Last modified: 2014-07-14 23:47:30 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T70003, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 68003 - Internal IPs of tool labs hosts exposed in version history
Internal IPs of tool labs hosts exposed in version history
Status: RESOLVED FIXED
Product: Wikimedia
Classification: Unclassified
General/Unknown (Other open bugs)
wmf-deployment
All All
: Unprioritized normal (vote)
: ---
Assigned To: Nobody - You can work on this!
https://www.wikidata.org/w/index.php?...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-07-14 20:00 UTC by se4598
Modified: 2014-07-14 23:47 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description se4598 2014-07-14 20:00:23 UTC
WMF-intern IPs (possible tool labs execution nodes) are visible in the version history of pages. (They were caused by a logged out bot; <https://www.wikidata.org/w/index.php?title=Wikidata:Tools/Tool_of_the_week&action=history>)

* 10.68.16.37 
* 10.68.16.32
* 10.68.16.31 
* 10.68.17.64
* 10.68.16.36
* 10.68.16.35

This can be intended but to be sure I opened this bug. I think a IP pointing to http://tools.wmflabs.org/ would not be a wrong thing for transparency reasons. Or just IP-blocking them b/c it is not intended to edit from labs logged-out.
Comment 1 Marc A. Pelletier 2014-07-14 20:09:15 UTC
That the IPs are exposed is not an issue, but bots should not be editing while logged out.

It's perfectly justifiable to block the IPs coming from labs, but may not be necessary in the general case.  In the meantime, I'll attempt to track down the specific errant bot.
Comment 2 se4598 2014-07-14 20:15:37 UTC
(In reply to Marc A. Pelletier from comment #1)

for the linked wikidata-page (and most of the other contribs on wikidata I think) this was BeneBot*,
but looking at some global contribs from the IPs it is visible that there are also (though often older) edits by other bots at various wikis.
Comment 3 Marc A. Pelletier 2014-07-14 20:26:21 UTC
I suppose how to handle the matter is a question for Wikidata; the English Wikipedia applied a soft block to the tool labs execution nodes as their rules[1] specifically forbids bots from editing while logged out.

Depending on what the rules about automated editing are on the other projects, they can do the same or contact the tool's maintainer.

[1] https://en.wikipedia.org/wiki/Wikipedia:BOTACC
Comment 4 Marc A. Pelletier 2014-07-14 20:53:56 UTC
The errant bot is definitely BeneBot*, and it seems to have since logged back on.  I'm going to drop him a not suggesting he uses assert=bot.

If the Wikidata community decides to block Labs from editing while logged out, the proper rangeblock is 10.68.16.0/21; and the block should only be a *soft* block.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links