Page MenuHomePhabricator

Gather information on successful-login notifications that would be sent
Open, MediumPublic

Description

We should gather statistics about the number of successful-login notifications people would be receiving if enabled globally.

There will be a number of different "groups", but if a number active users (ie. for which we have a bunch of data) would be receiving many succesful-login notifications (we can assume that all of them would be False Positives), I don't think it would be suitable for enabling by default.

Some data might be on the Notifications database, although that's not clear, and we probably need some extra code.

I would eg. run it for a month storing the number of succesful-login notification attempts that would be sent per user, then show a table with the total number of logins, and the number of users that would have received N notifications (perhaps shown in ranges, for N > M).

Event Timeline

I'm the first. :-) I opted in on my home wiki, and a couple more, at the first day it was possible, a day before you could. I didn't get any mails yet.

Btw, you can open it on our wiki, and I'll ask a week later this question all the community.

Elitre renamed this task from Gather information on succesful-login notifications that would be sent to Gather information on successful-login notifications that would be sent.Sep 4 2017, 6:34 PM

We should gather statistics about the number of successful-login notifications people would be receiving if enabled globally.

Why?

I'm not sure what this task is asking for. The point of not having Echo notifications for successful login attempts was because the notification prompts a password change which can be exploited by the attacker which can lead to that account being lost. What's the point of gathering this data?