Page MenuHomePhabricator
Create Task
Maniphest T262321

IP Masking
Closed, ResolvedPublic
Actions

Description

Request Status: New Request
Request Type: project support request

Request Title: IP Masking

  • Request Description: Improving the privacy of anonymous editors while continuing to support admins prevent vandalism on projects.
  • Indicate Priority Level: High
  • Main Requestors: @Niharika
  • Ideal Delivery Date: FYQ4
  • Stakeholders: @DannyH
  • Estimated effort: 1 FTE, 1 quarter

Request Documentation

Document TypeRequired?Document/Link
Related PHAB TicketsYes<add links here>
Product One PagerYes<add link here>
Product Requirements Document (PRD)YesIP Masking PRD
Product RoadmapYes<add link here>
Product Planning/Business CaseNo<add link here>
Product BriefNo<add link here>

Other Links:

Related Objects
Search...

StatusSubtypeAssignedTask
 Resolved• lbowmakerT262321 IP Masking
 ResolvedtstarlingT300263 [IP Masking] Create temporary account on first edit
 DuplicateNoneT307054 [IP Masking] Temporary account mobile web support in editing workflow
 DuplicateNoneT307056 [IP Masking] Temporary account VisualEditor support
 ResolvedmatmarexT307057 [IP Masking] Temporary account Timeless support
 OpenNoneT307060 [Epic] Temporary account AbuseFilter support
 ResolvedSTranT331653 Investigate: Update AbuseFilter for IP Masking
 ResolvedUmherirrenderT328311 Special:AbuseLog is missing the `mw-tempuserlink` class from temporary account user links
 Resolved• AGueyteT335062 Update AbuseFilter with the right user verification
 Duplicate• AGueyteT335064 Investigate AbuseFilter Hook with CheckUser
 ResolvedSTranT334623 How do we log unsuccessful first edits for temporary users?
 ResolvedDreamy_JazzT357615 Create filters to distinguish anonymous/temporary/registered users
 ResolvedSTranT357772 Investigate: How will `ip_in_range` and `ip_in_ranges` function when temporary accounts are enabled
 ResolvedSTranT364833 Add `user_unnamed_ip` variable
 ResolvedSTranT363906 [Epic] Ensure filters that use PII-sensitive variables are protected
 ResolvedSTranT364465 Display changes to protected status and flags on AbuseFilter history and diff pages
 ResolvedSTranT364485 Alert a filter editor that a filter must be protected if it is saved with a protected variable
 ResolvedkostajhT365049 Investigate what to do about the AbuseFilter log revealing someone's IP address via historical logs
 ResolvedSTranT365743 Log when AbuseFilter user sees IP address associated with temp account via user_unnamed_ip variable trigger
 ResolvedTchandersT364902 How should access to IPs of temporary accounts be logged?
 ResolvedSTranT367390 Add granular query restrictions for AbuseFilter filter search
 ResolvedSTranT364834 Ensure testing tools that use `user_unnamed_ip` don't reveal it to users without the view right
 ResolvedSTranT369610 Give the `abusefilter-access-protected-vars` right to global maintainers
 OpensgrabarczukT369611 Coordinate the updates of IP-using AbuseFilter filters to use `user_unnamed_ip`
 ResolvedSTranT357774 Investigate: What to do with existing filters that temporary accounts will break
 ResolvedBUG REPORTDreamy_JazzT358632 CannotCreateActorException when creating a temporary account on an edit which causes an abuse filter log
 ResolvedSTranT365740 Document the changes introduced for temporary accounts
 OpenNoneT307062 OOUI PopupWidget behaviour when floating over an element that is outside the viewport
 OpenNoneT307063 [IP Masking] Use edit stash during temporary account creation flow
 DeclinedtstarlingT300265 [IP Masking] Inform username accounts prefixed with "*"
 ResolvedSpikeNiharikaT300267 [IP Masking][Spike] Investigate special character occurrences for temporary account usernames
 OpenNoneT300268 [IP Masking] Notify temporary account user on subsequent edits
 ResolvedkostajhT300269 [IP Masking] Temporary account talk page
 ResolvedUrbanecm_WMFT300271 [IP Masking] Temporary Account Expiration
 ResolvedUrbanecm_WMFT344695 [IP Masking] Expire temporary accounts in 1 year
 ResolvedSgsT344694 [IP Masking] Alert temporary accounts 10 days before expiration
 ResolvedCyndymediawiksimT300273 [IP Masking] Temporary account to registered account creation flow
 ResolvedCyndymediawiksimT346327 Track impressions, success and abandonment rate on the signup form
 ResolvedCyndymediawiksimT350923 [IP Masking] Temporary account to registered account creation flow (layout fixes)
 ResolvedtstarlingT307064 [IP Masking] Maintenance script to rename users matching configured TempUser pattern
 ResolvedNiharikaT307065 IP Masking test wiki

Event Timeline

Naike created this task.Sep 8 2020, 8:07 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 8 2020, 8:07 PM
Naike set the point value for this task to 1.Sep 8 2020, 8:08 PM
• eprodromou moved this task from Next to Later (future inbox) on the Platform Engineering Roadmap board.Sep 9 2020, 2:10 PM
• eprodromou moved this task from Later (future inbox) to Next on the Platform Engineering Roadmap board.Sep 9 2020, 2:14 PM
Naike added a project: Platform Engineering Roadmap Decision Making.Sep 11 2020, 9:23 AM
Naike moved this task from Next to Later (future inbox) on the Platform Engineering Roadmap board.Sep 14 2020, 9:08 AM
• WDoranWMF added a project: Product-Feature.Sep 30 2020, 9:02 PM
dbarratt mentioned this in T264545: Create an API endpoint to allow getting information about a user's all active IP addresses.Oct 4 2020, 9:12 PM
• eprodromou removed a project: Platform Engineering Roadmap Decision Making.Oct 6 2020, 5:43 PM
• eprodromou added a project: Tech-Product API Roadmap.Dec 3 2020, 6:32 PM
Naike moved this task from Later (future inbox) to Next on the Platform Engineering Roadmap board.Dec 7 2020, 6:41 PM
• eprodromou moved this task from Untriaged to Next on the Tech-Product API Roadmap board.Dec 9 2020, 9:44 PM
• WDoranWMF moved this task from Next to Later (future inbox) on the Platform Engineering Roadmap board.Feb 16 2021, 4:39 PM
Naike moved this task from Later (future inbox) to Next on the Platform Engineering Roadmap board.Mar 31 2021, 7:24 PM
Naike moved this task from Next to Design on the Platform Engineering Roadmap board.May 18 2021, 7:09 PM
kostajh subscribed.Jun 2 2021, 7:58 PM

@Naike the doc in the description says it's outdated, and it links to another doc that is not publicly viewable; could you or someone else please make it public?

• sdkim renamed this task from IP Masking to IP Masking.Oct 26 2021, 5:02 PM
• sdkim changed the task status from Open to Stalled.
• sdkim edited projects, added Foundational Technology Requests; removed Tech-Product API Roadmap, Product-Feature, Platform Engineering Roadmap.
• sdkim updated the task description. (Show Details)
• sdkim removed the point value for this task.
• sdkim added subscribers: Niharika, • DannyH.
• sdkim added subscribers: tstarling, • sdkim.

Currently stalled on @tstarling 's availability to assist AHT in this implementation

• sdkim moved this task from Backlog to Ready/Groomed on the Foundational Technology Requests board.Oct 26 2021, 5:03 PM
• sdkim claimed this task.Nov 1 2021, 1:52 PM
• sdkim updated the task description. (Show Details)Nov 4 2021, 6:40 PM
• sdkim added a subscriber: • Prtksxna.Dec 10 2021, 4:33 PM

Spoke to @Niharika @Prtksxna and looking to kickoff near Mid-January.
Need to find availability with @tstarling and understand when Parsing work will be wrapped up to transition to working on IP Masking

• DAbad subscribed.Dec 20 2021, 6:50 PM

December 20, 2021 - Product Steering Committee

  • any impact to the way we define account will impact the account creation experience
  • Growth team will reach out to AHT team to coordinate impacts of the change
  • rolling out should be coordinated to make sure we are prepared for the change
  • Alternative options - GUID - any string

Action Items:

  • Growth team, Web, Editing, coordinate meeting to discuss
• sdkim updated the task description. (Show Details)Dec 20 2021, 7:45 PM
• sdkim updated the task description. (Show Details)Dec 20 2021, 7:49 PM
kostajh added a comment.Jan 3 2022, 7:19 PM
In T262321#7581000, @DAbad wrote:

December 20, 2021 - Product Steering Committee

  • any impact to the way we define account will impact the account creation experience
  • Growth team will reach out to AHT team to coordinate impacts of the change
  • rolling out should be coordinated to make sure we are prepared for the change
  • Alternative options - GUID - any string

Action Items:

  • Growth team, Web, Editing, coordinate meeting to discuss

🚨 scope creep alert 🚨

The latest discussions on T6845: CAPTCHA doesn't work for people with visual impairments seem to agree on removing the CAPTCHA; if the IP masking project implementation will aim to prevent spam without using the CAPTCHA system (or if it proposes to use some CAPTCHA-like alternative to prevent spam edits), then it might make sense to also deal with normal account creation in the context of this project and finally close out T6845.

as an aside, could the DSO artifact please be made public?

• sdkim added a comment.Jan 10 2022, 2:55 PM

@kostajh I've made the document public now

• sdkim changed the task status from Stalled to Open.Jan 27 2022, 7:20 PM
• sdkim reassigned this task from • sdkim to • DAbad.
Niharika added a project: Temporary accounts.Jan 27 2022, 7:20 PM
• DAbad reassigned this task from • DAbad to • lbowmaker.Feb 1 2022, 9:32 PM
• DAbad moved this task from Ready/Groomed to QA/Review on the Foundational Technology Requests board.Apr 27 2022, 3:47 PM
• DAbad added a comment.Apr 27 2022, 3:52 PM

April 27, 2022 Update

We will be taking the time to put this through the Technical Decision Forum to ensure we get as much feedback as possible before pushing this through.

• DAbad moved this task from QA/Review to Parking Lot (Reviewed but Not Prioritized) on the Foundational Technology Requests board.May 9 2022, 4:12 PM
• DAbad moved this task from Parking Lot (Reviewed but Not Prioritized) to Ready/Groomed on the Foundational Technology Requests board.
• DAbad changed the task status from Open to In Progress.Jun 8 2022, 3:13 PM
• DAbad moved this task from Ready/Groomed to QA/Review on the Foundational Technology Requests board.
Sunpriat2 subscribed.Aug 2 2022, 6:28 AM
Tgr updated the task description. (Show Details)Oct 24 2022, 11:07 PM
Tgr mentioned this in T20981: Allow anonymising of unregistered users ("IP editors").Oct 24 2022, 11:09 PM
Aklapper merged a task: T20981: Allow anonymising of unregistered users ("IP editors").Nov 19 2022, 9:32 PM
Aklapper added subscribers: Peachey88, Tgr, Carn and 35 others.
Tgr updated the task description. (Show Details)Nov 20 2022, 9:46 PM
Niharika closed subtask T307065: IP Masking test wiki as Resolved.Dec 17 2022, 11:41 PM
Niharika closed subtask T300267: [IP Masking][Spike] Investigate special character occurrences for temporary account usernames as Resolved.Dec 18 2022, 12:39 AM
Niharika mentioned this in T133452: RFC: Create temporary accounts for anonymous editors.Jan 20 2023, 11:38 PM
Titore subscribed.Jan 21 2023, 2:12 AM
Uzume subscribed.Jan 21 2023, 4:01 PM
Tchanders removed a subtask: T300294: [Epic] Temporary account block workflow.Mar 9 2023, 5:19 PM
tstarling closed subtask T307064: [IP Masking] Maintenance script to rename users matching configured TempUser pattern as Resolved.Jul 24 2023, 5:18 AM
tstarling closed subtask T300263: [IP Masking] Create temporary account on first edit as Resolved.Jul 31 2023, 11:59 PM
Urbanecm_WMF changed the status of subtask T300271: [IP Masking] Temporary Account Expiration from Open to In Progress.Oct 16 2023, 4:04 PM
Urbanecm_WMF closed subtask T300271: [IP Masking] Temporary Account Expiration as Resolved.Jan 12 2024, 9:21 PM
Tchanders changed the status of subtask T300265: [IP Masking] Inform username accounts prefixed with "*" from Open to Stalled.Jan 16 2024, 4:10 PM
Tchanders removed a subtask: T300288: [IP Masking] Admin views IP address for temporary account users.Feb 5 2024, 1:15 PM
Tchanders removed a subtask: T300289: [IP Masking] IPViewer roles views temporary account users.
Tchanders removed a subtask: T300292: [IP Masking] Admin views IP Info Box for temporary account contributions.
kostajh added a comment.Feb 28 2024, 1:03 PM

@lbowmaker can we close this task in favor of T324492: Temporary accounts - MVP?

• lbowmaker closed this task as Resolved.Feb 28 2024, 1:13 PM
In T262321#9583443, @kostajh wrote:

@lbowmaker can we close this task in favor of T324492: Temporary accounts - MVP?

Makes sense, resolving!

Urbanecm_WMF closed subtask T300273: [IP Masking] Temporary account to registered account creation flow as Resolved.Apr 6 2024, 12:31 PM
Urbanecm_WMF reopened subtask T300273: [IP Masking] Temporary account to registered account creation flow as Open.
Etonkovidova closed subtask T300273: [IP Masking] Temporary account to registered account creation flow as Resolved.Apr 8 2024, 11:16 PM
Samwalton9-WMF closed subtask T300265: [IP Masking] Inform username accounts prefixed with "*" as Declined.Apr 30 2024, 12:23 PM
kostajh closed subtask T300269: [IP Masking] Temporary account talk page as Resolved.Jul 12 2024, 6:50 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits