Last modified: 2011-02-08 20:45:10 UTC
Dear developers, In the mediawiki page "Extension:Antispoof" I can read that AntiSpoof is an extension for preventing confusable usernames from being created; yet spoofed usernames are still being created. Recent examples: Legitimate user | Spoofed user -------------------------------- Laura Fiorucci | Låura Fiorucci Lucien leGrey | Lucien le6rey Poco a poco | Poco a ƿoco Comae | Comæ Sabbut | ЅаЬЬцт BetoCG | ВетоС6 etc. Those usernames above have been part of a recent impersonation campaign at eswiki (all the accounts were created there and tryied to impersonate the above named bureaucrats - see logs/SUL/etc.). Something should be done to prevent this IMHO. Regards.
The Låura Fiorucci spoof should have been blocked by the extension (check in r76483) The others weren't caught by the extension. I updated the list in [1]. Only the æ spoof remains active, since it would need converting one character into two. There exists a function (mergePairs) for converting two codepoints into one, but doesn't seem to exist any easy way for splitting one codepoint into two (everything is done in term of codepoints there). Note that [2] added a rule for changing Æ and æ to A. I think that at least æ should map to ae. Æ is quite similar to just A, though. Once that's fixed, the extension at WMF should be updated and the mappings rebuilt. 1- http://www.mediawiki.org/w/index.php?title=Extension%3AAntiSpoof%2FEquivalence_sets%2Fequivset_1&action=historysubmit&diff=362640&oldid=361648 2- http://www.mediawiki.org/w/index.php?title=Extension:AntiSpoof/Equivalence_sets/equivset_1&diff=361646&oldid=251667
Please see also [1] Sj <-> Sjª [1] - https://secure.wikimedia.org/wikipedia/meta/w/index.php?title=Special%3ABlockList&ip=Sj%C2%AA
Looks like this has been fixed. Reopen if you think it still needs more work.