Page MenuHomePhabricator
Create Task
Maniphest T432452

Echo notifications when new items are flagged
Open, Needs TriagePublic
Actions

Description

Summary

When new edits are tagged as "likely contains personal information", create a notification to users with viewsuppressed who have opted-in to receive Echo notifications. This allows for faster time-to-suppress and reduces likelihood of efficient processing of the bad edit (by not having additional revisions on top of the problematic revision).

Notes

  • Until the special page exists, the link from the notification can take the user to Special:RecentChanges?tagfilter=mw-private-personal-info
  • If the revision is suppressed, we should no longer display the notification in the web UI

Acceptance criteria

  • Users with viewsuppressed can opt-in to a Echo notification to be alerted when revisions are flagged as containing "likely contains personal information"
  • Instrumentation exists for knowing if users interact with this notification

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
Link the personal-info notification preference to a help pageMpostoroncamediawiki/extensions/WikimediaAntiAbusemaster+140 -24
Clear personal-info notifications when a recipient loses tag accessMpostoroncamediawiki/extensions/WikimediaAntiAbusemaster+288 -1
Remove the flag notification when the revision is suppressedMpostoroncamediawiki/extensions/WikimediaAntiAbusemaster+270 -0
WikimediaAntiAbuse: Document required load order after EchoMpostoroncaoperations/mediawiki-configmaster+4 -0
Hide the flag notification preference from ineligible usersMpostoroncamediawiki/extensions/WikimediaAntiAbusemaster+329 -0
Notify opted-in oversighters when an edit is flaggedMpostoroncamediawiki/extensions/WikimediaAntiAbusemaster+1 K -22
zuul: Add Echo dependency for WikimediaAntiAbuseMpostoroncaintegration/configmaster+10 -0
Make Event::isDeleted() work for events loaded from the databaseMpostoroncamediawiki/extensions/Echomaster+20 -12
Customize query in gerrit

Related Objects
Search...

Event Timeline

kostajh created this task.Fri, Jul 17, 11:40 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFri, Jul 17, 11:40 AM
Dreamy_Jazz subscribed.EditedFri, Jul 17, 2:08 PM

How might we handle a situation where the revision is dealt with and so the echo notification no longer is needed? Just thinking if we end up pinging 10 oversighters to handle an edit, we then risk all 10 of them trying to deal with the same revision at once or even some of the 10 clicking the notification only to find that it's already been dealt with

I'd recommend we work on ways to avoid notifying too many OSers at once, perhaps we could consider:

  • At first only recommending to users who are active (we could use https://apersonbot.toolforge.org/recently-active/ as a basis for the logic of what we consider "recently active")
  • Batch the notifications or limit them to some upper bound to avoid pinging everyone at once
  • (Maybe) Only pinging one OSer per revision
kostajh added a comment.Fri, Jul 17, 2:21 PM
In T432452#12132490, @Dreamy_Jazz wrote:

How might we handle a situation where the revision is dealt with and so the echo notification no longer is needed? Just thinking if we end up pinging 10 oversighters to handle an edit, we then risk all 10 of them trying to deal with the same revision at once or even some of the 10 clicking the notification only to find that it's already been dealt with

I'd recommend we work on ways to avoid notifying too many OSers at once, perhaps we could consider:

  • At first only recommending to users who are active (we could use https://apersonbot.toolforge.org/recently-active/ as a basis for the logic of what we consider "recently active")
  • Batch the notifications or limit them to some upper bound to avoid pinging everyone at once
  • (Maybe) Only pinging one OSer per revision

Echo supports removing the notification if it's no longer relevant. Won't help if the user has opted into email alerts, but would help for the on-wiki notification case. My guess is that only a small number of OS users would opt in to this, so the risk of collision is low. We could also batch the notifications every N hours, as you've suggested.

kostajh updated the task description. (Show Details)Wed, Jul 22, 11:48 AM
kostajh edited projects, added: Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)); removed: Product Safety and Integrity.
kostajh updated the task description. (Show Details)
kostajh moved this task from Backlog to Ready on the Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)) board.Wed, Jul 22, 11:52 AM
MPostoronca-WMF claimed this task.Wed, Jul 22, 1:09 PM
MPostoronca-WMF moved this task from Ready to In progress on the Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)) board.
gerritbot added a comment.Thu, Jul 23, 10:46 AM

Change #1314757 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/WikimediaAntiAbuse@master] Notify opted-in oversighters when an edit is flagged

https://gerrit.wikimedia.org/r/1314757

gerritbot added a project: Patch-For-Review.Thu, Jul 23, 10:46 AM

Change #1314758 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/WikimediaAntiAbuse@master] Hide the flag notification preference from ineligible users

https://gerrit.wikimedia.org/r/1314758

gerritbot added a comment.Thu, Jul 23, 10:46 AM

Change #1314759 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/WikimediaAntiAbuse@master] Remove the flag notification when the revision is suppressed

https://gerrit.wikimedia.org/r/1314759

gerritbot added a comment.Thu, Jul 23, 12:35 PM

Change #1314803 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[integration/config@master] zuul: Add Echo dependency for WikimediaAntiAbuse

https://gerrit.wikimedia.org/r/1314803

gerritbot added a comment.Thu, Jul 23, 5:03 PM

Change #1314885 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/Echo@master] Make Event::isDeleted() work for events loaded from the database

https://gerrit.wikimedia.org/r/1314885

gerritbot added a comment.Fri, Jul 24, 10:27 AM

Change #1314885 merged by jenkins-bot:

[mediawiki/extensions/Echo@master] Make Event::isDeleted() work for events loaded from the database

https://gerrit.wikimedia.org/r/1314885

ReleaseTaggerBot added a project: MW-1.47-notes (1.47.0-wmf.13; 2026-07-28).Fri, Jul 24, 11:01 AM
MPostoronca-WMF moved this task from In progress to Needs review on the Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)) board.Fri, Jul 24, 3:36 PM
gerritbot added a comment.Mon, Jul 27, 7:17 AM

Change #1314803 merged by jenkins-bot:

[integration/config@master] zuul: Add Echo dependency for WikimediaAntiAbuse

https://gerrit.wikimedia.org/r/1314803

gerritbot added a comment.Wed, Jul 29, 1:05 PM

Change #1319086 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[operations/mediawiki-config@master] WikimediaAntiAbuse: Document required load order after Echo

https://gerrit.wikimedia.org/r/1319086

gerritbot added a comment.Fri, Jul 31, 11:48 AM

Change #1319821 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/WikimediaAntiAbuse@master] Clear personal-info notifications when a recipient loses tag access

https://gerrit.wikimedia.org/r/1319821

gerritbot added a comment.Fri, Jul 31, 11:48 AM

Change #1319822 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/WikimediaAntiAbuse@master] Link the personal-info notification preference to a help page

https://gerrit.wikimedia.org/r/1319822

gerritbot added a comment.Fri, Jul 31, 6:34 PM

Change #1314757 merged by jenkins-bot:

[mediawiki/extensions/WikimediaAntiAbuse@master] Notify opted-in oversighters when an edit is flagged

https://gerrit.wikimedia.org/r/1314757

gerritbot added a comment.Fri, Jul 31, 8:04 PM

Change #1314758 merged by jenkins-bot:

[mediawiki/extensions/WikimediaAntiAbuse@master] Hide the flag notification preference from ineligible users

https://gerrit.wikimedia.org/r/1314758

ReleaseTaggerBot edited projects, added: MW-1.47-notes (1.47.0-wmf.14; 2026-08-04); removed: MW-1.47-notes (1.47.0-wmf.13; 2026-07-28).Fri, Jul 31, 9:00 PM
gerritbot added a comment.Tue, Aug 4, 1:19 PM

Change #1314759 merged by jenkins-bot:

[mediawiki/extensions/WikimediaAntiAbuse@master] Remove the flag notification when the revision is suppressed

https://gerrit.wikimedia.org/r/1314759

gerritbot added a comment.Tue, Aug 4, 1:42 PM

Change #1319821 merged by jenkins-bot:

[mediawiki/extensions/WikimediaAntiAbuse@master] Clear personal-info notifications when a recipient loses tag access

https://gerrit.wikimedia.org/r/1319821

gerritbot added a comment.Tue, Aug 4, 1:48 PM

Change #1319086 merged by jenkins-bot:

[operations/mediawiki-config@master] WikimediaAntiAbuse: Document required load order after Echo

https://gerrit.wikimedia.org/r/1319086

ReleaseTaggerBot edited projects, added: MW-1.47-notes (1.47.0-wmf.15; 2026-08-11); removed: MW-1.47-notes (1.47.0-wmf.14; 2026-08-04).Tue, Aug 4, 2:00 PM
Stashbot mentioned this in T433816: UserInfoCard: Include target user name in server-side instrumentation.Tue, Aug 4, 2:05 PM
Stashbot mentioned this in T432204: Review `pageview` and `pageview.trending.relative` Kafka topic sizes..

Mentioned in SAL (#wikimedia-operations) [2026-08-04T14:05:02Z] <mszwarc@deploy1003> Started scap sync-world: Backport for [[gerrit:1320757|stream: pageview.trending.relative.v1 (T432204)]], [[gerrit:1319086|WikimediaAntiAbuse: Document required load order after Echo (T432452)]], [[gerrit:1320781|UIC: Add user name to server-side instrumentation events (T433816)]], [[gerrit:1320782|UIC: Add user name to server-side instrumentation events (T433816)]]

Stashbot added a comment.Tue, Aug 4, 2:07 PM

Mentioned in SAL (#wikimedia-operations) [2026-08-04T14:07:05Z] <mszwarc@deploy1003> javiermonton, mszwarc, mpostoronca: Backport for [[gerrit:1320757|stream: pageview.trending.relative.v1 (T432204)]], [[gerrit:1319086|WikimediaAntiAbuse: Document required load order after Echo (T432452)]], [[gerrit:1320781|UIC: Add user name to server-side instrumentation events (T433816)]], [[gerrit:1320782|UIC: Add user name to server-side instrumentation events (T433816)]] synced to the testser

Stashbot added a comment.Tue, Aug 4, 2:13 PM

Mentioned in SAL (#wikimedia-operations) [2026-08-04T14:13:00Z] <mszwarc@deploy1003> Finished scap sync-world: Backport for [[gerrit:1320757|stream: pageview.trending.relative.v1 (T432204)]], [[gerrit:1319086|WikimediaAntiAbuse: Document required load order after Echo (T432452)]], [[gerrit:1320781|UIC: Add user name to server-side instrumentation events (T433816)]], [[gerrit:1320782|UIC: Add user name to server-side instrumentation events (T433816)]] (duration: 07m 58s)

MPostoronca-WMF moved this task from Needs review to QA in Prod on the Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)) board.Tue, Aug 4, 3:20 PM
gerritbot added a comment.Tue, Aug 4, 5:20 PM

Change #1319822 merged by jenkins-bot:

[mediawiki/extensions/WikimediaAntiAbuse@master] Link the personal-info notification preference to a help page

https://gerrit.wikimedia.org/r/1319822

Maintenance_bot removed a project: Patch-For-Review.Tue, Aug 4, 5:31 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits