Page MenuHomePhabricator

Set $wgSFSReportOnly to false for es.wikiversity
Closed, ResolvedPublic

Description

es.wikiversity is currently one of the guinea pig wikis for StopForumSpam as one of the projects where substantial spambot activity was detected. Since spambots continue to operate there, and the project is basically inactive (thus no or very low risk of false positives) I'm proposing that es.wikiversity be the first production wiki where SFS operates in enforce mode, unless T309900#8462082 prevents this for now.

Event Timeline

Regardless of T309900#8462082 (and the currently open, related change set), I'm personally fine putting es.wikiversity in enforce mode, given its relatively lower traffic and the fact that it's fairly trivial to disable ext:SFS if it causes problems or proves mostly ineffective. Thoughts, @Reedy?

sbassett changed the task status from Open to In Progress.Mar 8 2023, 5:44 PM
sbassett claimed this task.
sbassett triaged this task as Medium priority.
sbassett edited projects, added: SecTeam-Processed; removed: Security-Team.
sbassett added a project: user-sbassett.
sbassett moved this task from Backlog to In Progress on the user-sbassett board.

Change 896085 had a related patch set uploaded (by MarcoAurelio; author: MarcoAurelio):

[operations/mediawiki-config@master] eswikiversity: Enable SFS in enforce mode

https://gerrit.wikimedia.org/r/896085

Regardless of T309900#8462082 (and the currently open, related change set), I'm personally fine putting es.wikiversity in enforce mode, given its relatively lower traffic and the fact that it's fairly trivial to disable ext:SFS if it causes problems or proves mostly ineffective. Thoughts, @Reedy?

Thank you. I've uploaded the patch so it's less steps if this moves forward, and added you and Sam as reviewers.

Change 896085 merged by jenkins-bot:

[operations/mediawiki-config@master] eswikiversity: Enable SFS in enforce mode

https://gerrit.wikimedia.org/r/896085

sbassett moved this task from In Progress to Done on the user-sbassett board.

Done. Logstash seems happy and I confirmed the verb switch in the log messages.