Page MenuHomePhabricator

Add option to "block underlying IP address" when blocking temporary accounts
Open, Needs TriagePublicFeature

Description

Feature summary (what you would like to be able to do and where):

It should be possible to block the underlying IP address of temporary accounts without autoblocking registered users from the block form. This is especially useful if an administrator does not have the permissions to view the underlying IP addresses of a temporary account.

Use case(s) (list the steps that you performed to discover that problem, and describe the actual underlying problem which you want to solve. Do not describe only a solution):

Alice, an administrator on a wiki, notices a lot of vandalism from several temporary accounts. Noticing that they are exhibiting the same behavioral tells, Alice concludes that all the temporary accounts share the same IP address and thus wishes to block them.

Alice thus would only need to block one temporary account, check a field "Also block the underlying IP address", and then the most recent IP address by which the temporary account is blocked for the same duration as the temporary account. In the block log, the IP block only shows as a block ID. When that checkbox is checked, the regular IP block settings (such as preventing logged in users from editing) can appear as options only to apply to the underlying blocked IP address.

Benefits (why should this be implemented?):

The purpose of this is to allow administrators on wikis who do not have configured permissions to view underlying temporary account IP addresses to block IP addresses used by temporary accounts without knowing the IP addresses of the temporary accounts.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

then the most recent IP address by which the temporary account is blocked for the same duration as the temporary account.

So, autoblock already does this for 24 hours. Which makes it useless in its own way.

Your solution is also useless, because IPs may be used for a much different period by one person than the temporary account (the practice of blocking which is either indefinitely or 90 days: oops, you just blocked an IP indefinitely).

I do wonder as well if there may be better solutions than what I suggested. Maybe some sort of IP hashing so that one can know if two temporary accounts share the same IP without actually sharing the same IP.

Or maybe the behavior should be that it places two separate blocks with different block settings. So an admin can block a temporary account indefinitely yet block an IP address for a fixed period like one year. This is something that may be worth working on for when temporary accounts gets deployed off of Wikimedia (such as Fandom, since I don't think Fandom staff would be comfortable letting anyone outside of a few global volunteer groups having access to IP addresses for accounts, temporary or registered).

If the issue is about autoblocks affecting registered users (I don’t think I've heard about a single case in the past couple of months, per perhaps that’s different on enwiki?), the solution might be introducing "temp account autoblocks" instead of adding new block options to manually block an unknown IP address.

Btw I don’t understand why the admin can’t just enable their IP access via Special:Preferences if they want to check whether different temp accounts belong to the same person? Accessing the IP would also allow them to place an IP block without any autoblock issues if they're concerned about that.

If the issue is about autoblocks affecting registered users (I don’t think I've heard about a single case in the past couple of months, per perhaps that’s different on enwiki?), the solution might be introducing "temp account autoblocks" instead of adding new block options to manually block an unknown IP address.

Btw I don’t understand why the admin can’t just enable their IP access via Special:Preferences if they want to check whether different temp accounts belong to the same person?

A wiki or wiki farm might want to not configure access to temporary account IP addresses for administrators. I named Fandom as a possible example of this.

If someone does this on LocalSettings.php on a wiki:

$wgGroupPermissions['sysop']['checkuser-temporary-account'] = false;
$wgGroupPermissions['sysop']['ipinfo'] = false;
$wgGroupPermissions['sysop']['ipinfo-view-full'] = false;

Administrators should still be able to block the underlying IP addresses of temporary accounts without them knowing what those IP addresses are.

So, autoblock already does this for 24 hours. Which makes it useless in its own way.

See also: T43479: [Spam/vandalism] Raise $wgAutoblockExpiry noticeably. The current issue is to measure which autoblock expiry is proper.