Last modified: 2014-02-12 23:35:43 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T34234, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 32234 - Add a throttle to limit the rate at which non-autoconfirmed users can create additional accounts
Add a throttle to limit the rate at which non-autoconfirmed users can create ...
Status: NEW
Product: MediaWiki
Classification: Unclassified
User login and signup (Other open bugs)
1.21.x
All All
: Normal enhancement with 2 votes (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2011-11-07 08:53 UTC by This, that and the other (TTO)
Modified: 2014-02-12 23:35 UTC (History)
11 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description This, that and the other (TTO) 2011-11-07 08:53:56 UTC
There has been an RFC at http://en.wikipedia.org/w/index.php?title=Wikipedia:Village_pump_%28proposals%29&oldid=456851655#Remove_ability_for_new_users_to_create_other_accounts with the outcome that non-autoconfirmed accounts should be limited to creating two new accounts (while logged in) in a 24 hour period. This is to be done in order to potentially minimise the proliferation of sockpuppets.

Please implement this as described.
Comment 1 Ruslan 2011-11-10 19:14:28 UTC
I do not see any consensus in that discussion. It had a very limited number of participants. I had trouble imagining how so few people can just ban many tens thousands of users from creating accounts. This proposal is just another version of [[bugzilla:30208]] and should follow its way.
Comment 2 Sam Reed (reedy) 2011-11-10 21:36:15 UTC
Indeed.

-shell for the moment till this is dealt with properly
Comment 3 p858snake 2011-11-10 22:38:37 UTC
(In reply to comment #1)
> I do not see any consensus in that discussion. It had a very limited number of
> participants.
It was advertised, I'm sure I even saw it on CENT, the Global en.wiki template for listing RfCs. 

> I had trouble imagining how so few people can just ban many tens
> thousands of users from creating accounts.
I'm going to take it you didn't read it properly or even just the closing admins notes? This proposal is to stop people who have a user account but not the autoconfirmed bit ([[WP:AUTOCONFIRMED]]) from creating even more accounts.

> This proposal is just another version of [[bugzilla:30208]] and should follow its way.
I'm failing to see the correlation between someone that has a user account that does't already have auto-confirmed status stopping them from creating even more user accounts whilst LOGGED IN and preventing them from creating accounts. Perhaps you could point me in direction about that?
Comment 4 This, that and the other (TTO) 2011-11-16 04:30:50 UTC
(In reply to comment #1)
> I had trouble imagining how so few people can just ban many tens
> thousands of users from creating accounts. 

As p858snake said, this is wrong. Please read the entire section on WP:VPR carefully before commenting.

(In reply to comment #2)
> -shell for the moment till this is dealt with properly

Probably more discussion is needed, I agree.
Comment 5 The Blade of the Northern Lights 2011-11-28 22:06:22 UTC
(In reply to comment #1)
> I do not see any consensus in that discussion. It had a very limited number of
> participants. I had trouble imagining how so few people can just ban many tens
> thousands of users from creating accounts. This proposal is just another
> version of [[bugzilla:30208]] and should follow its way.

It is in no way the same thing, and should absolutely NOT follow the course it did; why don't you check the Signpost for September 26th to see how people reacted to that?  I don't greatly care if this gets implemented or not (though I supported it), but to conflate the two is extremely misleading.  I also think This, that and the other makes good points.
Comment 6 Antoine "hashar" Musso (WMF) 2012-02-15 15:36:46 UTC
Is there any update on that or should we abandon this bug report ?
Comment 7 Platonides 2012-02-15 15:57:22 UTC
The RfC premise looks wrong to me.

There are logs both for user to children accounts
http://en.wikipedia.org/w/index.php?title=Special%3ALog&user=Little+Red+Corvette+Guy

and for children accounts linking them to the parent one
http://en.wikipedia.org/w/index.php?title=Special%3ALog&page=User%3AMr.+Playbill


That can be done even with no checkuser rights. I think that this bug should be wontfixed and a new enhacement opened to checkuser extension with wherever they want the relationship to appear.
Comment 8 The Blade of the Northern Lights 2012-02-17 14:25:11 UTC
(In reply to comment #7)
> The RfC premise looks wrong to me.
> 
> There are logs both for user to children accounts
> http://en.wikipedia.org/w/index.php?title=Special%3ALog&user=Little+Red+Corvette+Guy
> 
> and for children accounts linking them to the parent one
> http://en.wikipedia.org/w/index.php?title=Special%3ALog&page=User%3AMr.+Playbill
> 
> 
> That can be done even with no checkuser rights. I think that this bug should be
> wontfixed and a new enhacement opened to checkuser extension with wherever they
> want the relationship to appear.

If the premise looks wrong to you, it's because you're misunderstanding it.  We're trying to prevent him (and others, but mostly him) from being able to create 6 accounts and create that much more annoyance for the people cleaning up after him.  We all know when it's him, that's not the issue; the issue is that he's creating ~300% more of a mess than he'd be able to if this was implemented.
Comment 9 Platonides 2012-02-18 16:30:58 UTC
Sorry, I was looking at the opening comment of the RFC, not at the outcome.
Comment 10 The Blade of the Northern Lights 2012-02-18 21:16:36 UTC
(In reply to comment #9)
> Sorry, I was looking at the opening comment of the RFC, not at the outcome.

Looking over it again, I can't blame you; there was some initial confusion over what we were looking for.  Thankfully, the eventual outcome is clearer.
Comment 11 mabdul 2012-02-23 12:26:09 UTC
So do we get now that new limitation?
Comment 12 matanya 2012-07-22 19:38:43 UTC
looks like this wasn't implemented yet.
Comment 13 MZMcBride 2012-07-22 19:41:59 UTC
The Wikimedia configuration files are in Git now. So someone needs to commit a proposed changeset and then asked for it to be merged into the master, or something, I believe.
Comment 14 MZMcBride 2012-07-22 19:47:49 UTC
So it looks like you'd want to commit a change to this repo: <https://gerrit.wikimedia.org/r/gitweb?p=operations/mediawiki-config.git>.

Specifically, it's in wmf-config/InitialiseSettings.php (<https://gerrit.wikimedia.org/r/gitweb?p=operations/mediawiki-config.git;a=blob;f=wmf-config/InitialiseSettings.php;h=4e4a9bc0efd0718d00aa47018eff910177eee116;hb=ffd469239a80b8bb9813eb029e4cd71a3ea52db9>):

---
'wgAccountCreationThrottle' => array(
        'he' => 4,
        'default' => 6, // previously 10
        'private' => 0, // disable for wikis with sysop-only account creation
        'fishbowl' => 0,
        'idwiki' => 0,
        'swwiki' => 150, // for event 2011-11-30, contact User:Ijon -- TS
),
---
Comment 15 Alex Monk 2012-07-22 19:50:00 UTC
Pretty sure it should be done in wmf-config/throttle.php now.
Comment 16 Platonides 2012-07-22 21:54:01 UTC
No, wgAccountCreationThrottle is still at InitialiseSettings.php

We don't have a configuration for changing to just registered users non-autoconfirmed. Sysops are throttle-skipped, and the rest confined by $wgAccountCreationThrottle.
Comment 17 This, that and the other (TTO) 2013-01-27 06:10:50 UTC
I changed the product/component: the feature we are requesting doesn't appear to exist in MediaWiki yet, so shell can't do anything.
Comment 18 This, that and the other (TTO) 2013-03-18 10:03:54 UTC
I don't think enwiki requires this feature anymore; the editfiltermanagers are using an edit filter to collect relevant data. However, since I moved the component to MediaWiki, the bug is still technically valid. I'll leave it up to others to decide whether this is a useful feature to add to MW core.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links