I am not certainly the most experienced with regex, but IMHO usernames that we want to forbid from creation should have the "antispoof" variable set to avoid character spoofing. I made a request at https://wikitech.wikimedia.org/wiki/MediaWiki_talk:Titleblacklist.

In T170178#3421916, @MarcoAurelio wrote:

I am not certainly the most experienced with regex, but IMHO usernames that we want to forbid from creation should have the "antispoof" variable set to avoid character spoofing.

This depends on the "why" of forbiding the name. Most of the names blacklisted on wikitech are being blocked from being used as unix shell names because they conflict with privileged/special unix users. For these unicode and l33tspeak variations don't matter. The operating system will not be fooled.

I added all of the accounts from:

• https://anonscm.debian.org/cgit/d-i/user-setup.git/tree/reserved-usernames?id=ae153f7fbe029a78e0d18f15d487ee783c3cdeff
• cut -d: -f1 /etc/passwd | sort on tools-bastion-02 at 2017-07-13T16:00Z
• git per request at T170174

The list has been alphabetized. |antispoof is only set for bans that are intended for blocking MediaWiki user account spoofing. We do not need anti-spoof protection for UNIX shell account bans.

Deleted uid=hostmaster,ou=people,dc=wikimedia,dc=org. Matches blacklist and associated Wikitech account was blocked 2015-03-22T17:13:23.

(perhaps we can close this task ?)

In T170178#3436340, @Framawiki wrote:

(perhaps we can close this task ?)

I will close it when I'm sure I am done with cleanup.

Renamed uid=prometheus to uid=jberkley and left explanation on talk page.

In T170178#3436416, @bd808 wrote:

Renamed uid=prometheus to uid=jberkley and left explanation on talk page.

This one has been reverted. The prometheus package is actually using the uid from LDAP, so the change needs to be handled separately.