Last modified: 2014-05-03 10:13:50 UTC
The user name blacklist for new accounts currently leads to problems like this: https://en.wikipedia.org/w/index.php?title=Wikipedia:Village_pump_(technical)&diff=493034406&oldid=493028093 Or this: https://meta.wikimedia.org/w/index.php?title=Talk:Title_blacklist&oldid=3211853#Fakes_of_Wikimedia_Deutschland_.28WMDE.29_staff Basically, if a title blacklist rule exists in, say, French WP but not in English WP, and I make an account in English WP and move over to French WP, suddenly my account will not be valid. This is extremely user-hostile and fragments the single user login (SUL) system. The benefits of any kind of highly specialized blacklisting for local edge cases are outweighed by the accumulating cruft of local rules that can trap any good faith user at any time. Wikimedia is a multilingual pool of wikis where you're required to move around wikis, especially to sites like Meta, Commons or (in future) Wikidata.
Do you even have a community consensus for that? I could do this, and it would be near-trivial, this is more of a policy issue.
(In reply to comment #1) > Do you even have a community consensus for that? > > I could do this, and it would be near-trivial, this is more of a policy issue. Looks like common sense: the old system is superseded by SUL. Moreover, the community would still have control on the blacklist, on Meta or via local blocks if needed.
I agree with Victor that we will need to socialize this before making the change, and ensure that there's a proper plan in place for transitioning abuse prevention rules to the new system. However, I don't think sustaining the current situation is even an option. Having lots of local rules that act as tripwires when moving from wiki to wiki is nuts.
Let me know if this sounds about right from an implementation perspective: * Right now we have MediaWiki:Titleblacklist in each local wiki, plus [[m:Title blacklist]] on Meta. The latter is loaded on all WMF wikis as an additional title blacklist. * Currently newaccountonly rules can exist in both the local title blacklist, and the global one. * To make it global-only, we'd add the newaccountonly rule as an option to $wgTitleBlacklistSources . We'd enable it for the global title blacklist. We'd also want to be able to disable it for the default (project-local) source. We'd announce that we're making the switch by X date, and then turn off the newaccountonly config option for the local blacklists on that date.
(In reply to comment #4) > * To make it global-only, we'd add the newaccountonly rule as an option to > $wgTitleBlacklistSources . We'd enable it for the global title blacklist. We'd > also want to be able to disable it for the default (project-local) source. Not really. Options without newaccountonly block username creation as well (as you could have guessed from option's name). What you'd want is some variable to control which sources may restrict usernames, like $wgTitleBlacklistUsernameRestrictionSources. I will actually implement a patch for such option soonish.
That makes sense, thanks for clarifying, Victor. I'll wait for your patch.
Patch submitted: <https://gerrit.wikimedia.org/r/8881>.
(In reply to comment #7) > Patch submitted: <https://gerrit.wikimedia.org/r/8881>. I just added some reviewers for this patch set. Looks like the extension isn't on anyone's radar.
Supporter of SUL and central management of it but I'm not sure if disabling the <newaccountonly> restriction locally is very good. The only thing that stopped an spambot attack at a project (CU and blocks didn't worked/were not effective) was this <https://ik.wiktionary.org/w/index.php?title=MediaWiki:Titleblacklist&direction=next&oldid=6454> temporary measure. And currently for some reason those attacks are being done everyday at all hours. Regards.
What's the status of this bug?
Gerrit changeset pending review. Currently it has one -1 for... trailing whitespace! So probably I can tell that no one has really reviewed it. I could of course merge it myself, but I'm strongly against such practice.
Andre or Sumana: <https://gerrit.wikimedia.org/r/8881> was submitted about seven months ago and still hasn't received a real code review from anyone. Could one of you try to find someone to review this changeset? I'd appreciate it.
Merged by Ori on the 21st. What else needs to be done for this bug?
The rest of this is a configuration change - make sure all wikis (other than meta) are using meta as a source for newaccountonly flags, and disable the newaccountonly tag for all wikis (other than meta). However, as Erik said above, this needs to be discussed on wiki as it's mostly a policy change. I'm not sure that this has been done?
Okay, so that's a Wikimedia-side thing. Resolved as far as MediaWiki extensions are concerned.
Sadly this is not fixed, only a minor part of the bug as filed (software changes) is; moving to Wikimedia product.
-shellpolicy, makes no sense here. This is not actionable yet, but will be a forced thing when the final unification happens.
From the definitions (https://bugzilla.wikimedia.org/describekeywords.cgi), shellpolicy is for bugs where Consensus is needed from someone who is familiar with community standards. Often used for configuration changes for specific wikis to check if the user community agrees. If I understand you ("not actionable *yet*"), then you're saying no attempt for consensus from anyone "familiar with community standards" for the item on here and that no attempt will be made. I'm not sure I agree with that, but is that what you're saying?
(In reply to comment #18) > I'm not sure I agree with that, but is that what you're saying? No. No consensus is needed.
*** Bug 15183 has been marked as a duplicate of this bug. ***
Could someone (Victor?) please update [[mw:Extension:TitleBlacklist]] to document the changes made in Gerrit change #8881?
