Page MenuHomePhabricator

Create AbuseFilter variable for file metadata size
Open, NormalPublic

Description

Some kinds of abuse (cf T129845) use file formats with flexible metadata fields to camouflage illegal uploads; the payload is hidden in e.g. the EXIF description field of a JPEG file. There is little reason for legitimate metadata to be larger than a few kilobytes; if the total metadata size was made available to anti-abuse tools, that would make the filtering of such uploads much easier.

Event Timeline

Tgr created this task.Jul 11 2017, 10:38 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 11 2017, 10:38 AM
Tgr renamed this task from Create AbuseFilter variable for metadata size to Create AbuseFilter variable for file metadata size.Jul 11 2017, 10:39 AM

See also T154987

Calculating the size of 'file metadata' may require very deep analysis of the file binary data. Considering all the file formats that can be uploaded to Wikimedia, that could be quite a challenge.

dr0ptp4kt triaged this task as Normal priority.Jul 24 2017, 3:24 PM
dr0ptp4kt moved this task from Untriaged to Triaged on the Multimedia board.

Per grooming, @Cparle to write a spike subtask for this :)

matej_suchanek moved this task from Backlog to Uploading on the AbuseFilter board.Jan 19 2018, 7:51 PM