) vandals, this is quite bad indeed.

Please log the IP used for creating the account for
*the account that did the creating (as it is currently); AND
*the account that was created

Thanks.
Comment 1 Alex Z. 2009-07-28 02:30:13 UTC
How do we know the IP of the new account before they make any edits?
Comment 2 Mike.lifeguard 2009-07-28 02:34:11 UTC
(In reply to comment #1)
> How do we know the IP of the new account before they make any edits?
> 
Well, we *do* know it, so...? It is logged for the other account; it's not like I'm asking for information we don't have.


Note this is confusing even for seasoned CUs. I've been asked about this twice in the past week by other CUs. And as I say, it makes moving fast harder than it needs to be.
Comment 3 Alex Z. 2009-07-28 03:02:10 UTC
(In reply to comment #2)
> (In reply to comment #1)
> > How do we know the IP of the new account before they make any edits?
> > 
> Well, we *do* know it, so...? It is logged for the other account; it's not like
> I'm asking for information we don't have.

We do know it, but only in the case where someone creates the second account for himself. If they create it for someone else, we can't know the other person's IP until they actually log in with the new account.
Comment 4 Mike.lifeguard 2009-07-28 03:17:47 UTC
(In reply to comment #3)
> We do know it, but only in the case where someone creates the second account
> for himself. If they create it for someone else, we can't know the other
> person's IP until they actually log in with the new account.
> 

That's not true: this absolutely does not depend on who is sitting behind the keyboard. We know the IP no matter who they are or what their intention is.

The IP we have is the one I'm talking about: the one the account was created with, not some hypothetical IP from the future which may be different.
Comment 5 Mike.lifeguard 2009-07-28 03:18:20 UTC
I suppose I should also be clear that these accounts should then show up in the "get users" search, that is the whole point!
Comment 6 jpgordon 2011-03-17 15:00:48 UTC
What would work well would be to have lines like this:
American Mascot Association (talk | contribs | block) (Blocked) created new account User:Dr. Socket 

replaced by
User:Dr. Socket (talk | contribs | block) (Blocked) new user account created by American Mascot Association (talk | contribs | block)

And of course logging User:Dr. Socket into checkuser or whatever we use.
Comment 7 Sam Reed (reedy) 2011-05-16 18:38:38 UTC
Retitling rather than opening a similar bug

We should log it for ANY account created, including those created as "sub accounts"
Comment 8 Sam Reed (reedy) 2011-05-16 18:51:23 UTC
(In reply to comment #6)
> What would work well would be to have lines like this:
> American Mascot Association (talk | contribs | block) (Blocked) created new
> account User:Dr. Socket 
> 
> replaced by
> User:Dr. Socket (talk | contribs | block) (Blocked) new user account created by
> American Mascot Association (talk | contribs | block)
> 
> And of course logging User:Dr. Socket into checkuser or whatever we use.

See

https://secure.wikimedia.org/wikipedia/en/w/index.php?title=Special%3ALog&type=newusers&user=&page=User%3AReedy+%28test%29&year=&month=-1&tagfilter=

vs

https://secure.wikimedia.org/wikipedia/en/w/index.php?title=Special%3ALog&type=newusers&user=Reedy&page=&year=&month=-1&tagfilter=

I don't think we actually need any distinction there, both way are easily doable

The IP on registration (still) wants doing though IMHO
Comment 9 Sam Reed (reedy) 2011-05-16 18:52:24 UTC
And can probably just hook onto

		wfRunHooks( 'AddNewAccount', array( $u, true ) );

And save something. Seems somewhat trivial (though, not idea if CU needs any/many/much changes to accommodate this)
Comment 10 Sam Reed (reedy) 2011-05-16 19:16:23 UTC
r88258
Comment 11 matanya 2011-05-17 09:32:17 UTC
*** Bug 29019 has been marked as a duplicate of this bug. ***
Comment 12 Marcin Cieślak 2012-03-11 22:01:05 UTC
*** Bug 17930 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links