Page MenuHomePhabricator

Heritage Foundation threat of targeted attack
Open, Needs TriagePublic

Description

There's a thread on enwiki about what looks to be plausible threat of a targeted attack on the privacy of wikipedia editors. Some quotes from the referenced slide show:

  • Identify and target Wikipedia editors abusing their position by analyzing text patterns, usernames, and technical data through data breach analysis, fingerprinting, HUMINT, and technical targeting.
  • Use redirects to capture IP addresses, browser fingerprints, and device data through a combination of in browser fingerprinting scripts and HTML5 canvas techniques

I don't know how serious a threat this is, or whether there is anything that can be done at our end, so opening this ticket just to make sure T&S is aware of it.

Event Timeline

I do think it should also be a ticket, albeit probably not a public one.

When I created the ticket, I thought about marking it "security", but figured I wasn't saying anything that wasn't already public, so left it open. I was not previously aware of the Trusted-Contributors mechanism; I agree that would make sense to use here.

Hmmm, I see I'm already a member of that group, so apparently somebody already thought I was trustworthy. Must be a low bar :-)

Novem_Linguae changed the subtype of this task from "Bug Report" to "Task".Wed, Jan 8, 10:49 PM