Page MenuHomePhabricator

Disallow uploading unwanted files to Phabricator (WP Zero abuse?)
Closed, DuplicatePublic

Description

On 20180124, some unwanted files got uploaded to Phabricator shared between 15 users in https://phabricator.wikimedia.org/Z644 .
(For Phab admins: https://phabricator.wikimedia.org/people/query/all/ shows when most accounts registered etc)

Looking at the IPs of those uploaders who did not use proxies in European countries, all IPs used by uploaders were in IP ranges of CASA_4G_MarocTelecom (according to whois).

Also see T168142 for historical context.

It is also possible for Moroccan "Inwi Mobile" users to access Phabricator. (INWI-Internet-UGW-CAS01, This subnet is dedicated to 2G/3G/4G customers) who did not upload content though.

CC'ing @Mholloway as they recently helped on T173537 (feel free to remove yourself!)

Event Timeline

Aklapper updated the task description. (Show Details)Jan 26 2018, 11:17 PM

One option: Disable option for uploading. And all ok.

@Zoranzoki21: This task is about a specific problem. Please see previous work and related tasks first.
Generic 'solutions' like disabling uploading is out of scope here and not an option on the table.

Zoranzoki21 added a comment.EditedJan 28 2018, 9:36 PM

@Zoranzoki21: This task is about a specific problem. Please see previous work and related tasks first.
Generic 'solutions' like disabling uploading is out of scope here and not an option on the table.

I only suggested one option. I am not thinked nothing bad.

@Zoranzoki21: Please do read existing and linked tasks first before commenting. What you commented has been discussed already. No need to discuss again.

@Zoranzoki21: Please do read existing and linked tasks first before commenting. What you commented has been discussed already. No need to discuss again.

OK

Maroc Telecom is one of the ISPs that the on-wiki abusers originate from. Is it zero-rated? If so, asn't they been disabled from uploading in T168142#3466615?