Page MenuHomePhabricator

Accounts creation that should have triggered Abusefilter did not
Closed, InvalidPublicBUG REPORT

Description

What happens?:
The following accounts, on fr-wp, have been created without triggering Abusefilter 366:

What should have happened instead?:
Using the version of the filter used at the time those accounts have been created, the test tool indicates that those accounts creation should have triggered Abusefilter 366. These accounts creation should have been blocked by Abusefilter.

(Related discussion in French: https://fr.wikipedia.org/wiki/Discussion_utilisateur:Habertix/2021#Filtre_366)

Event Timeline

Daimona subscribed.

I don't want to give away too many details on a private filter, but the condition at line 26 is never true for those account creations. I can discuss this in more detail with you on a private channel; feel free to reach out to me on IRC (nick Daimona) or Special:EmailUser me, whatever you prefer.

Aklapper removed 786 as the assignee of this task.Nov 4 2021, 12:30 PM
Aklapper added a subscriber: 786.

how can this line can't be true with new account ?

@Supertoff There was a line 28 in the version of the filter used at the time those accounts have been created, see the link in the description I wrote above. See also the email on which you are in CC ;)

Some of these can be managed by metawiki's title blacklist. We already do that for numbers of prominent users, and would do that in this situation where duplicity is being attempted. Happy for a strings of regex to be provided to the talk page to achieve this, also noting that we have the antispoof ability there too.

I think that doing this globally is quite important as we don't want prominent users being mimicked at other wikis either.

There is also https://meta.wikimedia.org/wiki/Special:AbuseFilter/251 that someone has created for monitoring something similar

Thanks @Billinghurst, I will keep in mind this possibility.