Reset password: Mardi soir
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Dereckson
	Apr 30 2016, 2:40 PM

Description

We received this afternoon a request on #wikipedia-fr IRC channel to reset the mail of an user account.

This account contributed to fr.wikipedia until 2011 and was owned by an active participant of the #wikipedia-fr channel known irl by a trusted user, with a chain of trust to a steward.

Technically, we can process this. Socially, this requires the green light from Trust & Safety.

Procedure

verify the identity according this procedure
follow the instructions in this page

Identity check

We can create the following chain of trust from a steward to the user:

Person	can verify	Trusted used as
@Linedwell	esby	Steward
esby	Okki	Participated to several Wikimedia events, like Berlin 2012 hackathon
Okki	Mardi soir	Recipient of WMFR grants for photo, sysop on Commons

All these persons has met in real life:

@Linedwell briefly seen esby at a Wikimedia convention
esby and Okki have seen them each other several times
Okki and Mardi soir also met irl

So, Linedwell can have video confirmation with these participants to allow esby to confirm Okki is Okki, then Okki to confirm Mardi soir is mardi soir.

@Jalexander Do you agree with this procedure?

Related Objects

Mentioned In: T134246: Changing the email addresses sends both emails to the old address, none to the new address
T130367: Two fr.wp users have not received email notifications (to GMail) for account confirmation
Mentioned Here: T134246: Changing the email addresses sends both emails to the old address, none to the new address

Event Timeline

Dereckson created this task.Apr 30 2016, 2:40 PM

Restricted Application added subscribers: JEumerus, Matanya, Aklapper. · View Herald TranscriptApr 30 2016, 2:40 PM

A user's old (pre-SUL) email address can sometimes be found in a local wiki's user.user_email column. That is sometimes useful as an additional voucher in case an old email should be restored.

There is such address here.

I wouldn't do this. In this case I think the user should just make a new account.

The issue is another account username would decrease the coherence of the digital identity. So if there is a way to verify the identity of the account holder, I think this is important we respect the digital identity of the persons.

Dereckson updated the task description. (Show Details)Apr 30 2016, 3:43 PM

Dereckson mentioned this in T130367: Two fr.wp users have not received email notifications (to GMail) for account confirmation.May 4 2016, 11:46 AM

I'm wondering if this is T134246 - could you try the workaround mentioned there?

Aklapper mentioned this in T134246: Changing the email addresses sends both emails to the old address, none to the new address.May 4 2016, 3:23 PM

Meanwhile, the user was able to recover the password.

@Aklapper Yes, you were right. The workaround works.

Reset password: Mardi soirClosed, ResolvedPublicActions

Description

Related Objects

Event Timeline

Reset password: Mardi soir
Closed, ResolvedPublic
Actions