Page MenuHomePhabricator

Prepare Ultraviolet for IP Masking
Closed, ResolvedPublic

Description

Work on the implementation of IP masking is now underway (see IP Editing: Privacy Enhancement and Abuse Mitigation § Implementation Strategy and next steps (25 February 2022)).

As of now, Ultraviolet supports anonymous users using mw.util.isIPAddress. This likely has to be changed to support the new method of IP masking. For reference: the system will work using temporary accounts and is session-based.

We're hoping to get the entirety of UV done before IP Masking gets deployed, so a possible backport for RedWarn seems unlikely as of now.

To-do

  • Add a global flag for whether IP masking is enabled on a wiki or not (for handling special conditions)
    • Perhaps T325451 might also need to be considered for this one. Whether or not this preference is enabled will affect how data is displayed and, thus, how we're supposed to send warnings/reports.
  • Switch over to mw.util.isIPAddress to mw.user.isAnon/mw.user.isTemp (where appropriate)
  • Verify that reports and warnings work properly for temporary accounts
    • This includes checking if the temporary account receives the appropriate warnings
  • Consider implementing the IP Info tool as part of the warning/reporting interface
    • This should only be enabled if the user has the IP Info tool enabled in their preferences (which ensures that they've read the legal message).

Event Timeline

Chlod triaged this task as High priority.Apr 20 2023, 1:13 AM
Chlod moved this task from Needs Triaging to Backlog on the Ultraviolet board.

More information on how developers can react to the changes can now be found at mw:Trust and Safety Product/Temporary Accounts/For developers. I'll try to work on this, among other things, this week and next week.

Late response to this (sorry!), but upon inspection of the code, there's nothing in both Ultraviolet or RedWarn that would require significant changes ahead of deployment. The only things that require changing are small QoL changes (e.g. saying "a temporary account" rather than "a user" in the interface). For the most part, Ultraviolet should already treat temporary accounts much like regular accounts, and also do any required template changes on the wikis that require it (e.g. changing {{IPvandal}} to {{vandal}}, not using {{Shared IP address}}).

We can place adding in temporary account-specific features (such as revealing IP address information or getting information from the IP info tool) much later on, when we're in a much better position to implement new features.

Chlod claimed this task.

Hi, @Niharika! Sorry for the late update. Yeah, this can be closed now. It seems we haven't received any reports of issues with Ultraviolet during the rollout of temporary accounts. We'll work on further UI/UX improvements as part of the tool later down the line.